<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:4940</id>
    <title>Important: xz security update</title>
    <issued date="2022-06-08 00:00:00"/>
    <updated date="2023-03-07 17:17:00"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xz security update</summary>
    <description>XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.
Security Fix(es):
* gzip: arbitrary-file-write vulnerability (CVE-2022-1271)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:4940" id="RHSA-2022:4940" type="rhsa" title="RHSA-2022:4940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1271" id="CVE-2022-1271" type="cve" title="CVE-2022-1271"/>
      <reference href="https://bugzilla.redhat.com/2073310" id="2073310" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-4940.html" id="ALSA-2022:4940" type="self" title="ALSA-2022:4940"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="xz-devel" version="5.2.5" release="8.el9_0" epoch="0" arch="s390x" src="xz-5.2.5-8.el9_0.src.rpm">
          <filename>xz-devel-5.2.5-8.el9_0.s390x.rpm</filename>
          <sum type="sha256">20d9ed7a0f7f5c5fa655156a6adb9f540da85b9701f12107494530440e50052b</sum>
        </package>
        <package name="xz-lzma-compat" version="5.2.5" release="8.el9_0" epoch="0" arch="s390x" src="xz-5.2.5-8.el9_0.src.rpm">
          <filename>xz-lzma-compat-5.2.5-8.el9_0.s390x.rpm</filename>
          <sum type="sha256">503225a8e5a5144b9d277f2b3f6d460ed3844387cc8aa91e91be3ffb47eb361f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5242</id>
    <title>Moderate: vim security update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2022-07-21 17:37:13"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for vim-X11 is now available for AlmaLinux 9.</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
* vim: Use of Out-of-range Pointer Offset in vim (CVE-2022-0554)
* vim: Heap-based Buffer Overflow occurs in vim (CVE-2022-0943)
* vim: Out-of-range Pointer Offset (CVE-2022-1420)
* vim: heap buffer overflow (CVE-2022-1621)
* vim: buffer over-read (CVE-2022-1629)
* vim: use after free in utf_ptr2char (CVE-2022-1154)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5242" id="RHSA-2022:5242" type="rhsa" title="RHSA-2022:5242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0554" id="CVE-2022-0554" type="cve" title="CVE-2022-0554"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0943" id="CVE-2022-0943" type="cve" title="CVE-2022-0943"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1154" id="CVE-2022-1154" type="cve" title="CVE-2022-1154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1420" id="CVE-2022-1420" type="cve" title="CVE-2022-1420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1621" id="CVE-2022-1621" type="cve" title="CVE-2022-1621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1629" id="CVE-2022-1629" type="cve" title="CVE-2022-1629"/>
      <reference href="https://bugzilla.redhat.com/2058483" id="2058483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064064" id="2064064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073013" id="2073013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2077734" id="2077734" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2083924" id="2083924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2083931" id="2083931" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5242.html" id="ALSA-2022:5242" type="self" title="ALSA-2022:5242"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="vim-X11" version="8.2.2637" release="16.el9_0.2" epoch="2" arch="s390x" src="vim-8.2.2637-16.el9_0.2.src.rpm">
          <filename>vim-X11-8.2.2637-16.el9_0.2.s390x.rpm</filename>
          <sum type="sha256">03a4d73180ead90ea0fa2a5d7fe1112705afad91379cfc23e953ef493725f90d</sum>
        </package>
        <package name="vim-common" version="8.2.2637" release="16.el9_0.2" epoch="2" arch="s390x" src="vim-8.2.2637-16.el9_0.2.src.rpm">
          <filename>vim-common-8.2.2637-16.el9_0.2.s390x.rpm</filename>
          <sum type="sha256">36f0a983449cd63197792eadaf10591f5e0bb5de015db5c7f7eda39feed4cb69</sum>
        </package>
        <package name="vim-enhanced" version="8.2.2637" release="16.el9_0.2" epoch="2" arch="s390x" src="vim-8.2.2637-16.el9_0.2.src.rpm">
          <filename>vim-enhanced-8.2.2637-16.el9_0.2.s390x.rpm</filename>
          <sum type="sha256">3e2150058b2a17e9079cb1247748574c19d2f7f95f5945889674ff0f29810e33</sum>
        </package>
        <package name="vim-minimal" version="8.2.2637" release="16.el9_0.2" epoch="2" arch="s390x" src="vim-8.2.2637-16.el9_0.2.src.rpm">
          <filename>vim-minimal-8.2.2637-16.el9_0.2.s390x.rpm</filename>
          <sum type="sha256">92f727fa397ae203b330421c16a69dcb31aba65bf8b404cac33809e68aca5862</sum>
        </package>
        <package name="vim-filesystem" version="8.2.2637" release="16.el9_0.2" epoch="2" arch="noarch" src="vim-8.2.2637-16.el9_0.2.src.rpm">
          <filename>vim-filesystem-8.2.2637-16.el9_0.2.noarch.rpm</filename>
          <sum type="sha256">c913d7a2e965f86e79605147e53d90808d00155ca9c626a98ae01fd32cced94b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5244</id>
    <title>Moderate: expat security update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2022-07-21 17:34:59"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for expat-devel is now available for AlmaLinux 9.</summary>
    <description>Expat is a C library for parsing XML documents.
Security Fix(es):
* expat: stack exhaustion in doctype parsing (CVE-2022-25313)
* expat: integer overflow in copyString() (CVE-2022-25314)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5244" id="RHSA-2022:5244" type="rhsa" title="RHSA-2022:5244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25313" id="CVE-2022-25313" type="cve" title="CVE-2022-25313"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25314" id="CVE-2022-25314" type="cve" title="CVE-2022-25314"/>
      <reference href="https://bugzilla.redhat.com/2056350" id="2056350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2056354" id="2056354" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5244.html" id="ALSA-2022:5244" type="self" title="ALSA-2022:5244"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="expat" version="2.2.10" release="12.el9_0.2" epoch="0" arch="s390x" src="expat-2.2.10-12.el9_0.2.src.rpm">
          <filename>expat-2.2.10-12.el9_0.2.s390x.rpm</filename>
          <sum type="sha256">4ace1782eef776177825151bd82580cd2ceb4861364078c3f52bd4ad3dbe012e</sum>
        </package>
        <package name="expat-devel" version="2.2.10" release="12.el9_0.2" epoch="0" arch="s390x" src="expat-2.2.10-12.el9_0.2.src.rpm">
          <filename>expat-devel-2.2.10-12.el9_0.2.s390x.rpm</filename>
          <sum type="sha256">97d12027bc9d361dad2d06d6ec8cd7609711d85cf3f32b87dfc448f5c028cb56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5249</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for kernel-debug-devel is now available for AlmaLinux 9.</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012)
* kernel: race condition in perf_event_open leads to privilege escalation (CVE-2022-1729)
* kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root (CVE-2022-1966)
* kernel: buffer overflow in IPsec ESP transformation code (CVE-2022-27666)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* make SHA512_arch algos and CRYPTO_USER built-ins (BZ#2072643)
* SR-IOV performance &gt; 50% degradation (BZ#2074830)
* fix data corruption caused by dm-integrity (BZ#2082187)
* SCTP client-side peeloff issues [almalinux-9] (BZ#2084044)
* TCP connection fails in a asymmetric routing situation (BZ#2085480)
* Fails to boot Multiple RT VMs each with multiple vCPUs (BZ#2086963)
* spec: Fix separate tools build (BZ#2090852)
* call traces related to eeh_pseries observed and vmcore is not captured, when kdump is triggered (BZ#2092255)
* Mark ThunderX NIC driver as unmaintained (BZ#2092638)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5249" id="RHSA-2022:5249" type="rhsa" title="RHSA-2022:5249"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1012" id="CVE-2022-1012" type="cve" title="CVE-2022-1012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1729" id="CVE-2022-1729" type="cve" title="CVE-2022-1729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1966" id="CVE-2022-1966" type="cve" title="CVE-2022-1966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27666" id="CVE-2022-27666" type="cve" title="CVE-2022-27666"/>
      <reference href="https://bugzilla.redhat.com/2061633" id="2061633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064604" id="2064604" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2086753" id="2086753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092427" id="2092427" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5249.html" id="ALSA-2022:5249" type="self" title="ALSA-2022:5249"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="kernel-headers" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-headers-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">1c8f71752eec52043fa93d04aaff6076261ca9fd2679c3d94714c0c834a464cc</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-modules-extra-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">1ec4ede320d001664c8588badd6afd423a2acd329cc6e64f07af99cd7ec48090</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">21bf850a94070a9756bf1f981871a72c6b68f3d86bd38134cb022dd5120a2796</sum>
        </package>
        <package name="bpftool" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>bpftool-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">244ac2d837d13480740573f17f2eaaf456869d3a0840552e6e6920901734bf68</sum>
        </package>
        <package name="kernel" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">314d778b6be5d713ae41d4f58cb4a64ad0c7cc2854670ec8e68cacd91e49b181</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-modules-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">3ca98aa034f59f852971c2702560ed1388efdbdf398a6670db7c20da7e92e9b8</sum>
        </package>
        <package name="kernel-modules-extra" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-modules-extra-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">558dde9fc36d95194d371d5c27fc794583d3de90dce8a2cf4d2304a6f7506149</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">5d5f0c5bff8b736157a4a24572b0162cee9707477c21852b9d9df03b3879e22c</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-devel-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">6334b0646f96c354c423698f8329fab0079df4edbd6a5aa3467964d8d1567002</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">658549321f30ace030c5c72fe90e6cbdd5bf2551a2b55daed5bff216f0c7c159</sum>
        </package>
        <package name="kernel-zfcpdump-core" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-core-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">65d553578602c4e9fc437fa6a4e3b1c4076a0ced949f789caa74ebe4c17d3e6d</sum>
        </package>
        <package name="kernel-abi-stablelists" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-70.17.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">6c1459fb8b333303c7d981e116ccc0720c4f02c49ad9b933a93cdd2a4dc0f103</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">7c54210e0be71079246cd34b46627014d9522645b6bb2a4486a0d02f1fe865ae</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-doc-5.14.0-70.17.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">809a6a2193762c20c65675927231f196c18a5b97e6832f1fe1714467a5b785ca</sum>
        </package>
        <package name="kernel-debug" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">8aa147e5ec9235aee462c8b5bcb6e2c6454a160c2d57114be4cd021bbdecf9c7</sum>
        </package>
        <package name="kernel-modules" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-modules-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">8b954b3ab01b4bf0f424b3ed01b81a0fd64a015a0dec0a1bb5ab863d2d3de4c0</sum>
        </package>
        <package name="kernel-core" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-core-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">93315084094f716e88d54b94209d535d4eeee881a1ce1384a37f90b1d16a1c0a</sum>
        </package>
        <package name="kernel-debug-modules" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-modules-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">aaf3bfd0e4346e57416fa6f724b1b8d619b8b08b08c13b14e9d2039a3f0a9b2a</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>python3-perf-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ab0fa74098a5514fb46ca338eb7bc274fddd7e10ce2361c96092ef330e126913</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-devel-matched-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">cefa7a0c97b2176f753be90c54c736e34c6f7a5c5671f8f1b5b817c08decadbd</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-cross-headers-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">e51de7eefdd482ee1828547e50c2c017b4b6433291162bd6a169cb0914ca6faa</sum>
        </package>
        <package name="perf" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>perf-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">eec19c4e3c60b5a285cd1fee662fe86685c711c0c79be9f9d9508595a1cc5b81</sum>
        </package>
        <package name="kernel-debug-core" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-core-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">f05d2a35aa7b3e12978a03fde79baf265bce773440705f5f3eba09e71ee878a1</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">f11f05b73093541bda0044829365bae37a37b3114bacc6daa1fd58b90f74dddb</sum>
        </package>
        <package name="kernel-tools" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-tools-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">fd39899f2b2afa6d0ac39d08490ef8d3df92182231efb62d02e367640a6fea0e</sum>
        </package>
        <package name="kernel-zfcpdump" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">fe84a39abf81c37637e91cecbec7dfe33ab9868d1cb12434f0bc2844731427f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5252</id>
    <title>Moderate: libarchive security update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2022-07-21 17:29:06"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for bsdtar is now available for AlmaLinux 9.</summary>
    <description>The libarchive programming library can create and read several different
streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images.
Libarchive is used notably in the bsdtar utility, scripting language bindings
such as python-libarchive, and several popular desktop file managers.
Security Fix(es):
* libarchive: an out-of-bounds read via the component zipx_lzma_alone_init
(CVE-2022-26280)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5252" id="RHSA-2022:5252" type="rhsa" title="RHSA-2022:5252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26280" id="CVE-2022-26280" type="cve" title="CVE-2022-26280"/>
      <reference href="https://bugzilla.redhat.com/2071931" id="2071931" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5252.html" id="ALSA-2022:5252" type="self" title="ALSA-2022:5252"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="libarchive" version="3.5.3" release="2.el9_0" epoch="0" arch="s390x" src="libarchive-3.5.3-2.el9_0.src.rpm">
          <filename>libarchive-3.5.3-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">9d9a21f53de7ffbe1585ec4f93c5fe2b29e32232fa87d0919796e4ff9b28b6a7</sum>
        </package>
        <package name="bsdtar" version="3.5.3" release="2.el9_0" epoch="0" arch="s390x" src="libarchive-3.5.3-2.el9_0.src.rpm">
          <filename>bsdtar-3.5.3-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">a91013540de7ae254a64677c1040c97435f3aa4858a049101e762cb4944777bf</sum>
        </package>
        <package name="libarchive-devel" version="3.5.3" release="2.el9_0" epoch="0" arch="s390x" src="libarchive-3.5.3-2.el9_0.src.rpm">
          <filename>libarchive-devel-3.5.3-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">cf08e05da34f5fe074325ed87c077de2deb35197eb5ac2a158788053b1a07afe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5257</id>
    <title>Moderate: libinput security update</title>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-07-21 17:40:13"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libinput is now available for AlmaLinux 9.</summary>
    <description>libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices.
Security Fix(es):
* libinput: format string vulnerability may lead to privilege escalation (CVE-2022-1215)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5257" id="RHSA-2022:5257" type="rhsa" title="RHSA-2022:5257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1215" id="CVE-2022-1215" type="cve" title="CVE-2022-1215"/>
      <reference href="https://bugzilla.redhat.com/2074952" id="2074952" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5257.html" id="ALSA-2022:5257" type="self" title="ALSA-2022:5257"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="libinput-utils" version="1.19.3" release="2.el9_0" epoch="0" arch="s390x" src="libinput-1.19.3-2.el9_0.src.rpm">
          <filename>libinput-utils-1.19.3-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">4560a3a6f9ca2e4d69c3ce9561c995289d9a49b22750997c81015a85befbf27d</sum>
        </package>
        <package name="libinput-devel" version="1.19.3" release="2.el9_0" epoch="0" arch="s390x" src="libinput-1.19.3-2.el9_0.src.rpm">
          <filename>libinput-devel-1.19.3-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">6f100677750e4ecd29d96fe5b9170fb472dd8fd1ee77b08026a6755a2a631ea5</sum>
        </package>
        <package name="libinput" version="1.19.3" release="2.el9_0" epoch="0" arch="s390x" src="libinput-1.19.3-2.el9_0.src.rpm">
          <filename>libinput-1.19.3-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">a28458e552b4ce640eb13c9d505b54de8f347cdec5b781427db7c08603425539</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5263</id>
    <title>Moderate: qemu-kvm security and bug fix update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2022-07-21 17:32:08"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for qemu-guest-agent is now available for AlmaLinux 9.</summary>
    <description>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.
Security Fix(es):
* QEMU: virtio-net: map leaking on error during receive (CVE-2022-26353)
* QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak (CVE-2022-26354)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* AlmaLinux 9.0 guest with vsock device migration failed from AlmaLinux 9.0 &gt; AlmaLinux 8.6 (BZ#2071102)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5263" id="RHSA-2022:5263" type="rhsa" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26353" id="CVE-2022-26353" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26354" id="CVE-2022-26354" type="cve" title=""/>
      <reference href="https://bugzilla.redhat.com/2063197" id="2063197" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2063257" id="2063257" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5263.html" id="ALSA-2022:5263" type="self" title="ALSA-2022:5263"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="qemu-kvm-device-display-virtio-gpu" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">147391f3bfe04251b171a59d1bc0e47b6f87ea62037217943765901fcb78f5d0</sum>
        </package>
        <package name="qemu-kvm-common" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-kvm-common-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">184c7cbd98a3ffd7d9e43543f60f214b266f76ff427ba755b4f61c5fb030257d</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu-ccw" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-ccw-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">2a18b6ae03485f7108f4b09709be2bbf39700e880fd19e4eba7129c8aac5c985</sum>
        </package>
        <package name="qemu-kvm-tools" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-kvm-tools-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">2d39c882d5cddfbbabdb483daa456b621c40f98a0d11440e720dc38eb902692a</sum>
        </package>
        <package name="qemu-kvm" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-kvm-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">38ebd93db5916a8c681c4b3e11cf2271fd17f33fd4e35da37585ef67e2a861e7</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu-gl" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-gl-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">477b11b32a456b3401bdf0b9cb5284110c30f27b25a4321e01c97efed1d10fed</sum>
        </package>
        <package name="qemu-kvm-docs" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-kvm-docs-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">4bd0a2df1ab6d3fe3ce0d3596461a0e25e891fcfce4606530652422161b77711</sum>
        </package>
        <package name="qemu-kvm-device-usb-host" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-kvm-device-usb-host-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">73b66c30d47a428274c1c77a32662085e18609aa3b1c7d3176394a760cac262e</sum>
        </package>
        <package name="qemu-kvm-audio-pa" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-kvm-audio-pa-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">7ac1cc10803d52694b70f934306be1912b24797b292c84b83c97aed29f492e2c</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-kvm-block-rbd-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">8538d4126f3317c203d3820c680a8fb2709c48e86f254ba387fdfe77d5eb214d</sum>
        </package>
        <package name="qemu-guest-agent" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-guest-agent-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">98439535d452e8ed4843e6e268638c759943010f57ffc5613ee438ce97a15ee3</sum>
        </package>
        <package name="qemu-kvm-core" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-kvm-core-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">9a7aaf8cdf26300d5b3e0febf367ada039b9e485e7538c1a3d7042f447a5e3ae</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-kvm-block-curl-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">c32ff02aa439bf5616c9150d0f892c09b02d79b32d05e87ca4e012443c12dcb6</sum>
        </package>
        <package name="qemu-pr-helper" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-pr-helper-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">deb951466415bb314da21710c395caea58bed03acdf5042bd7a00c8a6d1a8aaa</sum>
        </package>
        <package name="qemu-img" version="6.2.0" release="11.el9_0.3" epoch="17" arch="s390x" src="qemu-kvm-6.2.0-11.el9_0.3.src.rpm">
          <filename>qemu-img-6.2.0-11.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">f715b74f3dcf4831f9a96623d1d48bb8d9aebf75f020b54c582fb852c20d71e9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5482</id>
    <title>Important: thunderbird security update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2022-07-21 17:26:43"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for thunderbird is now available for AlmaLinux 9.</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 91.11.
Security Fix(es):
* Mozilla: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (CVE-2022-34468)
* Mozilla: Use-after-free in nsSHistory (CVE-2022-34470)
* Mozilla: A popup window could be resized in a way to overlay the address bar with web content (CVE-2022-34479)
* Mozilla: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 (CVE-2022-34484)
* Mozilla: Undesired attributes could be set as part of prototype pollution (CVE-2022-2200)
* Mozilla: An email with a mismatching OpenPGP signature date was accepted as valid (CVE-2022-2226)
* Mozilla: CSP bypass enabling stylesheet injection (CVE-2022-31744)
* Mozilla: Unavailable PAC file resulted in OCSP requests being blocked (CVE-2022-34472)
* Mozilla: Potential integer overflow in ReplaceElementsAt (CVE-2022-34481)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5482" id="RHSA-2022:5482" type="rhsa" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2200" id="CVE-2022-2200" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2226" id="CVE-2022-2226" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31744" id="CVE-2022-31744" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34468" id="CVE-2022-34468" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34470" id="CVE-2022-34470" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34472" id="CVE-2022-34472" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34479" id="CVE-2022-34479" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34481" id="CVE-2022-34481" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34484" id="CVE-2022-34484" type="cve" title=""/>
      <reference href="https://bugzilla.redhat.com/2102161" id="2102161" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2102162" id="2102162" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2102163" id="2102163" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2102164" id="2102164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2102165" id="2102165" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2102166" id="2102166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2102168" id="2102168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2102169" id="2102169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2102204" id="2102204" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5482.html" id="ALSA-2022:5482" type="self" title="ALSA-2022:5482"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="thunderbird" version="91.11.0" release="2.el9_0.alma" epoch="0" arch="s390x" src="thunderbird-91.11.0-2.el9_0.alma.src.rpm">
          <filename>thunderbird-91.11.0-2.el9_0.alma.s390x.rpm</filename>
          <sum type="sha256">9b274df61c6ef47c60a49a937fffdd363dc3dcb647ed3fd8e34cd2834e22749e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5527</id>
    <title>Important: squid security update</title>
    <issued date="2022-07-07 00:00:00"/>
    <updated date="2022-07-21 17:04:18"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for squid is now available for AlmaLinux 9.</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
* squid: DoS when processing gopher server responses (CVE-2021-46784)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5527" id="RHSA-2022:5527" type="rhsa" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46784" id="CVE-2021-46784" type="cve" title=""/>
      <reference href="https://bugzilla.redhat.com/2100721" id="2100721" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5527.html" id="ALSA-2022:5527" type="self" title="ALSA-2022:5527"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="squid" version="5.2" release="1.el9_0.1" epoch="7" arch="s390x" src="squid-5.2-1.el9_0.1.src.rpm">
          <filename>squid-5.2-1.el9_0.1.s390x.rpm</filename>
          <sum type="sha256">7df384b54cb6fd1394e05d220d400324b307abe46cf75b19119b576f4ab68400</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5695</id>
    <title>Important: java-11-openjdk security, bug fix, and enhancement update</title>
    <issued date="2022-07-25 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for java-11-openjdk is now available for AlmaLinux 9.</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.
The following packages have been upgraded to a later upstream version: java-11-openjdk (11.0.16.0.8). (BZ#2084777)
Security Fix(es):
* OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169)
* OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540)
* OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* rh1991003 patch breaks sun.security.pkcs11.wrapper.PKCS11.getInstance() [almalinux-9, openjdk-11] (BZ#2099915)
* SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode [almalinux-9, openjdk-11] (BZ#2107866)
* Revert to disabling system security properties and FIPS mode support together [almalinux-9, openjdk-11] (BZ#2107868)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5695" id="RHSA-2022:5695" type="rhsa" title="RHSA-2022:5695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21540" id="CVE-2022-21540" type="cve" title="CVE-2022-21540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21541" id="CVE-2022-21541" type="cve" title="CVE-2022-21541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34169" id="CVE-2022-34169" type="cve" title="CVE-2022-34169"/>
      <reference href="https://bugzilla.redhat.com/2108540" id="2108540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108543" id="2108543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108554" id="2108554" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5695.html" id="ALSA-2022:5695" type="self" title="ALSA-2022:5695"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="java-11-openjdk" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">2100fb0b0c65db8d9d84b03d4f2c7989a9ca18c126be06a1b11a83cfa7e36488</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">2e0b0fb62c9287f3876a393afb7fae722daedf1d06535eb8fb1129512b2fb123</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">30d6e0be63968c22f1340152fa60d4f9e25a9bb8b63df9c11a9051ee20bfade3</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">384c8917d813c69fb0c2b90f57c3f20ee2e74842ba08fa3dc086156b367cf03c</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">448b9c34d7fb4bef0d11cdb013c2c7031887a1ff947979ec0aac227bd3140d5b</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">5488e365ed8e636eb0d266825dbc2e4a113349d3e15052b55594005c59ecf13f</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">5c484910d3c26532111dfbf37da5572ddde1ce20de1c89dc619bbf4f5eb588b9</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-demo-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">624d7dd68d3358bbf16362575941d8a0c29ece83e27e8e7cdf19d4a93bdcec6c</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">823f3c1319841869e735533ae5330c54d2f700d017bdb880a4c639211b586558</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">87a06c2355a91726b0a58519132e2643291885c2dd07884b467c1107c8f75155</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">93822026212ec5999f27829e7c8aa1fe52a50b935c717b649930f1a23f83f3c7</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ab768747d3ef855a62cd12c77420b86c5960baec93e5e2b7aa2ae9bee6f6bea6</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">cd6273eeffd83d107e86f6a6108a731b85d21021136b038a032b82c0c0812eab</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-headless-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">cdb6b8354d443f46f625f7a9fb3695272aa5539d2efe1621ac4df1c6f0af8aa9</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-devel-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">df5c4e62cb0f9e96d5303e0a779d687b46bdbecf84317c83af3a2537da02bc2a</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-src-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">f0808c76eb4d6cc7f231b0354cd8a4c16deefd627aaea81a57a4d5dd207fa146</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5709</id>
    <title>Important: java-1.8.0-openjdk security, bug fix, and enhancement update</title>
    <issued date="2022-07-25 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-openjdk is now available for AlmaLinux 9.</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.
The following packages have been upgraded to a later upstream version: java-1.8.0-openjdk (1.8.0.342.b07). (BZ#2084776)
Security Fix(es):
* OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169)
* OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540)
* OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* rh1991003 patch breaks sun.security.pkcs11.wrapper.PKCS11.getInstance() [almalinux-9, openjdk-8] (BZ#2099916)
* SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode [almalinux-9, openjdk-8] (BZ#2107956)
* Revert to disabling system security properties and FIPS mode support together [almalinux-9, openjdk-8] (BZ#2107958)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5709" id="RHSA-2022:5709" type="rhsa" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21540" id="CVE-2022-21540" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21541" id="CVE-2022-21541" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34169" id="CVE-2022-34169" type="cve" title=""/>
      <reference href="https://bugzilla.redhat.com/2108540" id="2108540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108543" id="2108543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108554" id="2108554" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5709.html" id="ALSA-2022:5709" type="self" title="ALSA-2022:5709"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.342.b07-1.el9_0.noarch.rpm</filename>
          <sum type="sha256">016c0c76cdcb9e6561492bf3c35a2cedde2695d2d3573cb0ca2a4fa753bf5a75</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.342.b07-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">29c7366dcbd590099906bfc35189e7a3021f445ff493e2c61f7b48eb2b9a07a9</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.342.b07-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">42e346332d01180b339ed65516228075b44c257531f81eca17c5457cdef5ec63</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ccb707fb101b9f45b3b3a97b34c57923a65ae21b788b2bacdc97f0876eb13d4b</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.342.b07-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">d849852e7b3d1781ce869688385a0c0756d723067019f804829e762f78418e29</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.342.b07-1.el9_0.noarch.rpm</filename>
          <sum type="sha256">eef6d2e8806b1e7e959d8ea2224f3ff6f2aa5e4802e5b61ddcebf3adad114d9b</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.342.b07" release="1.el9_0" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.342.b07-1.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.342.b07-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">f0539609f45106e9d1570ed9248e2ffa51790b35a7d1d0459b8d37c4fe390ab2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5716</id>
    <title>Important: grafana security update</title>
    <issued date="2022-07-26 00:00:00"/>
    <updated date="2022-07-28 09:25:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for grafana is now available for AlmaLinux 9.</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for
Graphite, InfluxDB &amp; OpenTSDB.
Security Fix(es):
* grafana: OAuth account takeover (CVE-2022-31107)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5716" id="RHSA-2022:5716" type="rhsa" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31107" id="CVE-2022-31107" type="cve" title=""/>
      <reference href="https://bugzilla.redhat.com/2104367" id="2104367" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5716.html" id="ALSA-2022:5716" type="self" title="ALSA-2022:5716"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="grafana" version="7.5.11" release="5.el9_0" epoch="0" arch="s390x" src="grafana-7.5.11-5.el9_0.src.rpm">
          <filename>grafana-7.5.11-5.el9_0.s390x.rpm</filename>
          <sum type="sha256">2db72859aaf9127b8405f4bf0ed1088f083637bcc425998920079d262ff24613</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5736</id>
    <title>Important: java-17-openjdk security, bug fix, and enhancement update</title>
    <issued date="2022-07-27 00:00:00"/>
    <updated date="2022-08-05 17:18:57"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security, bug fix, and enhancement update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.
The following packages have been upgraded to a later upstream version: java-17-openjdk (17.0.4.0.8). (BZ#2084779)
Security Fix(es):
* OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169)
* OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540)
* OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541)
* OpenJDK: random exponentials issue (Libraries, 8283875) (CVE-2022-21549)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Previous AlmaLinux builds of OpenJDK 17 altered the arguments passed to sun.security.pkcs11.wrapper.PKCS11.getInstance() in order to facilitate FIPS support. This build adds an additional form of the method, retaining the original arguments, so that applications which depend on this internal method continue to function with AlmaLinux builds of OpenJDK. (BZ#2099919)
* With previous AlmaLinux builds of OpenJDK 17, Mac key generation and import would fail due to the lack of the CKA_SIGN attribute on the key. This attribute is now added as part of the NSS FIPS configuration. (BZ#2105395)
* With the release of AlmaLinux, a change was made so that disabling OpenJDK FIPS mode required the use of both the -Djava.security.disableSystemPropertiesFile=true and -Dcom.AlmaLinux.fips=false options, with the intention that FIPS mode could be controlled independently of system security properties. This change has now been reverted and only -Djava.security.disableSystemPropertiesFile=true is required to disable FIPS mode, as in AlmaLinux. (BZ#2107941)
* Previous AlmaLinux builds of OpenJDK 17 running in FIPS mode with a SecurityManager would fail due to a lack of module access permissions. This has now been corrected. (BZ#2107943)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5736" id="RHSA-2022:5736" type="rhsa" title="RHSA-2022:5736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21540" id="CVE-2022-21540" type="cve" title="CVE-2022-21540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21541" id="CVE-2022-21541" type="cve" title="CVE-2022-21541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21549" id="CVE-2022-21549" type="cve" title="CVE-2022-21549"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34169" id="CVE-2022-34169" type="cve" title="CVE-2022-34169"/>
      <reference href="https://bugzilla.redhat.com/2108540" id="2108540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108543" id="2108543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108547" id="2108547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108554" id="2108554" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5736.html" id="ALSA-2022:5736" type="self" title="ALSA-2022:5736"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">24db0f88c67f9550e87167dfda19daf9ca29474b397247762f9a47e7d5b011b8</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-headless-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">2b93f408a31923006f19c413154b7eec765ee7b53628c113ad5364b9a1b0ce16</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">34fe937d82ab93004edf7be54669f70a19ec72240689bfe288323298b1d07436</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-src-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">387aea975f89f436cd1b2a9ee32b7d614381027f7badc81a0a61c0ffb4d95119</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">3f7846224b077c69826909ae8f82ecec039ca52da03c91ce04cca1d745dfd8a8</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">62ddfe081f89a21c2668bdd1ffad3fdee7c6117df6eab86f412b32f1d274540a</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-devel-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">6771617bef156727698c7aab9cc6abb1a483e90634629d0bf2685a356c588749</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">722c850f0f06a8b092de99623e3d24892372182ff1056586645524796b6fd809</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">7ce758d7226ecc78bfb76bfe73ca6f2abc1a796c15b27764224bedd3db45c54e</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">95f144cf0823b9fd736bc02a3c6e6940bcd8b978bac3a9dfdd386f9176efa9b2</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">9e20e557167a421e5b322eb2fd2e383122f757b0c57921e207b41737d2859471</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-demo-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">b193b74ef98fc43242a4acfc7f1448286ea6e029bed92591b0cffc389c1102c1</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">de6a8848752ec754063a4913f108c5c704445767d7717fbe4859714fb9c74bfa</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">e7ce0ff503f361e9749c61e9c4f180764366a579a068e10e7b2b427b1aacd148</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">f3ff12b9089a06177e25f59635deecae412dd7d21c1d6aec51bcb28d522e40ce</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">f6b3c11d4d12c836ec3ff792d549394f66add574e64d7e612a66560978f73fb6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5799</id>
    <title>Important: go-toolset and golang security and bug fix update</title>
    <issued date="2022-08-01 00:00:00"/>
    <updated date="2022-08-05 15:29:10"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset and golang security and bug fix update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 
The golang packages provide the Go programming language compiler.
Security Fix(es):
* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)
* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)
* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)
* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Clean up dist-git patches (BZ#2109174)
* Update Go to version 1.17.12 (BZ#2109183)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5799" id="RHSA-2022:5799" type="rhsa" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1705" id="CVE-2022-1705" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1962" id="CVE-2022-1962" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28131" id="CVE-2022-28131" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30630" id="CVE-2022-30630" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30631" id="CVE-2022-30631" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30632" id="CVE-2022-30632" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30633" id="CVE-2022-30633" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30635" id="CVE-2022-30635" type="cve" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32148" id="CVE-2022-32148" type="cve" title=""/>
      <reference href="https://bugzilla.redhat.com/2107342" id="2107342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107371" id="2107371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107374" id="2107374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107376" id="2107376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107383" id="2107383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107386" id="2107386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107388" id="2107388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107390" id="2107390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107392" id="2107392" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5799.html" id="ALSA-2022:5799" type="self" title="ALSA-2022:5799"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="golang-src" version="1.17.12" release="1.el9_0" epoch="0" arch="noarch" src="golang-1.17.12-1.el9_0.src.rpm">
          <filename>golang-src-1.17.12-1.el9_0.noarch.rpm</filename>
          <sum type="sha256">0b7982ba93764e9d97bdd2937f55dbc99d9e1b594393d05ca6186d4023556dac</sum>
        </package>
        <package name="golang-tests" version="1.17.12" release="1.el9_0" epoch="0" arch="noarch" src="golang-1.17.12-1.el9_0.src.rpm">
          <filename>golang-tests-1.17.12-1.el9_0.noarch.rpm</filename>
          <sum type="sha256">72104a38591636eb5347c52dc7fc99796145050bce5c947969d9ddfc3faa4dbb</sum>
        </package>
        <package name="golang-misc" version="1.17.12" release="1.el9_0" epoch="0" arch="noarch" src="golang-1.17.12-1.el9_0.src.rpm">
          <filename>golang-misc-1.17.12-1.el9_0.noarch.rpm</filename>
          <sum type="sha256">752b856860d0d280cc130b91e5b23392fa0011704db90256af79fa7b6dcf10e2</sum>
        </package>
        <package name="golang" version="1.17.12" release="1.el9_0" epoch="0" arch="s390x" src="golang-1.17.12-1.el9_0.src.rpm">
          <filename>golang-1.17.12-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">8c3dc7b1b40ecd48a29e8dedbcd40da581f99567b9fc13bd69559c70eb096294</sum>
        </package>
        <package name="golang-docs" version="1.17.12" release="1.el9_0" epoch="0" arch="noarch" src="golang-1.17.12-1.el9_0.src.rpm">
          <filename>golang-docs-1.17.12-1.el9_0.noarch.rpm</filename>
          <sum type="sha256">c8197d076419d8de01726a8e6e5818593a8c2358bc4afb2843a93e69a9a69daf</sum>
        </package>
        <package name="golang-bin" version="1.17.12" release="1.el9_0" epoch="0" arch="s390x" src="golang-1.17.12-1.el9_0.src.rpm">
          <filename>golang-bin-1.17.12-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">e849bfad0f4fbaa1148803a9e13181ccf4eb48f476e49cebb7282fa36cc45b06</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5904</id>
    <title>Important: php security update</title>
    <issued date="2022-08-04 00:00:00"/>
    <updated date="2022-08-10 17:34:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>php security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.
Security Fix(es):
* php: password of excessive length triggers buffer overflow leading to RCE (CVE-2022-31626)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5904" id="RHSA-2022:5904" type="rhsa" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31626" id="CVE-2022-31626" type="cve" title=""/>
      <reference href="https://bugzilla.redhat.com/2098523" id="2098523" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5904.html" id="ALSA-2022:5904" type="self" title="ALSA-2022:5904"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="php-enchant" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-enchant-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">01d7a91a61725f06a19b2ed4f82f64d41611f1c176dcff906e889238230fe784</sum>
        </package>
        <package name="php-common" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-common-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">0285b51a315e95e522c7ad9bd24e1458f24030ac29bcb66b1eda8a18b4f91e1d</sum>
        </package>
        <package name="php-fpm" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-fpm-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">22b016a4a70d6f883fc750b0f2aa45843f848e3693139a58f3aa0e4d2896b73e</sum>
        </package>
        <package name="php-soap" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-soap-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">26eb832673c1772919a81131aaa4a8293419de1e1e00176be730bad0c1c75bdb</sum>
        </package>
        <package name="php-bcmath" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-bcmath-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">3d99693bbf0ce7e68dc7df8c66ca4456c782e2cb9d6a623c841dea9648c7f626</sum>
        </package>
        <package name="php-odbc" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-odbc-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">3fba1ac53ba5c693eb84469307bf3450720544af147285537a052b13b074a990</sum>
        </package>
        <package name="php-devel" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-devel-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">56008684226ea1ea4d130ae055bb4fdef393c9bd4a4aadf6abfed0b5e467b805</sum>
        </package>
        <package name="php-mysqlnd" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-mysqlnd-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">6bd5a76a53df3880b18b1954e4605f8faa39956837903ac0bdc6403a82210cec</sum>
        </package>
        <package name="php-ldap" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-ldap-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">6e6ecf1e96475f5f4d1db9b5c51c0b76179b67b35e773b62639d417bfd1acbc5</sum>
        </package>
        <package name="php-embedded" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-embedded-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">7cef904e28b70a33a02e0bd78a4d898c5b5779762f9ada47059447f2e864d82a</sum>
        </package>
        <package name="php-ffi" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-ffi-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">84b4568dd750f6a5ee4384556df20ff09d3442e4d8085228f7a3fc9cf3889a53</sum>
        </package>
        <package name="php-dba" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-dba-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">8a9132b3bd89ff1efe8170c60d0cb8f361a8a64e2b7c3cd7cb159fd6b9cd0cbc</sum>
        </package>
        <package name="php-gmp" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-gmp-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">9f50e9c0924f85b6446b889fd403e774a6e2c87da8e90defdf7f14142f260d06</sum>
        </package>
        <package name="php" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">b5214ce1dea8ce9dbcca7813d2ddd9a8b4685cb32566e2e7d1be393de1ed817b</sum>
        </package>
        <package name="php-process" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-process-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">b5fb20434b27b9560a98340205ad76c4d86c892466d69ef9ca310071fffe817c</sum>
        </package>
        <package name="php-opcache" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-opcache-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">b825b80d9fbe750edbb999e2df9ebf75c40aa04ddc14952981671fc8c3c2b7ff</sum>
        </package>
        <package name="php-snmp" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-snmp-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">c6ba959e954243073a80e057354d8216d3737b385ab895cd04c87717699cec5d</sum>
        </package>
        <package name="php-pgsql" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-pgsql-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">c7bdb07c89feaf9ff0aac3f5f7630827f63ee6e81b73d5df281c21d927a20347</sum>
        </package>
        <package name="php-intl" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-intl-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">c807b5f45cd82ac25c865a04328344068badcec5865efa5ee9ab4f54187c53af</sum>
        </package>
        <package name="php-mbstring" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-mbstring-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">df34884ecb3a2a1ceeb47316e1858396ebb81a99b27660194ad91877d70f23bf</sum>
        </package>
        <package name="php-xml" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-xml-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">eb3757cde6bcdd6fa1fbc1c265e0c2c94d01fd1e0db3e37a154d846e0fbe92e6</sum>
        </package>
        <package name="php-gd" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-gd-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">ed775187df856b553f7dfbd877420a5607aa03183bf0fa142363f56311acafb7</sum>
        </package>
        <package name="php-cli" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-cli-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">ef1714fd3ac9a0760172438a588ed8aa72946f853449069da293b0a1fabb7e8c</sum>
        </package>
        <package name="php-pdo" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-pdo-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">efd0fc1052bd1bcdfb1298384947ed5dfd1f8b6838149a64ba89769697ca96ee</sum>
        </package>
        <package name="php-dbg" version="8.0.13" release="2.el9_0" epoch="0" arch="s390x" src="php-8.0.13-2.el9_0.src.rpm">
          <filename>php-dbg-8.0.13-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">f797cf333ab10e14ff0e32779210da9899607fee35086bbed47e13549d04d845</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5942</id>
    <title>Moderate: vim security update</title>
    <issued date="2022-08-09 00:00:00"/>
    <updated date="2022-08-10 17:16:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
* vim: Out-of-bounds Write (CVE-2022-1785)
* vim: out-of-bounds write in vim_regsub_both() in regexp.c (CVE-2022-1897)
* vim: buffer over-read in utf_ptr2char() in mbyte.c (CVE-2022-1927)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5942" id="RHSA-2022:5942" type="rhsa" title="RHSA-2022:5942"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1785" id="CVE-2022-1785" type="cve" title="CVE-2022-1785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1897" id="CVE-2022-1897" type="cve" title="CVE-2022-1897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1927" id="CVE-2022-1927" type="cve" title="CVE-2022-1927"/>
      <reference href="https://bugzilla.redhat.com/2088689" id="2088689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2091682" id="2091682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2091687" id="2091687" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5942.html" id="ALSA-2022:5942" type="self" title="ALSA-2022:5942"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="vim-enhanced" version="8.2.2637" release="16.el9_0.3" epoch="2" arch="s390x" src="vim-8.2.2637-16.el9_0.3.src.rpm">
          <filename>vim-enhanced-8.2.2637-16.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">6361babcc548c897029de08f018eb55e858f26a68c7a94218f771cc7fa9052b0</sum>
        </package>
        <package name="vim-filesystem" version="8.2.2637" release="16.el9_0.3" epoch="2" arch="noarch" src="vim-8.2.2637-16.el9_0.3.src.rpm">
          <filename>vim-filesystem-8.2.2637-16.el9_0.3.noarch.rpm</filename>
          <sum type="sha256">85377e40c2d0d6abc50777ec8eb90ec6a20cc2cc106fcb471585ad16ed4f920f</sum>
        </package>
        <package name="vim-minimal" version="8.2.2637" release="16.el9_0.3" epoch="2" arch="s390x" src="vim-8.2.2637-16.el9_0.3.src.rpm">
          <filename>vim-minimal-8.2.2637-16.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">af63cc7bc1dc8a4616bfc2b8a2820972901ad04f084c5d768de792d2136b3d9a</sum>
        </package>
        <package name="vim-common" version="8.2.2637" release="16.el9_0.3" epoch="2" arch="s390x" src="vim-8.2.2637-16.el9_0.3.src.rpm">
          <filename>vim-common-8.2.2637-16.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">e59a743b18e4a8f310497504b01ffd7a06d7e996c4473cdec3cbe9c3dde1f11a</sum>
        </package>
        <package name="vim-X11" version="8.2.2637" release="16.el9_0.3" epoch="2" arch="s390x" src="vim-8.2.2637-16.el9_0.3.src.rpm">
          <filename>vim-X11-8.2.2637-16.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">f17a910d139e0cce5c73a92b5fab9e34da10ac7e834ee01bb36b99bda7bf9a92</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5948</id>
    <title>Moderate: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update</title>
    <issued date="2022-08-09 00:00:00"/>
    <updated date="2022-08-10 06:58:59"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>galera, mariadb, and mysql-selinux security, bug fix, and enhancement update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. 
The following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16), mysql-selinux (1.0.5).
Security Fix(es):
* mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669)
* mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048)
* mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050)
* mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051)
* mariadb: CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability (CVE-2022-24052)
* mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376)
* mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377)
* mariadb: server crash in create_tmp_table::finalize (CVE-2022-27378)
* mariadb: server crash in component arg_comparator::compare_real_fixed (CVE-2022-27379)
* mariadb: server crash at my_decimal::operator= (CVE-2022-27380)
* mariadb: server crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381)
* mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order (CVE-2022-27382)
* mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383)
* mariadb: crash via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384)
* mariadb: server crashes in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386)
* mariadb: assertion failures in decimal_bin_size (CVE-2022-27387)
* mariadb: crash when using HAVING with NOT EXIST predicate in an equality (CVE-2022-27444)
* mariadb: assertion failure in compare_order_elements (CVE-2022-27445)
* mariadb: crash when using HAVING with IS NULL predicate in an equality (CVE-2022-27446)
* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447)
* mariadb: crash in multi-update and implicit grouping (CVE-2022-27448)
* mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449)
* mariadb: crash via window function in expression in ORDER BY (CVE-2022-27451)
* mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452)
* mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING (CVE-2022-27455)
* mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456)
* mariadb: incorrect key in "dup value" error after long unique (CVE-2022-27457)
* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458)
* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622)
* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623)
* mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659)
* mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661)
* mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663)
* mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664)
* mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations (CVE-2021-46665)
* mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements (CVE-2021-46668)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5948" id="RHSA-2022:5948" type="rhsa" title="RHSA-2022:5948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46659" id="CVE-2021-46659" type="cve" title="CVE-2021-46659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46661" id="CVE-2021-46661" type="cve" title="CVE-2021-46661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46663" id="CVE-2021-46663" type="cve" title="CVE-2021-46663"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46664" id="CVE-2021-46664" type="cve" title="CVE-2021-46664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46665" id="CVE-2021-46665" type="cve" title="CVE-2021-46665"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46668" id="CVE-2021-46668" type="cve" title="CVE-2021-46668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46669" id="CVE-2021-46669" type="cve" title="CVE-2021-46669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24048" id="CVE-2022-24048" type="cve" title="CVE-2022-24048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24050" id="CVE-2022-24050" type="cve" title="CVE-2022-24050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24051" id="CVE-2022-24051" type="cve" title="CVE-2022-24051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24052" id="CVE-2022-24052" type="cve" title="CVE-2022-24052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27376" id="CVE-2022-27376" type="cve" title="CVE-2022-27376"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27377" id="CVE-2022-27377" type="cve" title="CVE-2022-27377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27378" id="CVE-2022-27378" type="cve" title="CVE-2022-27378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27379" id="CVE-2022-27379" type="cve" title="CVE-2022-27379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27380" id="CVE-2022-27380" type="cve" title="CVE-2022-27380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27381" id="CVE-2022-27381" type="cve" title="CVE-2022-27381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27382" id="CVE-2022-27382" type="cve" title="CVE-2022-27382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27383" id="CVE-2022-27383" type="cve" title="CVE-2022-27383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27384" id="CVE-2022-27384" type="cve" title="CVE-2022-27384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27386" id="CVE-2022-27386" type="cve" title="CVE-2022-27386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27387" id="CVE-2022-27387" type="cve" title="CVE-2022-27387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27444" id="CVE-2022-27444" type="cve" title="CVE-2022-27444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27445" id="CVE-2022-27445" type="cve" title="CVE-2022-27445"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27446" id="CVE-2022-27446" type="cve" title="CVE-2022-27446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27447" id="CVE-2022-27447" type="cve" title="CVE-2022-27447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27448" id="CVE-2022-27448" type="cve" title="CVE-2022-27448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27449" id="CVE-2022-27449" type="cve" title="CVE-2022-27449"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27451" id="CVE-2022-27451" type="cve" title="CVE-2022-27451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27452" id="CVE-2022-27452" type="cve" title="CVE-2022-27452"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27455" id="CVE-2022-27455" type="cve" title="CVE-2022-27455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27456" id="CVE-2022-27456" type="cve" title="CVE-2022-27456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27457" id="CVE-2022-27457" type="cve" title="CVE-2022-27457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27458" id="CVE-2022-27458" type="cve" title="CVE-2022-27458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31622" id="CVE-2022-31622" type="cve" title="CVE-2022-31622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31623" id="CVE-2022-31623" type="cve" title="CVE-2022-31623"/>
      <reference href="https://bugzilla.redhat.com/2049302" id="2049302" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050017" id="2050017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050022" id="2050022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050024" id="2050024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050026" id="2050026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050032" id="2050032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050034" id="2050034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2068211" id="2068211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2068233" id="2068233" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2068234" id="2068234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2069833" id="2069833" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074817" id="2074817" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074947" id="2074947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074949" id="2074949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074951" id="2074951" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074966" id="2074966" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074981" id="2074981" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074987" id="2074987" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074996" id="2074996" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074999" id="2074999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075005" id="2075005" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075006" id="2075006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075691" id="2075691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075692" id="2075692" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075693" id="2075693" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075694" id="2075694" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075695" id="2075695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075696" id="2075696" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075697" id="2075697" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075699" id="2075699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075700" id="2075700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075701" id="2075701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2076144" id="2076144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2076145" id="2076145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092354" id="2092354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092360" id="2092360" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5948.html" id="ALSA-2022:5948" type="self" title="ALSA-2022:5948"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="mariadb-backup" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-backup-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">2b79935a79b9b38dacbb156955865e3c015186a6a1363d467278078f65d8b073</sum>
        </package>
        <package name="mariadb-server-utils" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-server-utils-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">46eeb4cf8bdfd728a093181b7f0b22e9b18aad5f873b91b38e6ab620525e3ed4</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-oqgraph-engine-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">4998e4b26b0370c2b7b888e954e0d26fa62e667d96eae0069205f278a1ae4551</sum>
        </package>
        <package name="mariadb-server" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-server-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">65adc8d50f18a4bffd1f335ec7138feb7b6a6e60cd7653265fd65f6d52b5e698</sum>
        </package>
        <package name="mariadb" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">732dab00be1c7d2e6210d5fc0c8c550200c36a01fe46a1711415b7ec02e4814a</sum>
        </package>
        <package name="mariadb-pam" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-pam-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">975261dfe362348bff47e4058e7610a0d257083310b33ae579a88c299163ebc4</sum>
        </package>
        <package name="mariadb-common" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-common-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">b04fd9035206c6e2ae9b2dcf76f0ee1da63604f23a45c67c04a5ce13b45897ff</sum>
        </package>
        <package name="mariadb-test" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-test-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">b2dcbba4ed23cf529d96b736292034086c6914479b6a39e6d91039427219975a</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-gssapi-server-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">b6aa9f15ceab06fc61a8e8abe4c990da3659a20f42c17909222aef3324ceb8bb</sum>
        </package>
        <package name="mariadb-devel" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-devel-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">bd2f1ed7cfb768fe1ec4ede49366f7d3f90fac87363d3dd97ee7ce64ed42d38c</sum>
        </package>
        <package name="mariadb-embedded" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-embedded-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">f2e6037e84dbd95103119d290e7972b72c4052717964e9d18590eb8688a62396</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-embedded-devel-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">fa1e775a824f64274a62358ac5e0df3fd48a356ef74cab87073ee864ead2522a</sum>
        </package>
        <package name="mariadb-errmsg" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-errmsg-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">fa3e41f38a47a6f4660060e152b669f8b29552903d0ab0a0c1af820b9b0066ca</sum>
        </package>
        <package name="mariadb-server-galera" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-server-galera-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">fefd371740d55e6748ad87e7a5dc218a8825baae9316e4069a6e279df3053103</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6003</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-08-09 00:00:00"/>
    <updated date="2022-08-10 21:07:20"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* information leak in scsi_ioctl() (CVE-2022-0494)
* use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Power9 - LPAR fails to boot in shared processing mode and call traces are seen [Hash] (BZ#2092248)
* Hard lockups are observed while running stress-ng and LPAR hangs (BZ#2092253)
* FIPS module identification via name and version (BZ#2093384)
* gfs2: File corruption with large writes when memory is tight (BZ#2097306)
* i/o on initiator stuck when network is disrupted (4.18.0-372.9.1.el8.x86_64) (BZ#2098251)
* AlmaLinux 9.1 doesn't support 3rd SATA (BZ#2099740)
* Guest call trace when reboot after postcopy migration with high stress workload (BZ#2100903)
* Oops or general protection fault with RIP decode_attr_security_label at decode_getfattr_attrs (BZ#2101854)
* Oops as BUG: unable to handle page fault as free of uninitialized nfs4_label on nfs referral lookup (BZ#2101858)
* lpar crash with Oops: Kernel access of bad area, sig: 11 [#1] when changing mtu of a bond interface (P10/ ibmvnic/ Haleakala) (BZ#2103085)
* OS doesn't boot when vmd and interrupt remapping are enabled (BZ#2109974)
Enhancement(s):
* iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (BZ#2105326)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6003" id="RHSA-2022:6003" type="rhsa" title="RHSA-2022:6003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0494" id="CVE-2022-0494" type="cve" title="CVE-2022-0494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1055" id="CVE-2022-1055" type="cve" title="CVE-2022-1055"/>
      <reference href="https://bugzilla.redhat.com/2039448" id="2039448" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070220" id="2070220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6003.html" id="ALSA-2022:6003" type="self" title="ALSA-2022:6003"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="kernel-core" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-core-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">0644481c45fb6b0969b5597e1b07ab567a10b60d9416941abb275682fe21462b</sum>
        </package>
        <package name="bpftool" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>bpftool-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">156982325685f1eecbd0586c2a75a76b568875cd1f1d2e8ecc3df0cdc9c371e5</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-doc-5.14.0-70.22.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">232d05e4af484d9fb62fcffcdb7b23f898a654e8107f29507eaa1d61344427aa</sum>
        </package>
        <package name="kernel-debug-core" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-core-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">24d188c95afb3f367976170f99f22b96a5373e6e808da9e27aaf4ec37ba642b9</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-headers-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">258f0be2224fa3f2295c4c07c2494e53114bd6dd0a6e95847d6cea89c77fd8d8</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">26df0e894bfe2bddbbf1c79fdbc08b7c626adb1f7ca32a8a2c2e46be04dfd53c</sum>
        </package>
        <package name="kernel-debug-modules" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-modules-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">2a1469c0c44b7290cd72246a98c87332841058be3fb29dae8cbdc4375bfb27f5</sum>
        </package>
        <package name="perf" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>perf-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">3c5b628aa62ecf6e50abe12ba5076b3d2922ec60d43bc2ace91a57b76033fd5c</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">41c5293fe8405da40a0e509c6e778d27374b3c743e1a5e07d7d57e5ef31e034f</sum>
        </package>
        <package name="kernel-modules" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-modules-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">4226cc3e39177830aac6b00cd92c65b2da64e64c9ab2ea086fcd110aa7d67a73</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-cross-headers-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">4a945f9f27e425cd30e4f513d94161b86252ccb9ce8d737cd77faafeef9dd289</sum>
        </package>
        <package name="kernel-tools" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-tools-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">5dfb3530c7f5f0abc4a2f1d4ae60f37ee22bf3cdab97e58f06657c3d9adfe176</sum>
        </package>
        <package name="kernel-zfcpdump-core" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-core-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">713c3f2f80f07f73f086ef1d4b7cba5e041d684d93663ec8c37e6a1f7b121e45</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">77a4d8749a4cc28f425cf8a2c74fb5b75c5744afb56ecc0739e9bb2e8c4fd4bb</sum>
        </package>
        <package name="kernel" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">83bab7059170940d38429006e1294a608d064489eeedf4d786f0f9c30fa3f57c</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-devel-matched-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">89873b6dd6b279acb752ef1c24f54b7c1749032f2ccf14ae08467a4f91aa4046</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">9a3d61a0cc86655206e4df2bc373e8aab4b4f6b53e478d4f653e5c4495356a3e</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-modules-extra-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">9ec86f69e12e4625e1fa0525b5668f9e7e4534561521cccdc5fc1686198ec1d2</sum>
        </package>
        <package name="kernel-abi-stablelists" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-70.22.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">a7507bb31645b36cd5120e3dee6c9f7928ea50fa4707527e8af610752ebdea2e</sum>
        </package>
        <package name="kernel-debug" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ab2767e4b22e4d31ec41d37ac33c5bdde0a779b2a85909cc352c1b189533619b</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>python3-perf-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">cc4bd21bec173e015820b8a211bb005ef5def3b6559b63243761204f536dca66</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ce291f2dd2ed2a92acd5401273330e0ca02b5ee228617329e20db3e25d8c1776</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-modules-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ceae4af4aedc55ebd2f29b9aa774b5488b19a650bfb95c216e8a09216fbce136</sum>
        </package>
        <package name="kernel-zfcpdump" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">dba4d7ecb3300f6c675fed35c43013b84820865a93201413783dc558e78850bd</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-devel-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">fc0e3030e061696ef149861997da4b337cbd741a3863139b1cbb96ad6cf52edb</sum>
        </package>
        <package name="kernel-modules-extra" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-modules-extra-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ffffa93f2ee3672af348482d6849fc0a57469603ea3b1447326f00df1e50fdb7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6043</id>
    <title>Moderate: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2022-08-10 00:00:00"/>
    <updated date="2022-08-10 21:06:13"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.108 and .NET Runtime 6.0.8.
Security Fix(es):
* dotnet: External Entity Injection during XML signature verification (CVE-2022-34716)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6043" id="RHSA-2022:6043" type="rhsa" title="RHSA-2022:6043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34716" id="CVE-2022-34716" type="cve" title="CVE-2022-34716"/>
      <reference href="https://bugzilla.redhat.com/2115183" id="2115183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6043.html" id="ALSA-2022:6043" type="self" title="ALSA-2022:6043"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="dotnet-templates-6.0" version="6.0.108" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-templates-6.0-6.0.108-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">321f0ca55f249ee7eb74eb5cd0fe991c6f3572e421eeea33fa293b119c38617a</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">3ddbd4f95120658648ef691e54a75d682925daa5482c499f4be45ced0bcd4bc5</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">5a22120709fd668f7855a33834a980b330020e831e32f182d4d3fb6b47edd41c</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">652e1d0307b8bdd541ed78fea9c33c6d31827cfe81f84974a6e2a3f9a53a9354</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">9e90661c3da2338e62f07d71cbf9e187be9e0bccb5072212fc29074a8bfe81aa</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">a7ee85d67d78b29da9ccaf30af208af3821558a4924869fe4535ede265e0047b</sum>
        </package>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.108" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.108-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">aa3fd3db6e6e482093b1aef9ae9a4e1571fafc4af58d44f36524eac202e524b9</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">b8c5125f7b2697d75647a903cd7f3b79af7af5a77769bae874c5a8b28e310c08</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.108" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.108-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">bcea0bf0024dfc1219d27cc66d7a3a96a49b72eeac42cfe3079898cbca19cc70</sum>
        </package>
        <package name="dotnet-host" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-host-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">c6573742163d39e9df9c6e7c1cbb39682172b59cc469850e80da74effba77e54</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="6.0.108" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>netstandard-targeting-pack-2.1-6.0.108-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">e3f12fa5e07917de2917cf3e1033738dd854b055c072356d7535ccbc631c1ea2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6157</id>
    <title>Moderate: curl security update</title>
    <issued date="2022-08-24 00:00:00"/>
    <updated date="2022-08-30 18:16:58"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.
Security Fix(es):
* curl: HTTP compression denial of service (CVE-2022-32206)
* curl: Unpreserved file permissions (CVE-2022-32207)
* curl: FTP-KRB bad message verification (CVE-2022-32208)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6157" id="RHSA-2022:6157" type="rhsa" title="RHSA-2022:6157"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32206" id="CVE-2022-32206" type="cve" title="CVE-2022-32206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32207" id="CVE-2022-32207" type="cve" title="CVE-2022-32207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32208" id="CVE-2022-32208" type="cve" title="CVE-2022-32208"/>
      <reference href="https://bugzilla.redhat.com/2099300" id="2099300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2099305" id="2099305" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2099306" id="2099306" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6157.html" id="ALSA-2022:6157" type="self" title="ALSA-2022:6157"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="curl-minimal" version="7.76.1" release="14.el9_0.5" epoch="0" arch="s390x" src="curl-7.76.1-14.el9_0.5.src.rpm">
          <filename>curl-minimal-7.76.1-14.el9_0.5.s390x.rpm</filename>
          <sum type="sha256">4932a3edafa05bb711a1d10122b0ca63b7cde5f83cd6eb040c7c300b9a685b8f</sum>
        </package>
        <package name="libcurl-minimal" version="7.76.1" release="14.el9_0.5" epoch="0" arch="s390x" src="curl-7.76.1-14.el9_0.5.src.rpm">
          <filename>libcurl-minimal-7.76.1-14.el9_0.5.s390x.rpm</filename>
          <sum type="sha256">6c2ca659861bae86bb98a954ab7768c718971cfa51468f11d0ea50dbe9ef9671</sum>
        </package>
        <package name="libcurl-devel" version="7.76.1" release="14.el9_0.5" epoch="0" arch="s390x" src="curl-7.76.1-14.el9_0.5.src.rpm">
          <filename>libcurl-devel-7.76.1-14.el9_0.5.s390x.rpm</filename>
          <sum type="sha256">7d1bad3dd6f1856757371d6eb026ddf00f4761fd7a32457e6c496d4228cb6864</sum>
        </package>
        <package name="libcurl" version="7.76.1" release="14.el9_0.5" epoch="0" arch="s390x" src="curl-7.76.1-14.el9_0.5.src.rpm">
          <filename>libcurl-7.76.1-14.el9_0.5.s390x.rpm</filename>
          <sum type="sha256">8de310a61ed9bc03273bc051d2d004d9482c288156212e440ee16397fa569547</sum>
        </package>
        <package name="curl" version="7.76.1" release="14.el9_0.5" epoch="0" arch="s390x" src="curl-7.76.1-14.el9_0.5.src.rpm">
          <filename>curl-7.76.1-14.el9_0.5.s390x.rpm</filename>
          <sum type="sha256">d99d0828c7bd4e888b4e12d99c8e7ced9bbfe7bf1c787d97d092765600768c16</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6165</id>
    <title>Important: thunderbird security update</title>
    <issued date="2022-08-24 00:00:00"/>
    <updated date="2022-08-30 19:29:21"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 91.13.0.
Security Fix(es):
* Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472)
* Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473)
* Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477)
* Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13 (CVE-2022-38478)
* Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6165" id="RHSA-2022:6165" type="rhsa" title="RHSA-2022:6165"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38472" id="CVE-2022-38472" type="cve" title="CVE-2022-38472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38473" id="CVE-2022-38473" type="cve" title="CVE-2022-38473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38476" id="CVE-2022-38476" type="cve" title="CVE-2022-38476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38477" id="CVE-2022-38477" type="cve" title="CVE-2022-38477"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38478" id="CVE-2022-38478" type="cve" title="CVE-2022-38478"/>
      <reference href="https://bugzilla.redhat.com/2120673" id="2120673" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120674" id="2120674" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120678" id="2120678" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120695" id="2120695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120696" id="2120696" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6165.html" id="ALSA-2022:6165" type="self" title="ALSA-2022:6165"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="thunderbird" version="91.13.0" release="1.el9_0.alma" epoch="0" arch="s390x" src="thunderbird-91.13.0-1.el9_0.alma.src.rpm">
          <filename>thunderbird-91.13.0-1.el9_0.alma.s390x.rpm</filename>
          <sum type="sha256">80faa00eca76c2730a89404bd9007e41910132c0c968c9c0a4ce84277b882708</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6174</id>
    <title>Important: firefox security update</title>
    <issued date="2022-08-24 00:00:00"/>
    <updated date="2022-08-30 14:56:43"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 91.13.0 ESR.
Security Fix(es):
* Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472)
* Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473)
* Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477)
* Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13 (CVE-2022-38478)
* Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6174" id="RHSA-2022:6174" type="rhsa" title="RHSA-2022:6174"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38472" id="CVE-2022-38472" type="cve" title="CVE-2022-38472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38473" id="CVE-2022-38473" type="cve" title="CVE-2022-38473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38476" id="CVE-2022-38476" type="cve" title="CVE-2022-38476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38477" id="CVE-2022-38477" type="cve" title="CVE-2022-38477"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38478" id="CVE-2022-38478" type="cve" title="CVE-2022-38478"/>
      <reference href="https://bugzilla.redhat.com/2120673" id="2120673" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120674" id="2120674" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120678" id="2120678" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120695" id="2120695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120696" id="2120696" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6174.html" id="ALSA-2022:6174" type="self" title="ALSA-2022:6174"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="firefox" version="91.13.0" release="1.el9_0.alma" epoch="0" arch="s390x" src="firefox-91.13.0-1.el9_0.alma.src.rpm">
          <filename>firefox-91.13.0-1.el9_0.alma.s390x.rpm</filename>
          <sum type="sha256">a3d801de3fac26c3494fb27df0839e252c0e91c755f59592046140224e919a28</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6224</id>
    <title>Moderate: openssl security and bug fix update</title>
    <issued date="2022-08-30 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security and bug fix update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: c_rehash script allows command injection (CVE-2022-1292)
* openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS (CVE-2022-1343)
* openssl: OPENSSL_LH_flush() breaks reuse of memory (CVE-2022-1473)
* openssl: the c_rehash script allows command injection (CVE-2022-2068)
* openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* openssl occasionally sends internal error to gnutls when using FFDHE (BZ#2080323)
* openssl req defaults to 3DES (BZ#2085499)
* OpenSSL accepts custom elliptic curve parameters when p is large [almalinux-9] (BZ#2085508)
* OpenSSL mustn't work with ECDSA with explicit curve parameters in FIPS mode (BZ#2085521)
* openssl s_server -groups secp256k1 in FIPS fails because X25519/X448 (BZ#2086554)
* Converting FIPS power-on self test to KAT (BZ#2086866)
* Small RSA keys work for some operations in FIPS mode (BZ#2091938)
* FIPS provider doesn't block RSA encryption for key transport (BZ#2091977)
* OpenSSL testsuite certificates expired (BZ#2095696)
* [IBM 9.1 HW OPT] POWER10 performance enhancements for cryptography: OpenSSL (BZ#2103044)
* [FIPS lab review] self-test (BZ#2112978)
* [FIPS lab review] DH tuning (BZ#2115856)
* [FIPS lab review] EC tuning (BZ#2115857)
* [FIPS lab review] RSA tuning (BZ#2115858)
* [FIPS lab review] RAND tuning (BZ#2115859)
* [FIPS lab review] zeroization (BZ#2115861)
* [FIPS lab review] HKDF limitations (BZ#2118388)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6224" id="RHSA-2022:6224" type="rhsa" title="RHSA-2022:6224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1292" id="CVE-2022-1292" type="cve" title="CVE-2022-1292"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1343" id="CVE-2022-1343" type="cve" title="CVE-2022-1343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1473" id="CVE-2022-1473" type="cve" title="CVE-2022-1473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2068" id="CVE-2022-2068" type="cve" title="CVE-2022-2068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2097" id="CVE-2022-2097" type="cve" title="CVE-2022-2097"/>
      <reference href="https://bugzilla.redhat.com/2081494" id="2081494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2087911" id="2087911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2087913" id="2087913" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2097310" id="2097310" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104905" id="2104905" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6224.html" id="ALSA-2022:6224" type="self" title="ALSA-2022:6224"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="openssl-perl" version="3.0.1" release="41.el9_0" epoch="1" arch="s390x" src="openssl-3.0.1-41.el9_0.src.rpm">
          <filename>openssl-perl-3.0.1-41.el9_0.s390x.rpm</filename>
          <sum type="sha256">19e09234a2d390dd7396772f4fd685832e0e698483e2b571743dcb6e79606ce7</sum>
        </package>
        <package name="openssl-libs" version="3.0.1" release="41.el9_0" epoch="1" arch="s390x" src="openssl-3.0.1-41.el9_0.src.rpm">
          <filename>openssl-libs-3.0.1-41.el9_0.s390x.rpm</filename>
          <sum type="sha256">2f4db1d05c5967b1613af2556ba65e837803a8269de5c9da87238cc480a04f07</sum>
        </package>
        <package name="openssl" version="3.0.1" release="41.el9_0" epoch="1" arch="s390x" src="openssl-3.0.1-41.el9_0.src.rpm">
          <filename>openssl-3.0.1-41.el9_0.s390x.rpm</filename>
          <sum type="sha256">4c614245f6803d73e3c186c960ced85f97141fdb9c88ba86e45fd50b44818288</sum>
        </package>
        <package name="openssl-devel" version="3.0.1" release="41.el9_0" epoch="1" arch="s390x" src="openssl-3.0.1-41.el9_0.src.rpm">
          <filename>openssl-devel-3.0.1-41.el9_0.s390x.rpm</filename>
          <sum type="sha256">803117f0b8d91424b2b980d07f14469674728f72d4e1313301e620350a578dd1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6521</id>
    <title>Moderate: .NET 6.0 security and bugfix update</title>
    <issued date="2022-09-14 00:00:00"/>
    <updated date="2022-10-14 09:06:45"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security and bugfix update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.109 and Runtime 6.0.9.

Security Fix(es):

* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6521" id="RHSA-2022:6521" type="rhsa" title="RHSA-2022:6521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38013" id="CVE-2022-38013" type="cve" title="CVE-2022-38013"/>
      <reference href="https://bugzilla.redhat.com/2125124" id="2125124" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6521.html" id="ALSA-2022:6521" type="self" title="ALSA-2022:6521"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.9" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el9_0.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.9-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">073390a815ef77f079d78eca182305f2451c5300961963124387978f805e558b</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.9" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el9_0.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.9-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">25d2c052099487f1fece05b3fb696d19ff9a3e031ad3ed13b66f0ef5003a722d</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.109" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el9_0.src.rpm">
          <filename>dotnet-templates-6.0-6.0.109-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">3d820e8f52954c0f769e5d98a26b184ff00f6a1b09af7393b13e4762e25db0fd</sum>
        </package>
        <package name="dotnet-host" version="6.0.9" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el9_0.src.rpm">
          <filename>dotnet-host-6.0.9-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">75a77a25cdd24f38e29b9e8975a6532ebfe68104e09a8db64a248cbeb73fea36</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.109" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el9_0.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.109-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">76518c4e2921d69f0d4074fdec3d9381beb703098cf47ae3e95edc4c23a7292c</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.9" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el9_0.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.9-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">7f30a02e5677415f6250cbb45479f44c9e3a6ebd2b77c63d5fbcde1ecf6b33bd</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="6.0.109" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el9_0.src.rpm">
          <filename>netstandard-targeting-pack-2.1-6.0.109-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">8f5e3a3a445bf6e2b75c08aa5944f52c4da46b9911ecf9eea0eed53b0fd6c51d</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.9" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el9_0.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.9-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">9671252f864339ae1c338113cf0b7c645373013e053facb63ba5345f6a394957</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.9" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el9_0.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.9-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">bdbe6d245facf641cbffa6bf347a794e0d4fa1c27a1fe064e1c2fd86e5cf5a33</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.9" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el9_0.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.9-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">d824487c1d032bcd0ac53cbb66b02de6d3be7dd4b3815d38d95a1cd7fa68f643</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6585</id>
    <title>Moderate: ruby security, bug fix, and enhancement update</title>
    <issued date="2022-09-20 00:00:00"/>
    <updated date="2022-10-19 07:18:15"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby security, bug fix, and enhancement update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.0.4). (BZ#2109428)

Security Fix(es):

* Ruby: Double free in Regexp compilation (CVE-2022-28738)
* Ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6585" id="RHSA-2022:6585" type="rhsa" title="RHSA-2022:6585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28738" id="CVE-2022-28738" type="cve" title="CVE-2022-28738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28739" id="CVE-2022-28739" type="cve" title="CVE-2022-28739"/>
      <reference href="https://bugzilla.redhat.com/2075685" id="2075685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075687" id="2075687" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6585.html" id="ALSA-2022:6585" type="self" title="ALSA-2022:6585"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="rubygem-typeprof" version="0.15.2" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-typeprof-0.15.2-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">0e4ebca19523f0dd89c46c21b776d45379ff1f7965dd423b1bcd5edd4c25760e</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.0.0" release="160.el9_0" epoch="0" arch="s390x" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-bigdecimal-3.0.0-160.el9_0.s390x.rpm</filename>
          <sum type="sha256">0e830553ff3a8120c2fe781a14e9764fb316b96ff32679b85327e91ae08463e3</sum>
        </package>
        <package name="ruby-devel" version="3.0.4" release="160.el9_0" epoch="0" arch="s390x" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>ruby-devel-3.0.4-160.el9_0.s390x.rpm</filename>
          <sum type="sha256">199e39c49fa0e84c747d3b2f5b3b1928d8c31e5af866b206f48045808369e856</sum>
        </package>
        <package name="ruby-libs" version="3.0.4" release="160.el9_0" epoch="0" arch="s390x" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>ruby-libs-3.0.4-160.el9_0.s390x.rpm</filename>
          <sum type="sha256">2904c108c6751e752e0f7f7d293fbee731c2a5dd512217277a29cd2415d0c496</sum>
        </package>
        <package name="rubygems-devel" version="3.2.33" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygems-devel-3.2.33-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">47177d171a1e9ac58dbdbd0cfa2c2d7bfa1fbce55ee3ec6b92594bab516989d0</sum>
        </package>
        <package name="rubygem-io-console" version="0.5.7" release="160.el9_0" epoch="0" arch="s390x" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-io-console-0.5.7-160.el9_0.s390x.rpm</filename>
          <sum type="sha256">4bdd33435032c2989bd03c2ab93b51444a3a0a90c49c37d0c172ee5d3f104964</sum>
        </package>
        <package name="rubygem-rexml" version="3.2.5" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-rexml-3.2.5-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">4f4959a3c7e6da46ba9d96fbdb71606c64279adf58d3a6a0911f9bfe09d6b645</sum>
        </package>
        <package name="rubygem-psych" version="3.3.2" release="160.el9_0" epoch="0" arch="s390x" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-psych-3.3.2-160.el9_0.s390x.rpm</filename>
          <sum type="sha256">5779e832a7343fb377cbfca8fc45d891e1c67dc62602f7a3b2bc286623bb308c</sum>
        </package>
        <package name="rubygem-rss" version="0.2.9" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-rss-0.2.9-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">61a9cc11ee03f87dd24cf9437cd68a44069d279d19aec452a3cccc458dbdd4e5</sum>
        </package>
        <package name="rubygem-test-unit" version="3.3.7" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-test-unit-3.3.7-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">7024ae2f1fa78bc46be4bfe7431a70487ddc3cd7b2e14fd87b6cf84f73509b07</sum>
        </package>
        <package name="rubygem-json" version="2.5.1" release="160.el9_0" epoch="0" arch="s390x" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-json-2.5.1-160.el9_0.s390x.rpm</filename>
          <sum type="sha256">8e2f3ec7c2baef29aa9c6901ad7f290e7d3aec1df570286124e7276cc9ae1057</sum>
        </package>
        <package name="rubygem-power_assert" version="1.2.0" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-power_assert-1.2.0-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">8ff3ddf87d8dd8b83b9103045a0708901a7e8092d200ca2a16df15876cadf340</sum>
        </package>
        <package name="rubygems" version="3.2.33" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygems-3.2.33-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">aafc90f5db348d735b316df9f67be318a979cbc3f5a86526803ec1434a9211dd</sum>
        </package>
        <package name="rubygem-rbs" version="1.4.0" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-rbs-1.4.0-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">ad33ce0a8b6973ad3bbfba439352d266df2e1ad21de24ab67d133d3daa53c0c6</sum>
        </package>
        <package name="rubygem-irb" version="1.3.5" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-irb-1.3.5-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">ba2d4b5d69df5102d425754d33d39d9a3cad8fbdb4a0ea77bb8764b8abb6469d</sum>
        </package>
        <package name="rubygem-bundler" version="2.2.33" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-bundler-2.2.33-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">d08e0feb932a0abca51a465f64dc33e1846d40c17238985766802619c2f5c9c5</sum>
        </package>
        <package name="ruby-default-gems" version="3.0.4" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>ruby-default-gems-3.0.4-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">d6ff792d62fb767eafc17c3adb6ab2508483465114145d720cd973c80b4678a3</sum>
        </package>
        <package name="rubygem-rake" version="13.0.3" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-rake-13.0.3-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">dcf530d4f64670dd945be39f1740fe8b044ca91ad2b944e7da92ddf5ce441517</sum>
        </package>
        <package name="rubygem-minitest" version="5.14.2" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-minitest-5.14.2-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">ddfbf5092d973b37876796cd4edaa28501cbc73352b513e5960bbe2823892814</sum>
        </package>
        <package name="rubygem-rdoc" version="6.3.3" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>rubygem-rdoc-6.3.3-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">e091290bdfbdfde6d68e691c18dea88f4b765de5989f0abaa101678981fdd20b</sum>
        </package>
        <package name="ruby" version="3.0.4" release="160.el9_0" epoch="0" arch="s390x" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>ruby-3.0.4-160.el9_0.s390x.rpm</filename>
          <sum type="sha256">f1700bb8db49aab00553f3e737bc2b5bc06f57b07cefc5c9211caefb2f20ae0b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6590</id>
    <title>Moderate: mysql security, bug fix, and enhancement update</title>
    <issued date="2022-09-20 00:00:00"/>
    <updated date="2022-10-19 07:05:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql security, bug fix, and enhancement update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.30). (BZ#2122589)

Security Fix(es):

* mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479)
* mysql: Server: DML unspecified vulnerability (CPU Apr 2022) (CVE-2022-21413)
* mysql: Server: Replication unspecified vulnerability (CPU Apr 2022) (CVE-2022-21415)
* mysql: InnoDB multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21423)
* mysql: Server: DDL multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21425, CVE-2022-21444)
* mysql: Server: FTS unspecified vulnerability (CPU Apr 2022) (CVE-2022-21427)
* mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21454)
* mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Jul 2022) (CVE-2022-21455)
* mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21457)
* mysql: Server: Logging unspecified vulnerability (CPU Apr 2022) (CVE-2022-21460)
* mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21556, CVE-2022-21569)
* mysql: Server: Options unspecified vulnerability (CPU Jul 2022) (CVE-2022-21515)
* mysql: InnoDB multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21517, CVE-2022-21537, CVE-2022-21539)
* mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21522, CVE-2022-21534)
* mysql: Server: Federated unspecified vulnerability (CPU Jul 2022) (CVE-2022-21547)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jul 2022) (CVE-2022-21538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Default logrotate set to wrong log file (BZ#2122592)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6590" id="RHSA-2022:6590" type="rhsa" title="RHSA-2022:6590"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21412" id="CVE-2022-21412" type="cve" title="CVE-2022-21412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21413" id="CVE-2022-21413" type="cve" title="CVE-2022-21413"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21414" id="CVE-2022-21414" type="cve" title="CVE-2022-21414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21415" id="CVE-2022-21415" type="cve" title="CVE-2022-21415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21417" id="CVE-2022-21417" type="cve" title="CVE-2022-21417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21418" id="CVE-2022-21418" type="cve" title="CVE-2022-21418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21423" id="CVE-2022-21423" type="cve" title="CVE-2022-21423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21425" id="CVE-2022-21425" type="cve" title="CVE-2022-21425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21427" id="CVE-2022-21427" type="cve" title="CVE-2022-21427"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21435" id="CVE-2022-21435" type="cve" title="CVE-2022-21435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21436" id="CVE-2022-21436" type="cve" title="CVE-2022-21436"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21437" id="CVE-2022-21437" type="cve" title="CVE-2022-21437"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21438" id="CVE-2022-21438" type="cve" title="CVE-2022-21438"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21440" id="CVE-2022-21440" type="cve" title="CVE-2022-21440"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21444" id="CVE-2022-21444" type="cve" title="CVE-2022-21444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21451" id="CVE-2022-21451" type="cve" title="CVE-2022-21451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21452" id="CVE-2022-21452" type="cve" title="CVE-2022-21452"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21454" id="CVE-2022-21454" type="cve" title="CVE-2022-21454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21455" id="CVE-2022-21455" type="cve" title="CVE-2022-21455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21457" id="CVE-2022-21457" type="cve" title="CVE-2022-21457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21459" id="CVE-2022-21459" type="cve" title="CVE-2022-21459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21460" id="CVE-2022-21460" type="cve" title="CVE-2022-21460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21462" id="CVE-2022-21462" type="cve" title="CVE-2022-21462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21478" id="CVE-2022-21478" type="cve" title="CVE-2022-21478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21479" id="CVE-2022-21479" type="cve" title="CVE-2022-21479"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21509" id="CVE-2022-21509" type="cve" title="CVE-2022-21509"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21515" id="CVE-2022-21515" type="cve" title="CVE-2022-21515"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21517" id="CVE-2022-21517" type="cve" title="CVE-2022-21517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21522" id="CVE-2022-21522" type="cve" title="CVE-2022-21522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21525" id="CVE-2022-21525" type="cve" title="CVE-2022-21525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21526" id="CVE-2022-21526" type="cve" title="CVE-2022-21526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21527" id="CVE-2022-21527" type="cve" title="CVE-2022-21527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21528" id="CVE-2022-21528" type="cve" title="CVE-2022-21528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21529" id="CVE-2022-21529" type="cve" title="CVE-2022-21529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21530" id="CVE-2022-21530" type="cve" title="CVE-2022-21530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21531" id="CVE-2022-21531" type="cve" title="CVE-2022-21531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21534" id="CVE-2022-21534" type="cve" title="CVE-2022-21534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21537" id="CVE-2022-21537" type="cve" title="CVE-2022-21537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21538" id="CVE-2022-21538" type="cve" title="CVE-2022-21538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21539" id="CVE-2022-21539" type="cve" title="CVE-2022-21539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21547" id="CVE-2022-21547" type="cve" title="CVE-2022-21547"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21553" id="CVE-2022-21553" type="cve" title="CVE-2022-21553"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21556" id="CVE-2022-21556" type="cve" title="CVE-2022-21556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21569" id="CVE-2022-21569" type="cve" title="CVE-2022-21569"/>
      <reference href="https://bugzilla.redhat.com/2082636" id="2082636" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082637" id="2082637" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082638" id="2082638" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082639" id="2082639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082640" id="2082640" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082641" id="2082641" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082642" id="2082642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082643" id="2082643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082644" id="2082644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082645" id="2082645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082646" id="2082646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082647" id="2082647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082648" id="2082648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082649" id="2082649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082650" id="2082650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082651" id="2082651" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082652" id="2082652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082653" id="2082653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082654" id="2082654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082655" id="2082655" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082656" id="2082656" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082657" id="2082657" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082658" id="2082658" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082659" id="2082659" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115282" id="2115282" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115283" id="2115283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115284" id="2115284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115285" id="2115285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115286" id="2115286" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115287" id="2115287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115288" id="2115288" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115289" id="2115289" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115290" id="2115290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115291" id="2115291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115292" id="2115292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115293" id="2115293" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115294" id="2115294" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115295" id="2115295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115296" id="2115296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115297" id="2115297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115298" id="2115298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115299" id="2115299" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115300" id="2115300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115301" id="2115301" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6590.html" id="ALSA-2022:6590" type="self" title="ALSA-2022:6590"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="mysql" version="8.0.30" release="3.el9_0" epoch="0" arch="s390x" src="mysql-8.0.30-3.el9_0.src.rpm">
          <filename>mysql-8.0.30-3.el9_0.s390x.rpm</filename>
          <sum type="sha256">04f4ce53bf3aa72a10250fcf29c9036c18b9963b84f776b832a9ca4563d73581</sum>
        </package>
        <package name="mysql-common" version="8.0.30" release="3.el9_0" epoch="0" arch="s390x" src="mysql-8.0.30-3.el9_0.src.rpm">
          <filename>mysql-common-8.0.30-3.el9_0.s390x.rpm</filename>
          <sum type="sha256">50cc292a9d25ef3b326dab7a80cc242f75f49cc2aa276199a18f350f7fb02add</sum>
        </package>
        <package name="mysql-server" version="8.0.30" release="3.el9_0" epoch="0" arch="s390x" src="mysql-8.0.30-3.el9_0.src.rpm">
          <filename>mysql-server-8.0.30-3.el9_0.s390x.rpm</filename>
          <sum type="sha256">621cf51365f2f23b7899f85f25b0b760e843f4384523506e1d4b4514b0177d56</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.30" release="3.el9_0" epoch="0" arch="s390x" src="mysql-8.0.30-3.el9_0.src.rpm">
          <filename>mysql-errmsg-8.0.30-3.el9_0.s390x.rpm</filename>
          <sum type="sha256">846759e868df968044c5a3225f7fd83683987fe2937a6670baf9428930c5172c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6595</id>
    <title>Moderate: nodejs and nodejs-nodemon security and bug fix update</title>
    <issued date="2022-09-20 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs and nodejs-nodemon security and bug fix update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (16.16.0), nodejs-nodemon (2.0.19). (BZ#2124230, BZ#2124233)

Security Fix(es):

* nodejs-ini: Prototype pollution via malicious INI file (CVE-2020-7788)
* nodejs-glob-parent: Regular expression denial of service (CVE-2020-28469)
* nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes (CVE-2021-3807)
* normalize-url: ReDoS for data URLs (CVE-2021-33502)
* nodejs: npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace (CVE-2022-29244)
* nodejs: DNS rebinding in --inspect via invalid IP addresses (CVE-2022-32212)
* nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encoding (CVE-2022-32213)
* nodejs: HTTP request smuggling due to improper delimiting of header fields (CVE-2022-32214)
* nodejs: HTTP request smuggling due to incorrect parsing of multi-line Transfer-Encoding (CVE-2022-32215)
* got: missing verification of requested URLs allows redirects to UNIX sockets (CVE-2022-33987)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* nodejs:16/nodejs: Rebase to the latest Nodejs 16 release [almalinux-9] (BZ#2121019)
* nodejs: Specify --with-default-icu-data-dir when using bootstrap build (BZ#2124299)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6595" id="RHSA-2022:6595" type="rhsa" title="RHSA-2022:6595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-28469" id="CVE-2020-28469" type="cve" title="CVE-2020-28469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-7788" id="CVE-2020-7788" type="cve" title="CVE-2020-7788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33502" id="CVE-2021-33502" type="cve" title="CVE-2021-33502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3807" id="CVE-2021-3807" type="cve" title="CVE-2021-3807"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29244" id="CVE-2022-29244" type="cve" title="CVE-2022-29244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32212" id="CVE-2022-32212" type="cve" title="CVE-2022-32212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32213" id="CVE-2022-32213" type="cve" title="CVE-2022-32213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32214" id="CVE-2022-32214" type="cve" title="CVE-2022-32214"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32215" id="CVE-2022-32215" type="cve" title="CVE-2022-32215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33987" id="CVE-2022-33987" type="cve" title="CVE-2022-33987"/>
      <reference href="https://bugzilla.redhat.com/1907444" id="1907444" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1945459" id="1945459" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1964461" id="1964461" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2007557" id="2007557" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2098556" id="2098556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2102001" id="2102001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2105422" id="2105422" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2105426" id="2105426" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2105428" id="2105428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2105430" id="2105430" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6595.html" id="ALSA-2022:6595" type="self" title="ALSA-2022:6595"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="npm" version="8.11.0" release="1.16.16.0.1.el9_0" epoch="1" arch="s390x" src="nodejs-16.16.0-1.el9_0.src.rpm">
          <filename>npm-8.11.0-1.16.16.0.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">5012acac30b3193d44851431eea176d5d85c999da0d0714d0d0d9018e57b9215</sum>
        </package>
        <package name="nodejs" version="16.16.0" release="1.el9_0" epoch="1" arch="s390x" src="nodejs-16.16.0-1.el9_0.src.rpm">
          <filename>nodejs-16.16.0-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">8367b283998785ca6393aa56dd7d2ca22332c6ebccdf1de3d596155df6124729</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.16.0" release="1.el9_0" epoch="1" arch="s390x" src="nodejs-16.16.0-1.el9_0.src.rpm">
          <filename>nodejs-full-i18n-16.16.0-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">a9310950f78eabffa319b6c7450c943c0c667708870d8cebb0f0710166fc611f</sum>
        </package>
        <package name="nodejs-libs" version="16.16.0" release="1.el9_0" epoch="1" arch="s390x" src="nodejs-16.16.0-1.el9_0.src.rpm">
          <filename>nodejs-libs-16.16.0-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">f4c469487099585e5a513787bcd38534b267d1ae350f9cd62031333b59393bda</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6602</id>
    <title>Moderate: gnupg2 security update</title>
    <issued date="2022-09-20 00:00:00"/>
    <updated date="2022-10-14 14:07:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnupg2 security update</summary>
    <description>The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.

Security Fix(es):

* gpg: Signature spoofing via status line injection (CVE-2022-34903)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6602" id="RHSA-2022:6602" type="rhsa" title="RHSA-2022:6602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34903" id="CVE-2022-34903" type="cve" title="CVE-2022-34903"/>
      <reference href="https://bugzilla.redhat.com/2102868" id="2102868" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6602.html" id="ALSA-2022:6602" type="self" title="ALSA-2022:6602"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="gnupg2-smime" version="2.3.3" release="2.el9_0" epoch="0" arch="s390x" src="gnupg2-2.3.3-2.el9_0.src.rpm">
          <filename>gnupg2-smime-2.3.3-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">c886bcbb7b3cc74c795cf87817a34750002734d2055c5c345489040eceb5996a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6610</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-09-20 00:00:00"/>
    <updated date="2022-10-14 13:22:46"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: heap overflow in nft_set_elem_init() (CVE-2022-34918)
* kernel: vulnerability of buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* RDMA/mlx5: Fix number of allocated XLT entries (BZ#2092270)
* mlx5, Setup hanged when run test-route-nexthop-object.sh (BZ#2092535)
* many call traces from unchecked MSR access error: WRMSR to 0x199 in amazon i4.32xlarge instance (BZ#2099417)
* X86/platform/UV: Kernel Support Fixes for UV5 platform (BZ#2107732)
* block layer: fixes for md sync slow and softlockup at blk_mq_sched_dispatch_requests [9.0.0.z] (BZ#2111395)
* Fixes for NVMe/TCP dereferences an invalid, non-canonical pointer, kernel panic (BZ#2117755)
* Adding missing nvme fix to AlmaLinux-9.1 (BZ#2117756)
* nvme/tcp mistakenly uses blk_mq_tag_to_rq(nvme_tcp_tagset(queue) (BZ#2118698)
* Important ice bug fixes (BZ#2119290)
* Power 9/ppc64le Incorrect Socket(s) &amp; "Core(s) per socket" reported by lscpu command. (BZ#2121719)

Enhancement(s):

* lscpu does not show all of the support AMX flags (amx_int8, amx_bf16)  (BZ#2108203)
* ice: Driver Update (BZ#2108204)
* iavf: Driver Update (BZ#2119477)
* i40e: Driver Update (BZ#2119479)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6610" id="RHSA-2022:6610" type="rhsa" title="RHSA-2022:6610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2078" id="CVE-2022-2078" type="cve" title="CVE-2022-2078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34918" id="CVE-2022-34918" type="cve" title="CVE-2022-34918"/>
      <reference href="https://bugzilla.redhat.com/2096178" id="2096178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104423" id="2104423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6610.html" id="ALSA-2022:6610" type="self" title="ALSA-2022:6610"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="70.26.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.26.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-70.26.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">05455baf86287d1ce41b8179b708ef5eab21dc01025a90de0691ffb5e9109c09</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="70.26.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.26.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-70.26.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">17cbf370d53cb071c4a8da724fe021ae54b9b45fb326635f7cfeb8e3066d8f2c</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="70.26.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.26.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-5.14.0-70.26.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">54f138fc08ded88b6bb516e2ed6f2c91731766b458851b13312df8476c8bc5e5</sum>
        </package>
        <package name="perf" version="5.14.0" release="70.26.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.26.1.el9_0.src.rpm">
          <filename>perf-5.14.0-70.26.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">94714d3de86ae9a6103cb53a5842b968ca431606efe7adf345316a5b2f400bd7</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="70.26.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.26.1.el9_0.src.rpm">
          <filename>kernel-devel-5.14.0-70.26.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">a5fa64bad946eaaa5daab4db087d1858eef2e47033d8a0c235ae2ef5668fc314</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="70.26.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.26.1.el9_0.src.rpm">
          <filename>kernel-devel-matched-5.14.0-70.26.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">b3c642f33efb3b75b96e1fc2b220a839fc37d9d6a25af6aef46f07af4328239f</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="70.26.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.26.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-70.26.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">e41680b5d8d54e95b9bd951dbdb6ee302dde40e56226fb771f4fd9bead653b2d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6634</id>
    <title>Moderate: webkit2gtk3 security update</title>
    <issued date="2022-09-20 00:00:00"/>
    <updated date="2022-10-19 07:00:08"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

The following packages have been upgraded to a later upstream version: webkit2gtk3 (2.36.7).

Security Fix(es):

* webkitgtk: processing maliciously crafted web content may lead to arbitrary code execution (CVE-2022-32893)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6634" id="RHSA-2022:6634" type="rhsa" title="RHSA-2022:6634"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32893" id="CVE-2022-32893" type="cve" title="CVE-2022-32893"/>
      <reference href="https://bugzilla.redhat.com/2121645" id="2121645" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6634.html" id="ALSA-2022:6634" type="self" title="ALSA-2022:6634"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="webkit2gtk3" version="2.36.7" release="1.el9_0" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_0.src.rpm">
          <filename>webkit2gtk3-2.36.7-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">11aaa78101539beac5638c01bd73b050b28f6f29985e1faa1ce69b24be8a961a</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.36.7" release="1.el9_0" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_0.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.36.7-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">4408f52fa1a5c02cfb3318828f7e355fdef441f7fda1e474d1893cfb85aa38bd</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.36.7" release="1.el9_0" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_0.src.rpm">
          <filename>webkit2gtk3-jsc-2.36.7-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">4d9b0b281bfe8fbabce8f8dabab0ceaccd772a4be7d9af4b6fac989bf4e96cc6</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.36.7" release="1.el9_0" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_0.src.rpm">
          <filename>webkit2gtk3-devel-2.36.7-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">f3a22eca5bf0e92d5193cb07f51df7e6fc5aaa60f9b6e47b6c17ff01e8cdb030</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6700</id>
    <title>Important: firefox security update</title>
    <issued date="2022-09-26 00:00:00"/>
    <updated date="2022-10-14 15:17:20"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.3.0 ESR.

Security Fix(es):

* Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959)
* Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960)
* Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3 (CVE-2022-40962)
* Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix (CVE-2022-40958)
* Mozilla: Content-Security-Policy base-uri bypass (CVE-2022-40956)
* Mozilla: Incoherent instruction cache when building WASM on ARM64 (CVE-2022-40957)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6700" id="RHSA-2022:6700" type="rhsa" title="RHSA-2022:6700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40956" id="CVE-2022-40956" type="cve" title="CVE-2022-40956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40957" id="CVE-2022-40957" type="cve" title="CVE-2022-40957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40958" id="CVE-2022-40958" type="cve" title="CVE-2022-40958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40959" id="CVE-2022-40959" type="cve" title="CVE-2022-40959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40960" id="CVE-2022-40960" type="cve" title="CVE-2022-40960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40962" id="CVE-2022-40962" type="cve" title="CVE-2022-40962"/>
      <reference href="https://bugzilla.redhat.com/2128792" id="2128792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128793" id="2128793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128794" id="2128794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128795" id="2128795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128796" id="2128796" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128797" id="2128797" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6700.html" id="ALSA-2022:6700" type="self" title="ALSA-2022:6700"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="firefox" version="102.3.0" release="6.el9_0.alma" epoch="0" arch="s390x" src="firefox-102.3.0-6.el9_0.alma.src.rpm">
          <filename>firefox-102.3.0-6.el9_0.alma.s390x.rpm</filename>
          <sum type="sha256">db6877f2df2d218d5f5c7c8910a93a31587175526ea30651501c1c6a017d5ca6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6717</id>
    <title>Important: thunderbird security update</title>
    <issued date="2022-09-26 00:00:00"/>
    <updated date="2022-10-19 07:24:33"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.3.0.

Security Fix(es):

* Mozilla: Leaking of sensitive information when composing a response to an HTML email with a META refresh tag (CVE-2022-3033)
* Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959)
* Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960)
* Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3 (CVE-2022-40962)
* Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked (CVE-2022-3032)
* Mozilla: An iframe element in an HTML email could trigger a network request (CVE-2022-3034)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2022-36059)
* Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix (CVE-2022-40958)
* Mozilla: Content-Security-Policy base-uri bypass (CVE-2022-40956)
* Mozilla: Incoherent instruction cache when building WASM on ARM64 (CVE-2022-40957)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6717" id="RHSA-2022:6717" type="rhsa" title="RHSA-2022:6717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3032" id="CVE-2022-3032" type="cve" title="CVE-2022-3032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3033" id="CVE-2022-3033" type="cve" title="CVE-2022-3033"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3034" id="CVE-2022-3034" type="cve" title="CVE-2022-3034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36059" id="CVE-2022-36059" type="cve" title="CVE-2022-36059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40956" id="CVE-2022-40956" type="cve" title="CVE-2022-40956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40957" id="CVE-2022-40957" type="cve" title="CVE-2022-40957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40958" id="CVE-2022-40958" type="cve" title="CVE-2022-40958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40959" id="CVE-2022-40959" type="cve" title="CVE-2022-40959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40960" id="CVE-2022-40960" type="cve" title="CVE-2022-40960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40962" id="CVE-2022-40962" type="cve" title="CVE-2022-40962"/>
      <reference href="https://bugzilla.redhat.com/2123255" id="2123255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123256" id="2123256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123257" id="2123257" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123258" id="2123258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128792" id="2128792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128793" id="2128793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128794" id="2128794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128795" id="2128795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128796" id="2128796" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128797" id="2128797" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6717.html" id="ALSA-2022:6717" type="self" title="ALSA-2022:6717"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="thunderbird" version="102.3.0" release="3.el9_0.alma" epoch="0" arch="s390x" src="thunderbird-102.3.0-3.el9_0.alma.src.rpm">
          <filename>thunderbird-102.3.0-3.el9_0.alma.s390x.rpm</filename>
          <sum type="sha256">7b87f39cb16e5c7bd63e9d9866cc3ceee9bbd0333bf726a58d6c8dffb072fedb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6763</id>
    <title>Important: bind security update</title>
    <issued date="2022-10-03 00:00:00"/>
    <updated date="2022-10-14 16:04:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080)
* bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177)
* bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6763" id="RHSA-2022:6763" type="rhsa" title="RHSA-2022:6763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3080" id="CVE-2022-3080" type="cve" title="CVE-2022-3080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38177" id="CVE-2022-38177" type="cve" title="CVE-2022-38177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38178" id="CVE-2022-38178" type="cve" title="CVE-2022-38178"/>
      <reference href="https://bugzilla.redhat.com/2128600" id="2128600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128601" id="2128601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128602" id="2128602" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6763.html" id="ALSA-2022:6763" type="self" title="ALSA-2022:6763"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="bind-libs" version="9.16.23" release="1.el9_0.1" epoch="32" arch="s390x" src="bind-9.16.23-1.el9_0.1.src.rpm">
          <filename>bind-libs-9.16.23-1.el9_0.1.s390x.rpm</filename>
          <sum type="sha256">3285b8b4aacf9d59c671a6b7df3b6165e99b4c1d1f0d5363c0b7742c1d137e88</sum>
        </package>
        <package name="bind-dnssec-doc" version="9.16.23" release="1.el9_0.1" epoch="32" arch="noarch" src="bind-9.16.23-1.el9_0.1.src.rpm">
          <filename>bind-dnssec-doc-9.16.23-1.el9_0.1.noarch.rpm</filename>
          <sum type="sha256">4088d5438d88486bafd546b5fb2ce066ca0050519d9080299ef4cdd16fb3b279</sum>
        </package>
        <package name="bind-dnssec-utils" version="9.16.23" release="1.el9_0.1" epoch="32" arch="s390x" src="bind-9.16.23-1.el9_0.1.src.rpm">
          <filename>bind-dnssec-utils-9.16.23-1.el9_0.1.s390x.rpm</filename>
          <sum type="sha256">64265e8fd90a25e7efd9c1aa1ba8da91ca6d1a88438b59f54262788c5f93e233</sum>
        </package>
        <package name="bind-chroot" version="9.16.23" release="1.el9_0.1" epoch="32" arch="s390x" src="bind-9.16.23-1.el9_0.1.src.rpm">
          <filename>bind-chroot-9.16.23-1.el9_0.1.s390x.rpm</filename>
          <sum type="sha256">a10c4c4b446ae5406c96497db5552c5f5e9f8229455cf8f20f07bf1bdd128b9b</sum>
        </package>
        <package name="python3-bind" version="9.16.23" release="1.el9_0.1" epoch="32" arch="noarch" src="bind-9.16.23-1.el9_0.1.src.rpm">
          <filename>python3-bind-9.16.23-1.el9_0.1.noarch.rpm</filename>
          <sum type="sha256">b4ab83c8dc85311851f565c3d71ab2af15778c57f1b1216c43ca4c896fcf2d0a</sum>
        </package>
        <package name="bind-utils" version="9.16.23" release="1.el9_0.1" epoch="32" arch="s390x" src="bind-9.16.23-1.el9_0.1.src.rpm">
          <filename>bind-utils-9.16.23-1.el9_0.1.s390x.rpm</filename>
          <sum type="sha256">c11e187fde1f20cd234729b6ef065a6c3b6c42e2ea3cf472e7511d249e605784</sum>
        </package>
        <package name="bind-license" version="9.16.23" release="1.el9_0.1" epoch="32" arch="noarch" src="bind-9.16.23-1.el9_0.1.src.rpm">
          <filename>bind-license-9.16.23-1.el9_0.1.noarch.rpm</filename>
          <sum type="sha256">e745141e636123b205e4d059aa3b57e080a29f58d014d6f6e5ca704d05093e33</sum>
        </package>
        <package name="bind" version="9.16.23" release="1.el9_0.1" epoch="32" arch="s390x" src="bind-9.16.23-1.el9_0.1.src.rpm">
          <filename>bind-9.16.23-1.el9_0.1.s390x.rpm</filename>
          <sum type="sha256">f3270d758e96dbb1ed374fa45c8388174c60bce65ac0b7517be38a1a5c42cc76</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6838</id>
    <title>Important: expat security update</title>
    <issued date="2022-10-06 00:00:00"/>
    <updated date="2022-10-07 11:50:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.

Security Fix(es):

* expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6838" id="RHSA-2022:6838" type="rhsa" title="RHSA-2022:6838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40674" id="CVE-2022-40674" type="cve" title="CVE-2022-40674"/>
      <reference href="https://bugzilla.redhat.com/2130769" id="2130769" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6838.html" id="ALSA-2022:6838" type="self" title="ALSA-2022:6838"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="expat-devel" version="2.2.10" release="12.el9_0.3" epoch="0" arch="s390x" src="expat-2.2.10-12.el9_0.3.src.rpm">
          <filename>expat-devel-2.2.10-12.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">e48d6c1fb21f77490f701c66e38b9fd093e8dbb5a1bc0b60d40950e8da09d585</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6839</id>
    <title>Important: squid security update</title>
    <issued date="2022-10-06 00:00:00"/>
    <updated date="2022-10-07 11:50:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6839" id="RHSA-2022:6839" type="rhsa" title="RHSA-2022:6839"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41318" id="CVE-2022-41318" type="cve" title="CVE-2022-41318"/>
      <reference href="https://bugzilla.redhat.com/2129771" id="2129771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6839.html" id="ALSA-2022:6839" type="self" title="ALSA-2022:6839"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="squid" version="5.2" release="1.el9_0.2" epoch="7" arch="s390x" src="squid-5.2-1.el9_0.2.src.rpm">
          <filename>squid-5.2-1.el9_0.2.s390x.rpm</filename>
          <sum type="sha256">410e69fd923c3e6af28a08e5052fc2cfe0b2a260c1f29dd05403e81d8454cdb3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6854</id>
    <title>Moderate: gnutls and nettle security, bug fix, and enhancement update</title>
    <issued date="2022-10-11 00:00:00"/>
    <updated date="2022-10-13 10:14:28"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls and nettle security, bug fix, and enhancement update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Nettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like LSH or GNUPG, or even in kernel space.

The following packages have been upgraded to a later upstream version: gnutls (3.7.6), nettle (3.8).

Security Fix(es):

* gnutls: Double free during gnutls_pkcs7_verify. (CVE-2022-2509)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* [IBM 9.1] [P10] POWER10 performance enhancements for cryptography: nettle - incremental work (BZ#2102589)
* Allow enabling KTLS in AlmaLinux 9.1 (BZ#2108532)
* DES-CBC bag is decryptable under FIPS (BZ#2115314)
* allow signature verification using RSA keys &lt;2k in FIPS mode (BZ#2119770)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6854" id="RHSA-2022:6854" type="rhsa" title="RHSA-2022:6854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2509" id="CVE-2022-2509" type="cve" title="CVE-2022-2509"/>
      <reference href="https://bugzilla.redhat.com/2108977" id="2108977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6854.html" id="ALSA-2022:6854" type="self" title="ALSA-2022:6854"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="gnutls-dane" version="3.7.6" release="12.el9_0" epoch="0" arch="s390x" src="gnutls-3.7.6-12.el9_0.src.rpm">
          <filename>gnutls-dane-3.7.6-12.el9_0.s390x.rpm</filename>
          <sum type="sha256">60f0563103d4078c319e4c1a45678c4659627dd592fb111e3bdbabcde040ee3b</sum>
        </package>
        <package name="gnutls-utils" version="3.7.6" release="12.el9_0" epoch="0" arch="s390x" src="gnutls-3.7.6-12.el9_0.src.rpm">
          <filename>gnutls-utils-3.7.6-12.el9_0.s390x.rpm</filename>
          <sum type="sha256">b17a7c6308415346376848dc3ee19f8f29310fd06128d311ece88f6de78acd26</sum>
        </package>
        <package name="gnutls-devel" version="3.7.6" release="12.el9_0" epoch="0" arch="s390x" src="gnutls-3.7.6-12.el9_0.src.rpm">
          <filename>gnutls-devel-3.7.6-12.el9_0.s390x.rpm</filename>
          <sum type="sha256">d78f394ef54194d9f988a69f85e9f2d9b289d651fdedc3fd4d5217c6681f8271</sum>
        </package>
        <package name="gnutls-c++" version="3.7.6" release="12.el9_0" epoch="0" arch="s390x" src="gnutls-3.7.6-12.el9_0.src.rpm">
          <filename>gnutls-c++-3.7.6-12.el9_0.s390x.rpm</filename>
          <sum type="sha256">fd2cd5f4675be1c34f75c47e8fa9d8f5055ce66658aee53a3483ccd4cb81d584</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6913</id>
    <title>Moderate: .NET 6.0 security and bugfix update</title>
    <issued date="2022-10-12 00:00:00"/>
    <updated date="2022-10-19 07:54:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security and bugfix update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK  6.0.110 and .NET Runtime 6.0.10.

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6913" id="RHSA-2022:6913" type="rhsa" title="RHSA-2022:6913"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41032" id="CVE-2022-41032" type="cve" title="CVE-2022-41032"/>
      <reference href="https://bugzilla.redhat.com/2132614" id="2132614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6913.html" id="ALSA-2022:6913" type="self" title="ALSA-2022:6913"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="dotnet-hostfxr-6.0" version="6.0.10" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el9_0.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.10-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">023ea4f843b582a34b5a26c8a7eead1cd42669c5b3beb3a79f7609422c30c75d</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.10" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el9_0.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.10-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">312bc9acbf4198825da48f4a13a6434350cb336018e9ea5fbced11e41890fb68</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.110" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el9_0.src.rpm">
          <filename>dotnet-templates-6.0-6.0.110-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">3b6e0fa8c03fd437729519b89e663a9ab5e256a896447e1e27d1dbc9bf9961d9</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.10" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el9_0.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.10-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">4057ae7ea551e1833881cf91593d94521e7400f19f9cbb4c42be210758f69746</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="6.0.110" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el9_0.src.rpm">
          <filename>netstandard-targeting-pack-2.1-6.0.110-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">8b7b1949fb3794c10f10516dfe00db6ddaf00337b38d7959869317e068860615</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.10" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el9_0.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.10-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">8fe38e7896232a782c9cd5985b61809d2348def647dd832bc1ca598bf946591e</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.10" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el9_0.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.10-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ac9cd07adae0822d77a053570290de47f4e57b3a43b177122908731e04bf8856</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.110" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el9_0.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.110-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">c373039779fb08d99d872753834e62ceb9a8f4928fe31e67d6cd3a5c4506be9c</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.10" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el9_0.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.10-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">e521cbdcab62cad236eeacd75fdfdd7316a970373feb11fa2dd65035f0834e6d</sum>
        </package>
        <package name="dotnet-host" version="6.0.10" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el9_0.src.rpm">
          <filename>dotnet-host-6.0.10-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">f3454e299c7ac62b8a60948e30e086a3a138955489dee71f83f98393b096a6bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6963</id>
    <title>Important: nodejs security update</title>
    <issued date="2022-10-18 00:00:00"/>
    <updated date="2022-10-19 08:10:23"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (16.17.1).

Security Fix(es):

* nodejs: weak randomness in WebCrypto keygen (CVE-2022-35255)
* nodejs: HTTP Request Smuggling due to incorrect parsing of header fields (CVE-2022-35256)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6963" id="RHSA-2022:6963" type="rhsa" title="RHSA-2022:6963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35255" id="CVE-2022-35255" type="cve" title="CVE-2022-35255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35256" id="CVE-2022-35256" type="cve" title="CVE-2022-35256"/>
      <reference href="https://bugzilla.redhat.com/2130517" id="2130517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130518" id="2130518" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6963.html" id="ALSA-2022:6963" type="self" title="ALSA-2022:6963"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="npm" version="8.15.0" release="1.16.17.1.1.el9_0" epoch="1" arch="s390x" src="nodejs-16.17.1-1.el9_0.src.rpm">
          <filename>npm-8.15.0-1.16.17.1.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">010ce55fd7f4b99fc64cd309abf08101e8a97a9b75bff513faeb833d0b725d9f</sum>
        </package>
        <package name="nodejs-docs" version="16.17.1" release="1.el9_0" epoch="1" arch="noarch" src="nodejs-16.17.1-1.el9_0.src.rpm">
          <filename>nodejs-docs-16.17.1-1.el9_0.noarch.rpm</filename>
          <sum type="sha256">025d8cf2ef9c89f70a4254dae5644efaa1dfaa4f88db77dec807afd44515bd8c</sum>
        </package>
        <package name="nodejs" version="16.17.1" release="1.el9_0" epoch="1" arch="s390x" src="nodejs-16.17.1-1.el9_0.src.rpm">
          <filename>nodejs-16.17.1-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">590bec1e3025a4e9ce6f99ec31334ab8fa075a3ba3043c1302fa9c48a0aaadde</sum>
        </package>
        <package name="nodejs-libs" version="16.17.1" release="1.el9_0" epoch="1" arch="s390x" src="nodejs-16.17.1-1.el9_0.src.rpm">
          <filename>nodejs-libs-16.17.1-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">807232891ec884518f3e57b6fbc5262225e8b43b74db337ecf91496354026791</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.17.1" release="1.el9_0" epoch="1" arch="s390x" src="nodejs-16.17.1-1.el9_0.src.rpm">
          <filename>nodejs-full-i18n-16.17.1-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">dd0d43ef0ebe4f59f4f4235c3735ab8b0fe77f10e5c22d5ff9b706ba0de4ca07</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6999</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2022-10-20 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)
* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)
* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 17.0.5) [almalinux-9] (BZ#2132934)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6999" id="RHSA-2022:6999" type="rhsa" title="RHSA-2022:6999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133776" id="2133776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133817" id="2133817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6999.html" id="ALSA-2022:6999" type="self" title="ALSA-2022:6999"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="java-17-openjdk-static-libs" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">03564565d526a82e9f0f03b124689736a6ac663759f492de92a18fe67a55b3ac</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-headless-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">0d491e520e83eb0e734662a18a1683456d76bcbeecb070b8c31822e5865801a3</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-devel-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">28667fb8f7ed71a53e4100aa15ed28c9347bb47eb0333df2b62b3ba5ce924974</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">37010655edb41c33fda9544b4fef0fd04d4bfca7ddae164e3d509c90ef43f061</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">5327071f32ab4fe4e75d64fc1b436b013729731e47fa158ab2da6a0e7945873c</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-demo-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">7a7aaa17745bcbd2036cdceca9bdfea37316e04ff7d04ac1baad6a117e63bc48</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">92dcc578a8897262eb5121982118f22839ff1c93d082d6cc662b1918c8b6af5a</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-src-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">c70881f441bdf27e6a2fa6907981169985c5c95aeb227e65b263f9f5dad4ca28</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">e14a344f2faa556defc15577d33d1b63ddddcfa37b17e53db9a19512912627ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7007</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2022-10-20 00:00:00"/>
    <updated date="2022-10-21 08:42:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7007" id="RHSA-2022:7007" type="rhsa" title="RHSA-2022:7007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7007.html" id="ALSA-2022:7007" type="self" title="ALSA-2022:7007"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="java-1.8.0-openjdk" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">06d68f066651b947f82ec684fb455a3946458e8bb8892a30dd2fb4e33905e132</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.352.b08-2.el9_0.noarch.rpm</filename>
          <sum type="sha256">0714bda4f7c43d4248299ccb0595b9d9ccd9eccc742c38214fb935d4e8af98e8</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.352.b08-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">3998c7d2ee5f105e2079d3f849f32f8e3535ba6eb70469ee1b21194fe4cd60ce</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.352.b08-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">8316fac006d41db046d47a86858c220e4a2624dc11891eed2b3743ed1a05bd7a</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.352.b08-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">aa52902ff8184f064e3fd305cd429cdb77ea68a29294d99117aba50472d44c34</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.352.b08-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">fba0ba7d902ba2bf1d319f44428f584a4aa07e89c25c256ba3e8108401f22a80</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.352.b08" release="2.el9_0" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el9_0.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.352.b08-2.el9_0.noarch.rpm</filename>
          <sum type="sha256">fbc0ac4bca06e1bc8994469e44bd70533e25c849c92964be80bf998d8e4359a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7013</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2022-10-20 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)
* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)
* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 11.0.17) [almalinux-9] (BZ#2131865)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7013" id="RHSA-2022:7013" type="rhsa" title="RHSA-2022:7013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133776" id="2133776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133817" id="2133817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7013.html" id="ALSA-2022:7013" type="self" title="ALSA-2022:7013"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="java-11-openjdk-headless" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-headless-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">184533e5107898c19af4799f72b6a8d390413212cf60971176aee41a0d18e986</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-demo-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">2b8d7a8a05fa6deb41bbe833a2b4f6ef12debffd0aa49a337aba813647086805</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-devel-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">2d6dfcac9805a2634efb10185694e6c177568f11a8e138615f0dbaa8860272c7</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">443c46997ad8959d0697c88836f2a7dc65d16ef1dea1dd55b2726fd9a2932566</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">51a422d2b993088b3baac7d07eaa011a0e823bc5d272b680b94d0bc7cee864df</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">81ecedbb68b18659389274c63fa3484048d6f1826804886edb47afd740721096</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">a871c3c34828517dd7036fa1d9653826a74401a7396c367f0c43d9c2a1930826</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-src-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">fcf7d67d87a6a9871b0a92385823504f01ef9ddd8a6139ecfd1dc46d8e73b1d5</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">fd636c6b53f8007722323347c08a43a1a2de71f0a61f47e0e572f4cf5267edb9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7020</id>
    <title>Important: firefox security update</title>
    <issued date="2022-10-18 00:00:00"/>
    <updated date="2022-10-19 12:27:23"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.3.0 ESR.

Security Fix(es):

* expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7020" id="RHSA-2022:7020" type="rhsa" title="RHSA-2022:7020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40674" id="CVE-2022-40674" type="cve" title="CVE-2022-40674"/>
      <reference href="https://bugzilla.redhat.com/2130769" id="2130769" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7020.html" id="ALSA-2022:7020" type="self" title="ALSA-2022:7020"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="firefox" version="102.3.0" release="7.el9_0.alma" epoch="0" arch="s390x" src="firefox-102.3.0-7.el9_0.alma.src.rpm">
          <filename>firefox-102.3.0-7.el9_0.alma.s390x.rpm</filename>
          <sum type="sha256">74bd0fe9a65c88c4e8a4dd17979b98619056ce696c225b62348b8ce319f6debf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7071</id>
    <title>Important: firefox security update</title>
    <issued date="2022-10-20 00:00:00"/>
    <updated date="2022-10-21 10:45:21"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.4.0 ESR.

Security Fix(es):

* Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927)
* Mozilla: Memory Corruption in JS Engine (CVE-2022-42928)
* Mozilla: Denial of Service via window.print (CVE-2022-42929)
* Mozilla: Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4 (CVE-2022-42932)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7071" id="RHSA-2022:7071" type="rhsa" title="RHSA-2022:7071"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42927" id="CVE-2022-42927" type="cve" title="CVE-2022-42927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42928" id="CVE-2022-42928" type="cve" title="CVE-2022-42928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42929" id="CVE-2022-42929" type="cve" title="CVE-2022-42929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42932" id="CVE-2022-42932" type="cve" title="CVE-2022-42932"/>
      <reference href="https://bugzilla.redhat.com/2136156" id="2136156" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136157" id="2136157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136158" id="2136158" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136159" id="2136159" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7071.html" id="ALSA-2022:7071" type="self" title="ALSA-2022:7071"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="firefox" version="102.4.0" release="1.el9_0.alma" epoch="0" arch="s390x" src="firefox-102.4.0-1.el9_0.alma.src.rpm">
          <filename>firefox-102.4.0-1.el9_0.alma.s390x.rpm</filename>
          <sum type="sha256">c5350f5a9243afcbc09593c3d4e12f17967d3ab259d5aca0aaa735c73a74c336</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7178</id>
    <title>Important: thunderbird security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-26 06:48:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.4.0.

Security Fix(es):

* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators (CVE-2022-39249)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a device verification attack (CVE-2022-39250)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack (CVE-2022-39251)
* Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927)
* Mozilla: Memory Corruption in JS Engine (CVE-2022-42928)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a data corruption issue (CVE-2022-39236)
* Mozilla: Denial of Service via window.print (CVE-2022-42929)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.4 and Thunderbird 102.4 (CVE-2022-42932)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7178" id="RHSA-2022:7178" type="rhsa" title="RHSA-2022:7178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39236" id="CVE-2022-39236" type="cve" title="CVE-2022-39236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39249" id="CVE-2022-39249" type="cve" title="CVE-2022-39249"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39250" id="CVE-2022-39250" type="cve" title="CVE-2022-39250"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39251" id="CVE-2022-39251" type="cve" title="CVE-2022-39251"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42927" id="CVE-2022-42927" type="cve" title="CVE-2022-42927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42928" id="CVE-2022-42928" type="cve" title="CVE-2022-42928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42929" id="CVE-2022-42929" type="cve" title="CVE-2022-42929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42932" id="CVE-2022-42932" type="cve" title="CVE-2022-42932"/>
      <reference href="https://bugzilla.redhat.com/2135391" id="2135391" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2135393" id="2135393" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2135395" id="2135395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2135396" id="2135396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136156" id="2136156" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136157" id="2136157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136158" id="2136158" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136159" id="2136159" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7178.html" id="ALSA-2022:7178" type="self" title="ALSA-2022:7178"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="thunderbird" version="102.4.0" release="1.el9_0.alma" epoch="0" arch="s390x" src="thunderbird-102.4.0-1.el9_0.alma.src.rpm">
          <filename>thunderbird-102.4.0-1.el9_0.alma.s390x.rpm</filename>
          <sum type="sha256">3c403c39757473cef161471688eb770324cb292320a1bda31b4ddc39c00b2103</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7288</id>
    <title>Important: openssl security update</title>
    <issued date="2022-11-01 00:00:00"/>
    <updated date="2022-11-02 10:22:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full strength general purpose cryptography library.

Security Fix(es):

* OpenSSL: X.509 Email Address Buffer Overflow (CVE-2022-3602)
* OpenSSL: X.509 Email Address Variable Length Buffer Overflow (CVE-2022-3786)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7288" id="RHSA-2022:7288" type="rhsa" title="RHSA-2022:7288"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3602" id="CVE-2022-3602" type="cve" title="CVE-2022-3602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3786" id="CVE-2022-3786" type="cve" title="CVE-2022-3786"/>
      <reference href="https://bugzilla.redhat.com/2137723" id="2137723" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2139104" id="2139104" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7288.html" id="ALSA-2022:7288" type="self" title="ALSA-2022:7288"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="openssl-devel" version="3.0.1" release="43.el9_0" epoch="1" arch="s390x" src="openssl-3.0.1-43.el9_0.src.rpm">
          <filename>openssl-devel-3.0.1-43.el9_0.s390x.rpm</filename>
          <sum type="sha256">2c76733a57f43cc39144cc197112915e7930461adcc8439faa78a5e8c72f3656</sum>
        </package>
        <package name="openssl-perl" version="3.0.1" release="43.el9_0" epoch="1" arch="s390x" src="openssl-3.0.1-43.el9_0.src.rpm">
          <filename>openssl-perl-3.0.1-43.el9_0.s390x.rpm</filename>
          <sum type="sha256">6653bb74b8f05ffe5c87d8d66cfa4c985b03f26f029fa684ea279621c92cc119</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7314</id>
    <title>Moderate: zlib security update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-02 21:25:38"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zlib security update</summary>
    <description>The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.

Security Fix(es):

* zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7314" id="RHSA-2022:7314" type="rhsa" title="RHSA-2022:7314"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37434" id="CVE-2022-37434" type="cve" title="CVE-2022-37434"/>
      <reference href="https://bugzilla.redhat.com/2116639" id="2116639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7314.html" id="ALSA-2022:7314" type="self" title="ALSA-2022:7314"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="zlib-devel" version="1.2.11" release="32.el9_0" epoch="0" arch="s390x" src="zlib-1.2.11-32.el9_0.src.rpm">
          <filename>zlib-devel-1.2.11-32.el9_0.s390x.rpm</filename>
          <sum type="sha256">d66b3e3c74e1a0de970e452f2ecf2a25473bd39ec4511cecee4953dbc87f7073</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7318</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-03 11:11:32"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* posix cpu timer use-after-free may lead to local privilege escalation (CVE-2022-2585)
* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel crash after reboot of T14/G2 AMD laptop (mt7921e module) (BZ#2095653)
* execve exit tracepoint not called (BZ#2106661)
* Matrox black screen on VGA output on some systems. (BZ#2112017)
* The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (BZ#2121129)
* watchdog BUG: soft lockup - CPU#30 stuck for 34s! [swapper/30:0] (BZ#2127857)
* Update cifs to 5.16 (BZ#2127858)
* Bad page state in process qemu-kvm  pfn:68a74600 (BZ#2127859)
* vfio zero page mappings fail after 2M instances (BZ#2128791)
* The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (part 2) (BZ#2128970)

Enhancement(s):

* Need to enable hpilo to support new HPE RL300 Gen11 for ARM (aarch64) (BZ#2129453)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7318" id="RHSA-2022:7318" type="rhsa" title="RHSA-2022:7318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2585" id="CVE-2022-2585" type="cve" title="CVE-2022-2585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30594" id="CVE-2022-30594" type="cve" title="CVE-2022-30594"/>
      <reference href="https://bugzilla.redhat.com/2085300" id="2085300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114874" id="2114874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7318.html" id="ALSA-2022:7318" type="self" title="ALSA-2022:7318"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="70.30.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.30.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-70.30.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">061aa4ea2e1e24d67b0870d5ff6e38783b16ead9d087591e5077bf6a8970e570</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="70.30.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.30.1.el9_0.src.rpm">
          <filename>kernel-doc-5.14.0-70.30.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">0bb3d9bfc7a0fc3862ef5f8dc61a994adef7e0c034d6efe9843032ece643b8b7</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="70.30.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.30.1.el9_0.src.rpm">
          <filename>kernel-headers-5.14.0-70.30.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">13f7ea1fa448064f7b5d925a78c94d307efb6bb45f5e5cc814e6ee6bdda5e779</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="70.30.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.30.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-5.14.0-70.30.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">22f83cc7a67213bdd80805fe0a4c93600ed8f51efd9ba09663b138c95171044d</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="70.30.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.30.1.el9_0.src.rpm">
          <filename>kernel-devel-matched-5.14.0-70.30.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">239d935c3e80a4417073fc184509d2899c667a1b542f029b7710ec7700d60c07</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="70.30.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.30.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-70.30.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">34e6820c0862117f8184ab57f2d7391fcd74fc614637480cdb8d47fb8562db4e</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="70.30.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.30.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-70.30.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">3d5aa414635206c1329222cc3764e8a791482716b598e369c1366584fc96709f</sum>
        </package>
        <package name="perf" version="5.14.0" release="70.30.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.30.1.el9_0.src.rpm">
          <filename>perf-5.14.0-70.30.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">c216272e52202f636894717a66b0c55d3bc1a04c8ec3be9f23fd1791835b4c29</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="70.30.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.30.1.el9_0.src.rpm">
          <filename>kernel-devel-5.14.0-70.30.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">cd5adb6e324750ac08ff6971735695e2ecbca9a34841136aed94be658b14fe87</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7323</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-03 06:47:55"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7323" id="RHSA-2022:7323" type="rhsa" title="RHSA-2022:7323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-10735" id="CVE-2020-10735" type="cve" title="CVE-2020-10735"/>
      <reference href="https://bugzilla.redhat.com/1834423" id="1834423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7323.html" id="ALSA-2022:7323" type="self" title="ALSA-2022:7323"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="python3-tkinter" version="3.9.10" release="3.el9_0" epoch="0" arch="s390x" src="python3.9-3.9.10-3.el9_0.src.rpm">
          <filename>python3-tkinter-3.9.10-3.el9_0.s390x.rpm</filename>
          <sum type="sha256">4d14890655284b30bc192e2a1c0447b96565dbdc8b588d94e1ff35806d312aca</sum>
        </package>
        <package name="python3-devel" version="3.9.10" release="3.el9_0" epoch="0" arch="s390x" src="python3.9-3.9.10-3.el9_0.src.rpm">
          <filename>python3-devel-3.9.10-3.el9_0.s390x.rpm</filename>
          <sum type="sha256">70f3ac4f0e5e30f6eec3413255337bd96d3734d25e86b194d04632be65ceed58</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.10" release="3.el9_0" epoch="0" arch="noarch" src="python3.9-3.9.10-3.el9_0.src.rpm">
          <filename>python-unversioned-command-3.9.10-3.el9_0.noarch.rpm</filename>
          <sum type="sha256">78e87a3c80853180d4daadc3503e72fc628b08d5282685446fec795339bd949e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7326</id>
    <title>Important: pki-core security update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-02 21:39:21"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pki-core security update</summary>
    <description>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

* pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7326" id="RHSA-2022:7326" type="rhsa" title="RHSA-2022:7326"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2414" id="CVE-2022-2414" type="cve" title="CVE-2022-2414"/>
      <reference href="https://bugzilla.redhat.com/2104676" id="2104676" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7326.html" id="ALSA-2022:7326" type="self" title="ALSA-2022:7326"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="python3-pki" version="11.0.6" release="2.el9_0" epoch="0" arch="noarch" src="pki-core-11.0.6-2.el9_0.src.rpm">
          <filename>python3-pki-11.0.6-2.el9_0.noarch.rpm</filename>
          <sum type="sha256">33588e2de71f461b5623c09ff8adfb2b3501e1389cb53e40417c594ee5e76649</sum>
        </package>
        <package name="pki-kra" version="11.0.6" release="2.el9_0" epoch="0" arch="noarch" src="pki-core-11.0.6-2.el9_0.src.rpm">
          <filename>pki-kra-11.0.6-2.el9_0.noarch.rpm</filename>
          <sum type="sha256">3663ecde2b327e6e9f2824d4b2e3ca103e06304c8fd027f61cc26959937ec8d0</sum>
        </package>
        <package name="pki-base-java" version="11.0.6" release="2.el9_0" epoch="0" arch="noarch" src="pki-core-11.0.6-2.el9_0.src.rpm">
          <filename>pki-base-java-11.0.6-2.el9_0.noarch.rpm</filename>
          <sum type="sha256">37d249b5772c7b4be85aa3bd4f758feb90df6fbbb2f2ad42c5884784d98e9829</sum>
        </package>
        <package name="pki-tools" version="11.0.6" release="2.el9_0" epoch="0" arch="s390x" src="pki-core-11.0.6-2.el9_0.src.rpm">
          <filename>pki-tools-11.0.6-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">5a2c3ad030b0c1fd1c0f31d352ea80a57b6b7ab7b52057dd97a98200ceb0e4c3</sum>
        </package>
        <package name="pki-symkey" version="11.0.6" release="2.el9_0" epoch="0" arch="s390x" src="pki-core-11.0.6-2.el9_0.src.rpm">
          <filename>pki-symkey-11.0.6-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">62c8796b84c14d26be775baf4b94139569f47466833b3bb916fb5fc78e431462</sum>
        </package>
        <package name="pki-acme" version="11.0.6" release="2.el9_0" epoch="0" arch="noarch" src="pki-core-11.0.6-2.el9_0.src.rpm">
          <filename>pki-acme-11.0.6-2.el9_0.noarch.rpm</filename>
          <sum type="sha256">7b1d3aedda9b7ea346d9730a6d7066fa2e1b406b4d9b0a55cb8ccce598d9900c</sum>
        </package>
        <package name="pki-server" version="11.0.6" release="2.el9_0" epoch="0" arch="noarch" src="pki-core-11.0.6-2.el9_0.src.rpm">
          <filename>pki-server-11.0.6-2.el9_0.noarch.rpm</filename>
          <sum type="sha256">81de71c2f5baa1a1a9dfd5835efeb21ec435c73b06c57646f86cd4791c1d620e</sum>
        </package>
        <package name="pki-base" version="11.0.6" release="2.el9_0" epoch="0" arch="noarch" src="pki-core-11.0.6-2.el9_0.src.rpm">
          <filename>pki-base-11.0.6-2.el9_0.noarch.rpm</filename>
          <sum type="sha256">b5255a17f14305055a701fa99beabc0fa64becfd31413319cb6f77b7f57d8a7c</sum>
        </package>
        <package name="pki-ca" version="11.0.6" release="2.el9_0" epoch="0" arch="noarch" src="pki-core-11.0.6-2.el9_0.src.rpm">
          <filename>pki-ca-11.0.6-2.el9_0.noarch.rpm</filename>
          <sum type="sha256">e656727cd48c57a2caa56693717055ad5cc708a1a8bcb2dc3dd86d4fa5897305</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7329</id>
    <title>Moderate: lua security update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-03 06:47:45"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>lua security update</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling (CVE-2022-33099)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7329" id="RHSA-2022:7329" type="rhsa" title="RHSA-2022:7329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33099" id="CVE-2022-33099" type="cve" title="CVE-2022-33099"/>
      <reference href="https://bugzilla.redhat.com/2104427" id="2104427" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7329.html" id="ALSA-2022:7329" type="self" title="ALSA-2022:7329"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_default</name>
        <package name="lua" version="5.4.2" release="4.el9_0.3" epoch="0" arch="s390x" src="lua-5.4.2-4.el9_0.3.src.rpm">
          <filename>lua-5.4.2-4.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">241e6776d500dbe56d58c34edaade9ae02e479cb1f218aaf5e2cbe008110a4e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7950</id>
    <title>Low: Image Builder security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 08:32:07"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>Image Builder security, bug fix, and enhancement update</summary>
    <description>Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood.

Security Fix(es):

* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7950" id="RHSA-2022:7950" type="rhsa" title="RHSA-2022:7950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32189" id="CVE-2022-32189" type="cve" title="CVE-2022-32189"/>
      <reference href="https://bugzilla.redhat.com/2113814" id="2113814" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7950.html" id="ALSA-2022:7950" type="self" title="ALSA-2022:7950"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="weldr-client" version="35.5" release="4.el9" epoch="0" arch="s390x" src="weldr-client-35.5-4.el9.src.rpm">
          <filename>weldr-client-35.5-4.el9.s390x.rpm</filename>
          <sum type="sha256">8ddc566887b0c2bae85d85f10d3baec7045bc9002feec2a801d2349221b9f98a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7954</id>
    <title>Moderate: podman security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:46:54"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>podman security and bug fix update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

* golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension (CVE-2020-28851)
* golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag (CVE-2020-28852)
* podman: podman machine spawns gvproxy with port bound to all IPs (CVE-2021-4024)
* podman: Remote traffic to rootless containers is seen as orginating from localhost (CVE-2021-20199)
* containers/storage: DoS via malicious image (CVE-2021-20291)
* golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197)
* golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558)
* golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7954" id="RHSA-2022:7954" type="rhsa" title="RHSA-2022:7954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-28851" id="CVE-2020-28851" type="cve" title="CVE-2020-28851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-28852" id="CVE-2020-28852" type="cve" title="CVE-2020-28852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-20199" id="CVE-2021-20199" type="cve" title="CVE-2021-20199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-20291" id="CVE-2021-20291" type="cve" title="CVE-2021-20291"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33197" id="CVE-2021-33197" type="cve" title="CVE-2021-33197"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-34558" id="CVE-2021-34558" type="cve" title="CVE-2021-34558"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-4024" id="CVE-2021-4024" type="cve" title="CVE-2021-4024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27191" id="CVE-2022-27191" type="cve" title="CVE-2022-27191"/>
      <reference href="https://bugzilla.redhat.com/1913333" id="1913333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1913338" id="1913338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1919050" id="1919050" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1939485" id="1939485" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1983596" id="1983596" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1989570" id="1989570" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2026675" id="2026675" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064702" id="2064702" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7954.html" id="ALSA-2022:7954" type="self" title="ALSA-2022:7954"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="podman" version="4.2.0" release="3.el9" epoch="2" arch="s390x" src="podman-4.2.0-3.el9.src.rpm">
          <filename>podman-4.2.0-3.el9.s390x.rpm</filename>
          <sum type="sha256">0d7fac306f08937559dc2858e052832bc79c723a6ca68d3f98b14a1ff87d2f11</sum>
        </package>
        <package name="podman-remote" version="4.2.0" release="3.el9" epoch="2" arch="s390x" src="podman-4.2.0-3.el9.src.rpm">
          <filename>podman-remote-4.2.0-3.el9.s390x.rpm</filename>
          <sum type="sha256">4c9f4b49244a0b9908409cc68a0b9033629744c7d3c874cc3b3f3ef50bb83aff</sum>
        </package>
        <package name="podman-plugins" version="4.2.0" release="3.el9" epoch="2" arch="s390x" src="podman-4.2.0-3.el9.src.rpm">
          <filename>podman-plugins-4.2.0-3.el9.s390x.rpm</filename>
          <sum type="sha256">4f1dc8c53da46de2b84bcd98457e6deed15b4b430763b46cc5c23ce1aed7ac60</sum>
        </package>
        <package name="podman-docker" version="4.2.0" release="3.el9" epoch="2" arch="noarch" src="podman-4.2.0-3.el9.src.rpm">
          <filename>podman-docker-4.2.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">73f67ab96051535408d365b625b0fe93169751c1b97cae0c9604aa9d9e299591</sum>
        </package>
        <package name="podman-gvproxy" version="4.2.0" release="3.el9" epoch="2" arch="s390x" src="podman-4.2.0-3.el9.src.rpm">
          <filename>podman-gvproxy-4.2.0-3.el9.s390x.rpm</filename>
          <sum type="sha256">ce1086d0ed376330348f6a57412174cdf66e3ca775af05d4529ac129d9dd92c4</sum>
        </package>
        <package name="podman-tests" version="4.2.0" release="3.el9" epoch="2" arch="s390x" src="podman-4.2.0-3.el9.src.rpm">
          <filename>podman-tests-4.2.0-3.el9.s390x.rpm</filename>
          <sum type="sha256">db036ec746500fdcdb8bd7e048dda17d0a12ece13be5d070ec8285b77d5facae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7955</id>
    <title>Moderate: skopeo security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:44:13"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>skopeo security and bug fix update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. 

Security Fix(es):

* containers/storage: DoS via malicious image (CVE-2021-20291)
* golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7955" id="RHSA-2022:7955" type="rhsa" title="RHSA-2022:7955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-20291" id="CVE-2021-20291" type="cve" title="CVE-2021-20291"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33198" id="CVE-2021-33198" type="cve" title="CVE-2021-33198"/>
      <reference href="https://bugzilla.redhat.com/1939485" id="1939485" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1989575" id="1989575" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7955.html" id="ALSA-2022:7955" type="self" title="ALSA-2022:7955"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="skopeo-tests" version="1.9.2" release="1.el9" epoch="2" arch="s390x" src="skopeo-1.9.2-1.el9.src.rpm">
          <filename>skopeo-tests-1.9.2-1.el9.s390x.rpm</filename>
          <sum type="sha256">2962082e0775fce2ef0ec859a171e128455b396014863fce9cf307513f964a72</sum>
        </package>
        <package name="skopeo" version="1.9.2" release="1.el9" epoch="2" arch="s390x" src="skopeo-1.9.2-1.el9.src.rpm">
          <filename>skopeo-1.9.2-1.el9.s390x.rpm</filename>
          <sum type="sha256">742d56708d94df4ee029e87c9f643e3faa52baf1cce37ff137f030ce0b158a8b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7958</id>
    <title>Low: libguestfs security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:40:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libguestfs security, bug fix, and enhancement update</summary>
    <description>The libguestfs packages contain a library used for accessing and modifying virtual machine disk images.

Security Fix(es):

* libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7958" id="RHSA-2022:7958" type="rhsa" title="RHSA-2022:7958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2211" id="CVE-2022-2211" type="cve" title="CVE-2022-2211"/>
      <reference href="https://bugzilla.redhat.com/2100862" id="2100862" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7958.html" id="ALSA-2022:7958" type="self" title="ALSA-2022:7958"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="perl-Sys-Guestfs" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>perl-Sys-Guestfs-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">0118717f0cb79199bdb786242658eddc8616053925db121132a13a22607017e7</sum>
        </package>
        <package name="libguestfs-appliance" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-appliance-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">077fcc48ead35ba4b6e4eee604a4e4d05a9bc0f63693a1dc8f6ad92aa1c0fcdc</sum>
        </package>
        <package name="libguestfs" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">18479d85b1883ea0ee7417a1f53fb9b86504ae22e6d0ebd503c825cdf5c0ae0a</sum>
        </package>
        <package name="libguestfs-xfs" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-xfs-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">250156b5e1c352672b50fd14e8999ef4a58740603eb961f8da3bc9167ae8d8e0</sum>
        </package>
        <package name="python3-libguestfs" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>python3-libguestfs-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">b3884573dacab941f910a94922a5ba7e3383e22125f8f7531395b1df7dca09be</sum>
        </package>
        <package name="libguestfs-rsync" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-rsync-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">bc47ff0113036b3a6b50eb4f7c182ed2bd6744f46638d49658acdf9e121bd382</sum>
        </package>
        <package name="libguestfs-rescue" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-rescue-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">d43ffb8649f6454e607c49c7819131137e23856cc553fb0ae807675b722c96f3</sum>
        </package>
        <package name="libguestfs-inspect-icons" version="1.48.4" release="2.el9.alma" epoch="1" arch="noarch" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-inspect-icons-1.48.4-2.el9.alma.noarch.rpm</filename>
          <sum type="sha256">f38562adf153fb78b7c76f54007cf32c4ce191b9b6435f581ee90ad94527fca8</sum>
        </package>
        <package name="libguestfs-bash-completion" version="1.48.4" release="2.el9.alma" epoch="1" arch="noarch" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-bash-completion-1.48.4-2.el9.alma.noarch.rpm</filename>
          <sum type="sha256">faccb71d666a91ce603f7b7350d7044cb98fbf437ea0599dc6d1ef67dee07c3d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7959</id>
    <title>Low: guestfs-tools security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:38:04"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>guestfs-tools security, bug fix, and enhancement update</summary>
    <description>guestfs-tools is a set of tools that can be used to make batch configuration changes to guests, get disk used/free statistics, perform backups and guest clones, change registry/UUID/hostname info, build guests from scratch, and much more.

Security Fix(es):

* libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7959" id="RHSA-2022:7959" type="rhsa" title="RHSA-2022:7959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2211" id="CVE-2022-2211" type="cve" title="CVE-2022-2211"/>
      <reference href="https://bugzilla.redhat.com/2100862" id="2100862" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7959.html" id="ALSA-2022:7959" type="self" title="ALSA-2022:7959"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="guestfs-tools" version="1.48.2" release="5.el9" epoch="0" arch="s390x" src="guestfs-tools-1.48.2-5.el9.src.rpm">
          <filename>guestfs-tools-1.48.2-5.el9.s390x.rpm</filename>
          <sum type="sha256">671307e20bc6afdbca490ae70ae2c1af88e46611a627b7a15ecfe97da9fc4daa</sum>
        </package>
        <package name="virt-win-reg" version="1.48.2" release="5.el9" epoch="0" arch="noarch" src="guestfs-tools-1.48.2-5.el9.src.rpm">
          <filename>virt-win-reg-1.48.2-5.el9.noarch.rpm</filename>
          <sum type="sha256">cc2169b08c202855da33ed07c538af06a1102c453878b9def543e2ac7071e0b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7967</id>
    <title>Moderate: qemu-kvm security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:35:33"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qemu-kvm security, bug fix, and enhancement update</summary>
    <description>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

The following packages have been upgraded to a later upstream version: qemu-kvm (7.0.0). (BZ#2064757)

Security Fix(es):

* QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free (CVE-2021-3750)
* QEMU: fdc: heap buffer overflow in DMA read data transfers (CVE-2021-3507)
* QEMU: intel-hda: segmentation fault due to stack overflow (CVE-2021-3611)
* QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c (CVE-2021-4158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7967" id="RHSA-2022:7967" type="rhsa" title="RHSA-2022:7967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3507" id="CVE-2021-3507" type="cve" title="CVE-2021-3507"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3611" id="CVE-2021-3611" type="cve" title="CVE-2021-3611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3750" id="CVE-2021-3750" type="cve" title="CVE-2021-3750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-4158" id="CVE-2021-4158" type="cve" title="CVE-2021-4158"/>
      <reference href="https://bugzilla.redhat.com/1951118" id="1951118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1973784" id="1973784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1999073" id="1999073" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2035002" id="2035002" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7967.html" id="ALSA-2022:7967" type="self" title="ALSA-2022:7967"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="qemu-kvm-audio-pa" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-kvm-audio-pa-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">01978350b41b64443d2d59395322f0bbb8656154dbc25afe3738920ee0509f9f</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu-ccw" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-ccw-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">1aa7033a406b41886d7830a8d3985288487d2b9fc0a34a439d979ecf48f9b943</sum>
        </package>
        <package name="qemu-kvm-common" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-kvm-common-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">26184fb20ad36ed0cf9b66a712c8fd842f295e2e32bff66316fd452c7fbf04db</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">39eef99a7a7e4002723484120d313c8f68d983bbd334c63f30ae4fb7b47aeee7</sum>
        </package>
        <package name="qemu-guest-agent" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-guest-agent-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">43ce90c54a2d4b0d42f7d379e809ba9035573b9fdd12eea56d0726223b5efe51</sum>
        </package>
        <package name="qemu-kvm-tools" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-kvm-tools-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">55ce02b6f5f872398b828d9e0a16cbc7f26df8a81152b1d7f133e62f1327662d</sum>
        </package>
        <package name="qemu-img" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-img-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">61d52a4cb129054d2822343a84594e3f2a22d26d020664bbe58d0d7c2a5ade5d</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-kvm-block-curl-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">806c308ab8a010fdbef0072dcd256e7fcc0abe1b4d7712097e744804f0dcde20</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-kvm-block-rbd-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">898f9f53e52b54765c9b48ec730f27f25e886b92646f50dafceae9df4f94ecaa</sum>
        </package>
        <package name="qemu-kvm-docs" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-kvm-docs-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">ab444489a2a7da9d8d0b43d4046ac1c638d2a4fcf449f7089e46c44f0a91489f</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu-gl" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-gl-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">acb4077d3908a1648fb0e43948ff9598e904bf0cc616d7314499530ce6a6603d</sum>
        </package>
        <package name="qemu-pr-helper" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-pr-helper-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">b55c70b1599c4afea6e674cde9ffc9d440ebef791a142089ebe6aa5d991b0420</sum>
        </package>
        <package name="qemu-kvm" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-kvm-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">c012f755c12e9f2ef74101ae5a4a8f5f60d52ad08223ceaacf5523f8631e6d09</sum>
        </package>
        <package name="qemu-kvm-device-usb-host" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-kvm-device-usb-host-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">cf4d71f1f7cbe95a940d2dfcda719598c80ab76b5673e00c316c81dda80cfba1</sum>
        </package>
        <package name="qemu-kvm-core" version="7.0.0" release="13.el9" epoch="17" arch="s390x" src="qemu-kvm-7.0.0-13.el9.src.rpm">
          <filename>qemu-kvm-core-7.0.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">f2dce77348a7ae9188b04bd5d2890099e3e7ebe92ac50e956370d9c578987baf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7970</id>
    <title>Moderate: protobuf security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:28:31"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>protobuf security update</summary>
    <description>The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.

Security Fix(es):

* protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference (CVE-2021-22570)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7970" id="RHSA-2022:7970" type="rhsa" title="RHSA-2022:7970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-22570" id="CVE-2021-22570" type="cve" title="CVE-2021-22570"/>
      <reference href="https://bugzilla.redhat.com/2049429" id="2049429" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7970.html" id="ALSA-2022:7970" type="self" title="ALSA-2022:7970"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="protobuf" version="3.14.0" release="13.el9" epoch="0" arch="s390x" src="protobuf-3.14.0-13.el9.src.rpm">
          <filename>protobuf-3.14.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">38f9248700e0b80246ec9a206a0b0a07246fb622879568f1cc86cde316ab2b2b</sum>
        </package>
        <package name="protobuf-lite" version="3.14.0" release="13.el9" epoch="0" arch="s390x" src="protobuf-3.14.0-13.el9.src.rpm">
          <filename>protobuf-lite-3.14.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">70baac52b4b6a54fc8889eff07e3de02691f8f36100f5bd6fa8a81dc36421a98</sum>
        </package>
        <package name="python3-protobuf" version="3.14.0" release="13.el9" epoch="0" arch="noarch" src="protobuf-3.14.0-13.el9.src.rpm">
          <filename>python3-protobuf-3.14.0-13.el9.noarch.rpm</filename>
          <sum type="sha256">9a5664787d9851b1758b25d0fb5d278f659b56141b23cce23349fe8c58e7de78</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7978</id>
    <title>Moderate: gimp security and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:24:22"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gimp security and enhancement update</summary>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

* gimp: buffer overflow through a crafted XCF file (CVE-2022-30067)
* gimp: unhandled exception via a crafted XCF file may lead to DoS (CVE-2022-32990)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7978" id="RHSA-2022:7978" type="rhsa" title="RHSA-2022:7978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30067" id="CVE-2022-30067" type="cve" title="CVE-2022-30067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32990" id="CVE-2022-32990" type="cve" title="CVE-2022-32990"/>
      <reference href="https://bugzilla.redhat.com/2087591" id="2087591" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103202" id="2103202" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7978.html" id="ALSA-2022:7978" type="self" title="ALSA-2022:7978"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="gimp" version="2.99.8" release="3.el9" epoch="2" arch="s390x" src="gimp-2.99.8-3.el9.src.rpm">
          <filename>gimp-2.99.8-3.el9.s390x.rpm</filename>
          <sum type="sha256">0402338b885bcac316b5a45a34e2c0b40ac19cd9ce1ffcd3358c5aa3abb84a2a</sum>
        </package>
        <package name="gimp-libs" version="2.99.8" release="3.el9" epoch="2" arch="s390x" src="gimp-2.99.8-3.el9.src.rpm">
          <filename>gimp-libs-2.99.8-3.el9.s390x.rpm</filename>
          <sum type="sha256">a5b4b4dcd6f4db985cccc3fc666b62c2a41e5972e4780b3c9550cc978bc0babd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7979</id>
    <title>Low: speex security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:19:28"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>speex security update</summary>
    <description>Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates.

Security Fix(es):

* speex: divide by zero in read_samples() via crafted WAV file (CVE-2020-23903)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7979" id="RHSA-2022:7979" type="rhsa" title="RHSA-2022:7979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-23903" id="CVE-2020-23903" type="cve" title="CVE-2020-23903"/>
      <reference href="https://bugzilla.redhat.com/2024250" id="2024250" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7979.html" id="ALSA-2022:7979" type="self" title="ALSA-2022:7979"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="speex" version="1.2.0" release="11.el9" epoch="0" arch="s390x" src="speex-1.2.0-11.el9.src.rpm">
          <filename>speex-1.2.0-11.el9.s390x.rpm</filename>
          <sum type="sha256">4af15d8583198ab945de2ce69aec1bb02547d2248a202da73f64541e50dd737d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8003</id>
    <title>Low: libvirt security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:14:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libvirt security, bug fix, and enhancement update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

The following packages have been upgraded to a later upstream version: libvirt (8.5.0). (BZ#2060313)

Security Fix(es):

* libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service (CVE-2022-0897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8003" id="RHSA-2022:8003" type="rhsa" title="RHSA-2022:8003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0897" id="CVE-2022-0897" type="cve" title="CVE-2022-0897"/>
      <reference href="https://bugzilla.redhat.com/2063883" id="2063883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8003.html" id="ALSA-2022:8003" type="self" title="ALSA-2022:8003"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="libvirt-daemon-driver-storage-mpath" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">122585507e1b232a6694bc80dae780c3a0d2fe03bbc4a59919c45d1298e624e8</sum>
        </package>
        <package name="libvirt-libs" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-libs-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">26c90e1fd15a8f40a6ecbdadb90c6996559fcdad65d7f501e2d1805ebdeae9f0</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-kvm-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">2ba9790b1ae67f23e5563b933084cc26537eff0eea92e199fadfd246b929c0c4</sum>
        </package>
        <package name="libvirt-client" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-client-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">2f47e8ca56f3122c5423955d95ca09ae03820b0da6ff342d51101da1b0946e05</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">306769a8fbf3cbb7a522ccaca57d634ae488d5638742e4a9b21dcbab8d425d31</sum>
        </package>
        <package name="libvirt-daemon" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">34c19b78ad027ada279b4d354dc8cdc6955d5d586514c199a6d996bc0f1bab62</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">4105350ffa77c8b29665c9374c6c2f402ab56146cdcee94fdc71056d66b92c0e</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">6ab359b84f0c48d80b28cedf1f753e7b937c9cb43d2ad394179c88f4a9aa8379</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-qemu-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">6dc1527355fa86dcfeb305f4a15ba0446efd3ea58d81d380b32ed44d6a3fe537</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">7088f91d5006ef94cce6271c8a803fd2acde239d6910a684bed32e7f6a989c5b</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">88b1edb366a49ed229f5becdce7abf1506760d4f40fc04d8df9c234d72e4d4ab</sum>
        </package>
        <package name="libvirt" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">8a3fdfc2407a770362dcf972fe98b4faf0aeb874e6ceef46c73905c7f8ea38a0</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">8e2e27a7085c342050930a47443bfb3fcf4f11ba1d0b07a4d4aed96c1793276a</sum>
        </package>
        <package name="libvirt-nss" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-nss-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">952d45a4543cb7d5feacbb2fdf69bcee00b415b7d334f562f0d22ba664b794e1</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-storage-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">99a396719afecc9a0665184e2fb9560cfdc028c2e14c7ca7dd7d923cb3facb60</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-network-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">9f76d9929a271edff4e12013b93795c785dab618de525fb5a0c9ffe2527bc444</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">a37205d7e78304c8bd554cb291526ac9702a1f7648a52b91095b653facd03793</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">a6cd6c45f1443f8c677b580d75bb3eb90342b62cdb0dc6d1b45c59a8e1481989</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-interface-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">b379c604c2e54d26db79039661653076aa14c79ad0c81cca227883ad9fc2caf8</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-secret-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">d8941e8ee575817e93faa83f54e7e94102801225858f0ad237d5e6ebade6f19a</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">e0fd70a6c68fc77a81748cc705fb4664fa4ed06cc20510d1e20bc2cf4d02d3b3</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-daemon-config-network-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">eced87fd09cd745cbe42468ef4d1875b085e33098f638d87120014c9a9afb749</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8008</id>
    <title>Moderate: buildah security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:11:27"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>buildah security and bug fix update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. 

Security Fix(es):

* containers/storage: DoS via malicious image (CVE-2021-20291)
* golang: net: lookup functions may return invalid host names (CVE-2021-33195)
* golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197)
* golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198)
* golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191)
* podman: possible information disclosure and modification (CVE-2022-2989)
* buildah: possible information disclosure and modification (CVE-2022-2990)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8008" id="RHSA-2022:8008" type="rhsa" title="RHSA-2022:8008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-20291" id="CVE-2021-20291" type="cve" title="CVE-2021-20291"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33195" id="CVE-2021-33195" type="cve" title="CVE-2021-33195"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33197" id="CVE-2021-33197" type="cve" title="CVE-2021-33197"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33198" id="CVE-2021-33198" type="cve" title="CVE-2021-33198"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27191" id="CVE-2022-27191" type="cve" title="CVE-2022-27191"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2989" id="CVE-2022-2989" type="cve" title="CVE-2022-2989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2990" id="CVE-2022-2990" type="cve" title="CVE-2022-2990"/>
      <reference href="https://bugzilla.redhat.com/1939485" id="1939485" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1989564" id="1989564" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1989570" id="1989570" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1989575" id="1989575" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064702" id="2064702" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2121445" id="2121445" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2121453" id="2121453" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8008.html" id="ALSA-2022:8008" type="self" title="ALSA-2022:8008"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="buildah-tests" version="1.27.0" release="2.el9" epoch="1" arch="s390x" src="buildah-1.27.0-2.el9.src.rpm">
          <filename>buildah-tests-1.27.0-2.el9.s390x.rpm</filename>
          <sum type="sha256">2c320e7c35aa858736a053c95ba5f2d97fed9a2bb3ffa515e4c70c24cc7bb360</sum>
        </package>
        <package name="buildah" version="1.27.0" release="2.el9" epoch="1" arch="s390x" src="buildah-1.27.0-2.el9.src.rpm">
          <filename>buildah-1.27.0-2.el9.s390x.rpm</filename>
          <sum type="sha256">d4c90a7835ceca3cfd126ce56dcb825e0a28d31969df9adca9a3574abab36e88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8011</id>
    <title>Moderate: fribidi security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:07:53"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fribidi security update</summary>
    <description>FriBidi is a library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way, while the text data itself is always written in logical order.

Security Fix(es):

* fribidi: Stack based buffer overflow (CVE-2022-25308)
* fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode (CVE-2022-25309)
* fribidi: SEGV in fribidi_remove_bidi_marks (CVE-2022-25310)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8011" id="RHSA-2022:8011" type="rhsa" title="RHSA-2022:8011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25308" id="CVE-2022-25308" type="cve" title="CVE-2022-25308"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25309" id="CVE-2022-25309" type="cve" title="CVE-2022-25309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25310" id="CVE-2022-25310" type="cve" title="CVE-2022-25310"/>
      <reference href="https://bugzilla.redhat.com/2047890" id="2047890" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2047896" id="2047896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2047923" id="2047923" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8011.html" id="ALSA-2022:8011" type="self" title="ALSA-2022:8011"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="fribidi-devel" version="1.0.10" release="6.el9.2" epoch="0" arch="s390x" src="fribidi-1.0.10-6.el9.2.src.rpm">
          <filename>fribidi-devel-1.0.10-6.el9.2.s390x.rpm</filename>
          <sum type="sha256">660912a3044253e97aca9d9f7219f4343ba3fe0d0e632de881c70539ab34e2cd</sum>
        </package>
        <package name="fribidi" version="1.0.10" release="6.el9.2" epoch="0" arch="s390x" src="fribidi-1.0.10-6.el9.2.src.rpm">
          <filename>fribidi-1.0.10-6.el9.2.s390x.rpm</filename>
          <sum type="sha256">7013b1a3add62222f2fabebf5c1e99780979f8b2c6ee5c53971815066dae49af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8022</id>
    <title>Moderate: qt5 security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:02:24"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5 security and bug fix update</summary>
    <description>The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework.

Security Fix(es):

* qt: QProcess could execute a binary from the current working directory when not found in the PATH (CVE-2022-25255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8022" id="RHSA-2022:8022" type="rhsa" title="RHSA-2022:8022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25255" id="CVE-2022-25255" type="cve" title="CVE-2022-25255"/>
      <reference href="https://bugzilla.redhat.com/2055505" id="2055505" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8022.html" id="ALSA-2022:8022" type="self" title="ALSA-2022:8022"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="qt5" version="5.15.3" release="1.el9" epoch="0" arch="noarch" src="qt5-5.15.3-1.el9.src.rpm">
          <filename>qt5-5.15.3-1.el9.noarch.rpm</filename>
          <sum type="sha256">157264758e66fa294f4e8fc848664c03237961fe8272d6bbcddd4c87ecbced95</sum>
        </package>
        <package name="qt5-srpm-macros" version="5.15.3" release="1.el9" epoch="0" arch="noarch" src="qt5-5.15.3-1.el9.src.rpm">
          <filename>qt5-srpm-macros-5.15.3-1.el9.noarch.rpm</filename>
          <sum type="sha256">268bac6491abd68d7e65589de21a8e350d1b1bcbb01a9dde4b0bc6660431a11f</sum>
        </package>
        <package name="qt5-rpm-macros" version="5.15.3" release="1.el9" epoch="0" arch="noarch" src="qt5-5.15.3-1.el9.src.rpm">
          <filename>qt5-rpm-macros-5.15.3-1.el9.noarch.rpm</filename>
          <sum type="sha256">406cf593d00751d08056abf83db867e73108cbce98d2dd78713ac925b39a9fe4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8054</id>
    <title>Moderate: webkit2gtk3 security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 23:18:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>webkit2gtk3 security and bug fix update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22624)
* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22628)
* webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2022-22629)
* webkitgtk: Cookie management issue leading to sensitive user information disclosure (CVE-2022-22662)
* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26700)
* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26709)
* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26710)
* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26716)
* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26717)
* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26719)
* webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary code execution (CVE-2022-30293)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8054" id="RHSA-2022:8054" type="rhsa" title="RHSA-2022:8054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22624" id="CVE-2022-22624" type="cve" title="CVE-2022-22624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22628" id="CVE-2022-22628" type="cve" title="CVE-2022-22628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22629" id="CVE-2022-22629" type="cve" title="CVE-2022-22629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22662" id="CVE-2022-22662" type="cve" title="CVE-2022-22662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26700" id="CVE-2022-26700" type="cve" title="CVE-2022-26700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26709" id="CVE-2022-26709" type="cve" title="CVE-2022-26709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26710" id="CVE-2022-26710" type="cve" title="CVE-2022-26710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26716" id="CVE-2022-26716" type="cve" title="CVE-2022-26716"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26717" id="CVE-2022-26717" type="cve" title="CVE-2022-26717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26719" id="CVE-2022-26719" type="cve" title="CVE-2022-26719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30293" id="CVE-2022-30293" type="cve" title="CVE-2022-30293"/>
      <reference href="https://bugzilla.redhat.com/2073893" id="2073893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073896" id="2073896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073899" id="2073899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082548" id="2082548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092732" id="2092732" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092733" id="2092733" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092734" id="2092734" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092735" id="2092735" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092736" id="2092736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104787" id="2104787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104789" id="2104789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8054.html" id="ALSA-2022:8054" type="self" title="ALSA-2022:8054"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="webkit2gtk3" version="2.36.7" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9.src.rpm">
          <filename>webkit2gtk3-2.36.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">0ceb985d97ccce1541d74573406d6a53b6ec88212d7d30c0e5d02f41597af006</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.36.7" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.36.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">43bee5b981d46acb279044a44076126e4d604d86ce0623db83e71c88d8898a8f</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.36.7" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9.src.rpm">
          <filename>webkit2gtk3-jsc-2.36.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">6e52744ede860bc272d0a8459b507cb344f4a77a8a1ab80d3bc4d77f29ddca6b</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.36.7" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9.src.rpm">
          <filename>webkit2gtk3-devel-2.36.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">9a9be167370aa235a3e99f3016c93aa85a2e96e83b8b542e0d43bb2f5522a479</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8057</id>
    <title>Important: grafana security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:52:36"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security, bug fix, and enhancement update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB. 

The following packages have been upgraded to a later upstream version: grafana (7.5.15). (BZ#2055349)

Security Fix(es):

* sanitize-url: XSS due to improper sanitization in sanitizeUrl function (CVE-2021-23648)
* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)
* grafana: Forward OAuth Identity Token can allow users to access some data sources (CVE-2022-21673)
* prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)
* grafana: XSS vulnerability in data source handling (CVE-2022-21702)
* grafana: CSRF vulnerability can lead to privilege escalation (CVE-2022-21703)
* grafana: IDOR vulnerability can lead to information disclosure (CVE-2022-21713)
* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)
* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)
* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8057" id="RHSA-2022:8057" type="rhsa" title="RHSA-2022:8057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-23648" id="CVE-2021-23648" type="cve" title="CVE-2021-23648"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1705" id="CVE-2022-1705" type="cve" title="CVE-2022-1705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1962" id="CVE-2022-1962" type="cve" title="CVE-2022-1962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21673" id="CVE-2022-21673" type="cve" title="CVE-2022-21673"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21698" id="CVE-2022-21698" type="cve" title="CVE-2022-21698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21702" id="CVE-2022-21702" type="cve" title="CVE-2022-21702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21703" id="CVE-2022-21703" type="cve" title="CVE-2022-21703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21713" id="CVE-2022-21713" type="cve" title="CVE-2022-21713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28131" id="CVE-2022-28131" type="cve" title="CVE-2022-28131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30630" id="CVE-2022-30630" type="cve" title="CVE-2022-30630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30631" id="CVE-2022-30631" type="cve" title="CVE-2022-30631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30632" id="CVE-2022-30632" type="cve" title="CVE-2022-30632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30633" id="CVE-2022-30633" type="cve" title="CVE-2022-30633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30635" id="CVE-2022-30635" type="cve" title="CVE-2022-30635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32148" id="CVE-2022-32148" type="cve" title="CVE-2022-32148"/>
      <reference href="https://bugzilla.redhat.com/2044628" id="2044628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2045880" id="2045880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050648" id="2050648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050742" id="2050742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050743" id="2050743" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2065290" id="2065290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107342" id="2107342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107371" id="2107371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107374" id="2107374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107376" id="2107376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107383" id="2107383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107386" id="2107386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107388" id="2107388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107390" id="2107390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107392" id="2107392" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8057.html" id="ALSA-2022:8057" type="self" title="ALSA-2022:8057"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="grafana" version="7.5.15" release="3.el9" epoch="0" arch="s390x" src="grafana-7.5.15-3.el9.src.rpm">
          <filename>grafana-7.5.15-3.el9.s390x.rpm</filename>
          <sum type="sha256">8f30eb16a0e648407596dae0613236c2a772fe1d4d601d3a27b919b0db2c4c8a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8062</id>
    <title>Moderate: unbound security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:46:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>unbound security, bug fix, and enhancement update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

The following packages have been upgraded to a later upstream version: unbound (1.16.2). (BZ#2087120)

Security Fix(es):

* unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names (CVE-2022-30698)
* unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names (CVE-2022-30699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8062" id="RHSA-2022:8062" type="rhsa" title="RHSA-2022:8062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30698" id="CVE-2022-30698" type="cve" title="CVE-2022-30698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30699" id="CVE-2022-30699" type="cve" title="CVE-2022-30699"/>
      <reference href="https://bugzilla.redhat.com/2116725" id="2116725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2116729" id="2116729" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8062.html" id="ALSA-2022:8062" type="self" title="ALSA-2022:8062"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="unbound-libs" version="1.16.2" release="2.el9" epoch="0" arch="s390x" src="unbound-1.16.2-2.el9.src.rpm">
          <filename>unbound-libs-1.16.2-2.el9.s390x.rpm</filename>
          <sum type="sha256">3378f320e1bd655154e791c66195875b4e233cf60a86d5c2a1e457a84fc131fd</sum>
        </package>
        <package name="python3-unbound" version="1.16.2" release="2.el9" epoch="0" arch="s390x" src="unbound-1.16.2-2.el9.src.rpm">
          <filename>python3-unbound-1.16.2-2.el9.s390x.rpm</filename>
          <sum type="sha256">91a5fe94ded1e270b42efa67bcbfb3e28b87ac8a8cea6bddc9275b41d429f489</sum>
        </package>
        <package name="unbound" version="1.16.2" release="2.el9" epoch="0" arch="s390x" src="unbound-1.16.2-2.el9.src.rpm">
          <filename>unbound-1.16.2-2.el9.s390x.rpm</filename>
          <sum type="sha256">f11ec3ec722346cb8101a6f79748c2088e9cfccaa3b6b7bc18f75c3aeaff74aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8067</id>
    <title>Moderate: httpd security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:40:41"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>httpd security, bug fix, and enhancement update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

The following packages have been upgraded to a later upstream version: httpd (2.4.53). (BZ#2079939)

Security Fix(es):

* httpd: mod_sed: Read/write beyond bounds (CVE-2022-23943)
* httpd: mod_lua: Use of uninitialized value of in r:parsebody (CVE-2022-22719)
* httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody (CVE-2022-22721)
* httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-26377)
* httpd: mod_lua: DoS in r:parsebody (CVE-2022-29404)
* httpd: mod_sed: DoS vulnerability (CVE-2022-30522)
* httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism (CVE-2022-31813)
* httpd: Out-of-bounds read via ap_rwrite() (CVE-2022-28614)
* httpd: Out-of-bounds read in ap_strcmp_match() (CVE-2022-28615)
* httpd: mod_lua: Information disclosure with websockets (CVE-2022-30556)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8067" id="RHSA-2022:8067" type="rhsa" title="RHSA-2022:8067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22719" id="CVE-2022-22719" type="cve" title="CVE-2022-22719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22721" id="CVE-2022-22721" type="cve" title="CVE-2022-22721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23943" id="CVE-2022-23943" type="cve" title="CVE-2022-23943"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26377" id="CVE-2022-26377" type="cve" title="CVE-2022-26377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28614" id="CVE-2022-28614" type="cve" title="CVE-2022-28614"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28615" id="CVE-2022-28615" type="cve" title="CVE-2022-28615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29404" id="CVE-2022-29404" type="cve" title="CVE-2022-29404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30522" id="CVE-2022-30522" type="cve" title="CVE-2022-30522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30556" id="CVE-2022-30556" type="cve" title="CVE-2022-30556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31813" id="CVE-2022-31813" type="cve" title="CVE-2022-31813"/>
      <reference href="https://bugzilla.redhat.com/2064319" id="2064319" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064320" id="2064320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064322" id="2064322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2094997" id="2094997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2095002" id="2095002" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2095006" id="2095006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2095012" id="2095012" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2095015" id="2095015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2095018" id="2095018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2095020" id="2095020" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8067.html" id="ALSA-2022:8067" type="self" title="ALSA-2022:8067"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="httpd-manual" version="2.4.53" release="7.el9" epoch="0" arch="noarch" src="httpd-2.4.53-7.el9.src.rpm">
          <filename>httpd-manual-2.4.53-7.el9.noarch.rpm</filename>
          <sum type="sha256">16046de23e78b6ad29d370f55f942cde4a132a036d4ddf55c0e9f1c975292dab</sum>
        </package>
        <package name="httpd-tools" version="2.4.53" release="7.el9" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9.src.rpm">
          <filename>httpd-tools-2.4.53-7.el9.s390x.rpm</filename>
          <sum type="sha256">1873c68a0551ba831c633ccfaa68c34046179c3c3558be8ddb0bfd07ad8259e3</sum>
        </package>
        <package name="httpd-core" version="2.4.53" release="7.el9" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9.src.rpm">
          <filename>httpd-core-2.4.53-7.el9.s390x.rpm</filename>
          <sum type="sha256">26c80698e3cab8f510d3c92703250fa943b1549fda27fb42f0ae55cfc4815def</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.53" release="7.el9" epoch="0" arch="noarch" src="httpd-2.4.53-7.el9.src.rpm">
          <filename>httpd-filesystem-2.4.53-7.el9.noarch.rpm</filename>
          <sum type="sha256">61226547b629d1bfe902193c7322ef89e09039ac4017036efa0b678183f622e5</sum>
        </package>
        <package name="mod_ldap" version="2.4.53" release="7.el9" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9.src.rpm">
          <filename>mod_ldap-2.4.53-7.el9.s390x.rpm</filename>
          <sum type="sha256">b467167b6297ef8dde672502aa82f945f4bdc6ed90ccf64d5e73a8a30e57c3bc</sum>
        </package>
        <package name="mod_ssl" version="2.4.53" release="7.el9" epoch="1" arch="s390x" src="httpd-2.4.53-7.el9.src.rpm">
          <filename>mod_ssl-2.4.53-7.el9.s390x.rpm</filename>
          <sum type="sha256">b8893c75d551d99d484d1f257ff7a8875eb9ece7d1ae863939c0f2faba2cf481</sum>
        </package>
        <package name="httpd" version="2.4.53" release="7.el9" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9.src.rpm">
          <filename>httpd-2.4.53-7.el9.s390x.rpm</filename>
          <sum type="sha256">beb9906ee671b161245bb92e2da407059d251208508f3892e4685472a461e0d5</sum>
        </package>
        <package name="mod_lua" version="2.4.53" release="7.el9" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9.src.rpm">
          <filename>mod_lua-2.4.53-7.el9.s390x.rpm</filename>
          <sum type="sha256">c43ee3837334a6f022ef20c2a5efb278f834a55e418521aba0c1077a048d8737</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.53" release="7.el9" epoch="1" arch="s390x" src="httpd-2.4.53-7.el9.src.rpm">
          <filename>mod_proxy_html-2.4.53-7.el9.s390x.rpm</filename>
          <sum type="sha256">db84727bd44a2b1633a1fee96eb0f1f633c53a8e2ce77bb8f2c05974552e560f</sum>
        </package>
        <package name="mod_session" version="2.4.53" release="7.el9" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9.src.rpm">
          <filename>mod_session-2.4.53-7.el9.s390x.rpm</filename>
          <sum type="sha256">f4ea8af478f90f584274138771719722c6c45bfc86355718631759d0576306f5</sum>
        </package>
        <package name="httpd-devel" version="2.4.53" release="7.el9" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9.src.rpm">
          <filename>httpd-devel-2.4.53-7.el9.s390x.rpm</filename>
          <sum type="sha256">f8c44f00ad285a505c40b9e5cf53c459ff69848725ab203989b22b3537c5d696</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8068</id>
    <title>Moderate: bind security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:34:04"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)
* bind: DoS from specifically crafted TCP packets (CVE-2022-0396)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8068" id="RHSA-2022:8068" type="rhsa" title="RHSA-2022:8068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-25220" id="CVE-2021-25220" type="cve" title="CVE-2021-25220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0396" id="CVE-2022-0396" type="cve" title="CVE-2022-0396"/>
      <reference href="https://bugzilla.redhat.com/2064512" id="2064512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064513" id="2064513" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8068.html" id="ALSA-2022:8068" type="self" title="ALSA-2022:8068"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="bind-utils" version="9.16.23" release="5.el9_1" epoch="32" arch="s390x" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>bind-utils-9.16.23-5.el9_1.s390x.rpm</filename>
          <sum type="sha256">1c13173cb64e1645ad7b52892a12afc0419f1bf4218d98440e621a71c1048fae</sum>
        </package>
        <package name="bind-chroot" version="9.16.23" release="5.el9_1" epoch="32" arch="s390x" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>bind-chroot-9.16.23-5.el9_1.s390x.rpm</filename>
          <sum type="sha256">2f23ea3416bebb09f9fe812a95ef0d34792c2d461032c48a00fd755ddb0c3819</sum>
        </package>
        <package name="bind-license" version="9.16.23" release="5.el9_1" epoch="32" arch="noarch" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>bind-license-9.16.23-5.el9_1.noarch.rpm</filename>
          <sum type="sha256">35a7b5250c384e91ad0454725bd35261a045894999abdd382156a2af6e129c85</sum>
        </package>
        <package name="bind" version="9.16.23" release="5.el9_1" epoch="32" arch="s390x" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>bind-9.16.23-5.el9_1.s390x.rpm</filename>
          <sum type="sha256">443c3df3adbb199d3bc80545469675b825c325d5eab121e7b673d87aa06cad10</sum>
        </package>
        <package name="python3-bind" version="9.16.23" release="5.el9_1" epoch="32" arch="noarch" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>python3-bind-9.16.23-5.el9_1.noarch.rpm</filename>
          <sum type="sha256">7249a979c703ad386459d7ef0d5d8095939477f9ac9d35d94b81bd6ff668b8af</sum>
        </package>
        <package name="bind-libs" version="9.16.23" release="5.el9_1" epoch="32" arch="s390x" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>bind-libs-9.16.23-5.el9_1.s390x.rpm</filename>
          <sum type="sha256">aeb4d39be56e78fc3489eeecc0d0fccd305d4968ed92b29230200a499b6da43d</sum>
        </package>
        <package name="bind-dnssec-utils" version="9.16.23" release="5.el9_1" epoch="32" arch="s390x" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>bind-dnssec-utils-9.16.23-5.el9_1.s390x.rpm</filename>
          <sum type="sha256">b5f255f6db7d2355bad36d2f7d14e31579989562c21459c3e4ad3b962220f7d3</sum>
        </package>
        <package name="bind-dnssec-doc" version="9.16.23" release="5.el9_1" epoch="32" arch="noarch" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>bind-dnssec-doc-9.16.23-5.el9_1.noarch.rpm</filename>
          <sum type="sha256">f0f9ba6fa4d79ec478f9fa0262896af005081cad8190cad5e4c975a8431f20b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8070</id>
    <title>Moderate: dnsmasq security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:29:49"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dnsmasq security and bug fix update</summary>
    <description>The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

* dnsmasq: Heap use after free in dhcp6_no_relay (CVE-2022-0934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8070" id="RHSA-2022:8070" type="rhsa" title="RHSA-2022:8070"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0934" id="CVE-2022-0934" type="cve" title="CVE-2022-0934"/>
      <reference href="https://bugzilla.redhat.com/2057075" id="2057075" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8070.html" id="ALSA-2022:8070" type="self" title="ALSA-2022:8070"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="dnsmasq" version="2.85" release="5.el9" epoch="0" arch="s390x" src="dnsmasq-2.85-5.el9.src.rpm">
          <filename>dnsmasq-2.85-5.el9.s390x.rpm</filename>
          <sum type="sha256">befc0ce49ef070be44450c87b5fda262618218da15cee9c438b5e5ffe0eea5c7</sum>
        </package>
        <package name="dnsmasq-utils" version="2.85" release="5.el9" epoch="0" arch="s390x" src="dnsmasq-2.85-5.el9.src.rpm">
          <filename>dnsmasq-utils-2.85-5.el9.s390x.rpm</filename>
          <sum type="sha256">d1db7e1e9e9b0e2afbe32723d76c0dbd3228709ef4ef8b59994f1d567b7a4f9d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8078</id>
    <title>Moderate: flac security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:24:39"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>flac security update</summary>
    <description>FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

* flac: out of bound write in append_to_verify_fifo_interleaved_ of stream_encoder.c (CVE-2021-0561)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8078" id="RHSA-2022:8078" type="rhsa" title="RHSA-2022:8078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-0561" id="CVE-2021-0561" type="cve" title="CVE-2021-0561"/>
      <reference href="https://bugzilla.redhat.com/2057776" id="2057776" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8078.html" id="ALSA-2022:8078" type="self" title="ALSA-2022:8078"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="flac-libs" version="1.3.3" release="10.el9" epoch="0" arch="s390x" src="flac-1.3.3-10.el9.src.rpm">
          <filename>flac-libs-1.3.3-10.el9.s390x.rpm</filename>
          <sum type="sha256">3c2e26363b7c011c5594d3aa0e5e17daafa58fd2dee5f8141075024d42e3ac5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8090</id>
    <title>Low: runc security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:22:00"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>runc security update</summary>
    <description>The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.

Security Fix(es):

* runc: incorrect handling of inheritable capabilities (CVE-2022-29162)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8090" id="RHSA-2022:8090" type="rhsa" title="RHSA-2022:8090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29162" id="CVE-2022-29162" type="cve" title="CVE-2022-29162"/>
      <reference href="https://bugzilla.redhat.com/2086398" id="2086398" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8090.html" id="ALSA-2022:8090" type="self" title="ALSA-2022:8090"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="runc" version="1.1.4" release="1.el9" epoch="4" arch="s390x" src="runc-1.1.4-1.el9.src.rpm">
          <filename>runc-1.1.4-1.el9.s390x.rpm</filename>
          <sum type="sha256">d23711365b1809a99ffac3601c903d0b9dbc56b3a0d3d0c8c6ce69cf2b2cce3f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8096</id>
    <title>Low: redis security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:18:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>redis security and bug fix update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.

Security Fix(es):

* redis: Code injection via Lua script execution environment (CVE-2022-24735)
* redis: Malformed Lua script can crash Redis (CVE-2022-24736)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8096" id="RHSA-2022:8096" type="rhsa" title="RHSA-2022:8096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24735" id="CVE-2022-24735" type="cve" title="CVE-2022-24735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24736" id="CVE-2022-24736" type="cve" title="CVE-2022-24736"/>
      <reference href="https://bugzilla.redhat.com/2080286" id="2080286" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2080289" id="2080289" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8096.html" id="ALSA-2022:8096" type="self" title="ALSA-2022:8096"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="redis-doc" version="6.2.7" release="1.el9" epoch="0" arch="noarch" src="redis-6.2.7-1.el9.src.rpm">
          <filename>redis-doc-6.2.7-1.el9.noarch.rpm</filename>
          <sum type="sha256">142f8f9a73b8b4e8f94dd2bd4a7cde5f54880fe6e5dd1a54ec5c41a6bd33ac58</sum>
        </package>
        <package name="redis-devel" version="6.2.7" release="1.el9" epoch="0" arch="s390x" src="redis-6.2.7-1.el9.src.rpm">
          <filename>redis-devel-6.2.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">17036c47134ffcbed862a422ef7d397ef1f07c8549e843c6eb2790ace8935bb8</sum>
        </package>
        <package name="redis" version="6.2.7" release="1.el9" epoch="0" arch="s390x" src="redis-6.2.7-1.el9.src.rpm">
          <filename>redis-6.2.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">c8fdc219bf77d509dfbc0c17c2a93e2e8be945384c9c281cc8fb22dc6bd2ba56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8098</id>
    <title>Moderate: toolbox security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:15:33"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>toolbox security and bug fix update</summary>
    <description>Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI.

Security Fix(es):

* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8098" id="RHSA-2022:8098" type="rhsa" title="RHSA-2022:8098"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1705" id="CVE-2022-1705" type="cve" title="CVE-2022-1705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30630" id="CVE-2022-30630" type="cve" title="CVE-2022-30630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30631" id="CVE-2022-30631" type="cve" title="CVE-2022-30631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30632" id="CVE-2022-30632" type="cve" title="CVE-2022-30632"/>
      <reference href="https://bugzilla.redhat.com/2107342" id="2107342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107371" id="2107371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107374" id="2107374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107386" id="2107386" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8098.html" id="ALSA-2022:8098" type="self" title="ALSA-2022:8098"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="toolbox" version="0.0.99.3" release="5.el9" epoch="0" arch="s390x" src="toolbox-0.0.99.3-5.el9.src.rpm">
          <filename>toolbox-0.0.99.3-5.el9.s390x.rpm</filename>
          <sum type="sha256">2edbcdb27866b5758291c55206e31ede8a0d7b097dcace6acd0b81f304de2965</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.3" release="5.el9" epoch="0" arch="s390x" src="toolbox-0.0.99.3-5.el9.src.rpm">
          <filename>toolbox-tests-0.0.99.3-5.el9.s390x.rpm</filename>
          <sum type="sha256">7ec4fafe667dbcc6ca2e8b2c7a412e8a7ba4c2773a99a79d185b69e9ec505e6a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8100</id>
    <title>Low: swtpm security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:13:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>swtpm security and bug fix update</summary>
    <description>SWTPM is a TPM emulator built on libtpms providing TPM functionality for QEMU VMs.

Security Fix(es):

* swtpm: Unchecked header size indicator against expected size (CVE-2022-23645)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8100" id="RHSA-2022:8100" type="rhsa" title="RHSA-2022:8100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23645" id="CVE-2022-23645" type="cve" title="CVE-2022-23645"/>
      <reference href="https://bugzilla.redhat.com/2056491" id="2056491" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8100.html" id="ALSA-2022:8100" type="self" title="ALSA-2022:8100"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="swtpm-libs" version="0.7.0" release="3.20211109gitb79fd91.el9" epoch="0" arch="s390x" src="swtpm-0.7.0-3.20211109gitb79fd91.el9.src.rpm">
          <filename>swtpm-libs-0.7.0-3.20211109gitb79fd91.el9.s390x.rpm</filename>
          <sum type="sha256">32257a10660815b102bc5dc1863fcd277fbd6fab8dfc3a2ad8b93e23e11a9865</sum>
        </package>
        <package name="swtpm-tools" version="0.7.0" release="3.20211109gitb79fd91.el9" epoch="0" arch="s390x" src="swtpm-0.7.0-3.20211109gitb79fd91.el9.src.rpm">
          <filename>swtpm-tools-0.7.0-3.20211109gitb79fd91.el9.s390x.rpm</filename>
          <sum type="sha256">5a73f8d55f45d1870725a9efec46985262fc6dc2b8f01041d44ce4b57d72383a</sum>
        </package>
        <package name="swtpm" version="0.7.0" release="3.20211109gitb79fd91.el9" epoch="0" arch="s390x" src="swtpm-0.7.0-3.20211109gitb79fd91.el9.src.rpm">
          <filename>swtpm-0.7.0-3.20211109gitb79fd91.el9.s390x.rpm</filename>
          <sum type="sha256">db23bed2d889e434d9ab4a9419ae6e0a4254559f7b645301a6dff88f5d21880e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8112</id>
    <title>Moderate: frr security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:10:45"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>frr security, bug fix, and enhancement update</summary>
    <description>FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. 

The following packages have been upgraded to a later upstream version: frr (8.2.2). (BZ#2069563)

Security Fix(es):

* frrouting: overflow bugs in unpack_tlv_router_cap (CVE-2022-26125)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8112" id="RHSA-2022:8112" type="rhsa" title="RHSA-2022:8112"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26125" id="CVE-2022-26125" type="cve" title="CVE-2022-26125"/>
      <reference href="https://bugzilla.redhat.com/2058628" id="2058628" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8112.html" id="ALSA-2022:8112" type="self" title="ALSA-2022:8112"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="frr" version="8.2.2" release="4.el9" epoch="0" arch="s390x" src="frr-8.2.2-4.el9.src.rpm">
          <filename>frr-8.2.2-4.el9.s390x.rpm</filename>
          <sum type="sha256">cf77f6b767fba00c7ae7b2b7611ca302ab908497f2320d823966e7cc4e3a5904</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8126</id>
    <title>Moderate: ignition security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:06:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ignition security, bug fix, and enhancement update</summary>
    <description>Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files (regular files, systemd units, etc.), and configuring users. On first boot, Ignition reads its configuration from a source of truth (remote URL, network metadata service, hypervisor bridge, etc.) and applies the configuration.

The following packages have been upgraded to a later upstream version: ignition (2.14.0). (BZ#2090647)

Security Fix(es):

* ignition: configs are accessible from unprivileged containers in VMs running on VMware products (CVE-2022-1706)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8126" id="RHSA-2022:8126" type="rhsa" title="RHSA-2022:8126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1706" id="CVE-2022-1706" type="cve" title="CVE-2022-1706"/>
      <reference href="https://bugzilla.redhat.com/2082274" id="2082274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8126.html" id="ALSA-2022:8126" type="self" title="ALSA-2022:8126"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="ignition" version="2.14.0" release="1.el9" epoch="0" arch="s390x" src="ignition-2.14.0-1.el9.src.rpm">
          <filename>ignition-2.14.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">7a66ee1796c74b36dc6db1842cabc66e34222441f8bc54a4e6a8f78047d91a07</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8139</id>
    <title>Low: wavpack security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:00:58"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>wavpack security update</summary>
    <description>WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. 

Security Fix(es):

* wavpack: Heap out-of-bounds read in WavpackPackSamples() (CVE-2021-44269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8139" id="RHSA-2022:8139" type="rhsa" title="RHSA-2022:8139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44269" id="CVE-2021-44269" type="cve" title="CVE-2021-44269"/>
      <reference href="https://bugzilla.redhat.com/2064457" id="2064457" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8139.html" id="ALSA-2022:8139" type="self" title="ALSA-2022:8139"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="wavpack" version="5.4.0" release="5.el9" epoch="0" arch="s390x" src="wavpack-5.4.0-5.el9.src.rpm">
          <filename>wavpack-5.4.0-5.el9.s390x.rpm</filename>
          <sum type="sha256">42c0892cc8d512cd8bc519bccb6f83e6755c93847e154f71e22d57c4a1f50c74</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8151</id>
    <title>Moderate: poppler security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:55:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security and bug fix update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8151" id="RHSA-2022:8151" type="rhsa" title="RHSA-2022:8151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27337" id="CVE-2022-27337" type="cve" title="CVE-2022-27337"/>
      <reference href="https://bugzilla.redhat.com/2087190" id="2087190" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8151.html" id="ALSA-2022:8151" type="self" title="ALSA-2022:8151"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="poppler-cpp" version="21.01.0" release="13.el9" epoch="0" arch="s390x" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-cpp-21.01.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">1a13bc3af3bb379bda470f24dc05c04ca3cef79c915cfe89a49ed59fd7d2b25e</sum>
        </package>
        <package name="poppler-utils" version="21.01.0" release="13.el9" epoch="0" arch="s390x" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-utils-21.01.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">36dd78ef9e9437558d8e5600db196689df53d92305c655dcece13cca26c12a57</sum>
        </package>
        <package name="poppler" version="21.01.0" release="13.el9" epoch="0" arch="s390x" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-21.01.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">b3bc5b9b8d519fede582050ceba0b25c06a9a99e2afddeeba4af33496c1e7e6f</sum>
        </package>
        <package name="poppler-glib" version="21.01.0" release="13.el9" epoch="0" arch="s390x" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-glib-21.01.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">b419af4bfdafd20774a49b4952a6e926d165ce357d085b105d412a193d901c0c</sum>
        </package>
        <package name="poppler-qt5" version="21.01.0" release="13.el9" epoch="0" arch="s390x" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-qt5-21.01.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">d57bad88f4a9a2a2f46098cb39f2ec15591950a41ccbd9f28ac9f4c0566651e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8162</id>
    <title>Moderate: 389-ds-base security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:52:36"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds-base security, bug fix, and enhancement update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

The following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801)

Security Fix(es):

* 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)
* 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)
* 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8162" id="RHSA-2022:8162" type="rhsa" title="RHSA-2022:8162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0918" id="CVE-2022-0918" type="cve" title="CVE-2022-0918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0996" id="CVE-2022-0996" type="cve" title="CVE-2022-0996"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2850" id="CVE-2022-2850" type="cve" title="CVE-2022-2850"/>
      <reference href="https://bugzilla.redhat.com/2055815" id="2055815" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064769" id="2064769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118691" id="2118691" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8162.html" id="ALSA-2022:8162" type="self" title="ALSA-2022:8162"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="389-ds-base" version="2.1.3" release="4.el9_1" epoch="0" arch="s390x" src="389-ds-base-2.1.3-4.el9_1.src.rpm">
          <filename>389-ds-base-2.1.3-4.el9_1.s390x.rpm</filename>
          <sum type="sha256">23819698eefaa613b27fbc75dfa7a4e449f45ccc2b96bb9153e509c86919405f</sum>
        </package>
        <package name="python3-lib389" version="2.1.3" release="4.el9_1" epoch="0" arch="noarch" src="389-ds-base-2.1.3-4.el9_1.src.rpm">
          <filename>python3-lib389-2.1.3-4.el9_1.noarch.rpm</filename>
          <sum type="sha256">cfe6a2e6540b9a9d7046536d24a4a25cad66d232402fdb5e9951d205ecf04c6f</sum>
        </package>
        <package name="389-ds-base-libs" version="2.1.3" release="4.el9_1" epoch="0" arch="s390x" src="389-ds-base-2.1.3-4.el9_1.src.rpm">
          <filename>389-ds-base-libs-2.1.3-4.el9_1.s390x.rpm</filename>
          <sum type="sha256">edbfc4726d34137fbcdfb97b8e73be5c755a06aaf4c1b24012ade4f8a3ca0011</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8194</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:47:38"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561)
* libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562)
* libtiff: reachable assertion (CVE-2022-0865)
* libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924)
* libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355)
* libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844)
* libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891)
* tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c (CVE-2022-0908)
* tiff: Divide By Zero error in tiffcrop (CVE-2022-0909)
* libtiff: heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c (CVE-2022-1354)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8194" id="RHSA-2022:8194" type="rhsa" title="RHSA-2022:8194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0561" id="CVE-2022-0561" type="cve" title="CVE-2022-0561"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0562" id="CVE-2022-0562" type="cve" title="CVE-2022-0562"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0865" id="CVE-2022-0865" type="cve" title="CVE-2022-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0891" id="CVE-2022-0891" type="cve" title="CVE-2022-0891"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0908" id="CVE-2022-0908" type="cve" title="CVE-2022-0908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0909" id="CVE-2022-0909" type="cve" title="CVE-2022-0909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0924" id="CVE-2022-0924" type="cve" title="CVE-2022-0924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1354" id="CVE-2022-1354" type="cve" title="CVE-2022-1354"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1355" id="CVE-2022-1355" type="cve" title="CVE-2022-1355"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22844" id="CVE-2022-22844" type="cve" title="CVE-2022-22844"/>
      <reference href="https://bugzilla.redhat.com/2042603" id="2042603" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2054494" id="2054494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2054495" id="2054495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064145" id="2064145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064146" id="2064146" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064148" id="2064148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064406" id="2064406" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064411" id="2064411" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074404" id="2074404" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074415" id="2074415" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8194.html" id="ALSA-2022:8194" type="self" title="ALSA-2022:8194"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="libtiff-devel" version="4.4.0" release="2.el9" epoch="0" arch="s390x" src="libtiff-4.4.0-2.el9.src.rpm">
          <filename>libtiff-devel-4.4.0-2.el9.s390x.rpm</filename>
          <sum type="sha256">6627af8ca3ef07089fa351246a3d244befc50cf1d028a311f012a44df5835020</sum>
        </package>
        <package name="libtiff" version="4.4.0" release="2.el9" epoch="0" arch="s390x" src="libtiff-4.4.0-2.el9.src.rpm">
          <filename>libtiff-4.4.0-2.el9.s390x.rpm</filename>
          <sum type="sha256">7ffb35ce1cd24fe37f5d34f752d7b5791291a0277b659e88f634bbcda623e579</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8197</id>
    <title>Moderate: php security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:44:53"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php security, bug fix, and enhancement update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (8.0.20). (BZ#2095752)

Security Fix(es):

* php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708)
* php: Uninitialized array in pg_query_params() leading to RCE (CVE-2022-31625)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8197" id="RHSA-2022:8197" type="rhsa" title="RHSA-2022:8197"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-21708" id="CVE-2021-21708" type="cve" title="CVE-2021-21708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31625" id="CVE-2022-31625" type="cve" title="CVE-2022-31625"/>
      <reference href="https://bugzilla.redhat.com/2055879" id="2055879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2098521" id="2098521" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8197.html" id="ALSA-2022:8197" type="self" title="ALSA-2022:8197"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="php-fpm" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-fpm-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">0c672b0e505f976e952fc7bbef579b79cdbbc0842757ee1870e183890e11095b</sum>
        </package>
        <package name="php-odbc" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-odbc-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">0dee03c8d44d3224e056aaf6fbc5fc2430d52dbe0cc48bc1289c07b14c537308</sum>
        </package>
        <package name="php-gd" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-gd-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">0fb45854a39bee46e998197f3bd62e6cbc9caab463e21c70c49fba563433f939</sum>
        </package>
        <package name="php-bcmath" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-bcmath-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">109fb27110e0f069f9d145feed5ccc4d4b215b7153807e60ebb8df7f20e6358c</sum>
        </package>
        <package name="php-mysqlnd" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-mysqlnd-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">130c9d818f5ee502fcdd285e8f8e20094f2e8b477f731268e01a807fcf0480c2</sum>
        </package>
        <package name="php-gmp" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-gmp-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">188fc897989461cda6f6dc3cb5672c9b9a98dd3dbeb0ba271eb00cdacd3d6999</sum>
        </package>
        <package name="php" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">49dcc7555f3862ffd617edde4e3a3bb7c855937fd5934f07d2f5adad917c4797</sum>
        </package>
        <package name="php-dbg" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-dbg-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">53d9405d4633569642e0fd7e4d35f2ad8178972aea089bac460169db49d79e20</sum>
        </package>
        <package name="php-pgsql" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-pgsql-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">561df4632f870990bb20683200832a6c1a597190c12b80803ec9b3b9dcb6bd64</sum>
        </package>
        <package name="php-snmp" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-snmp-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">5aa7e711e42e709aba999748f214470c823b1dfe71a6e77d7ab907d2c94a01c6</sum>
        </package>
        <package name="php-intl" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-intl-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">61f89d8ce1c60d3070cfc4bce37f443814746c8bd5330d23ac0c501886bde717</sum>
        </package>
        <package name="php-dba" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-dba-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">623afca629758acdd4b7e60fd65161bd4ba4645d7d938d76b3e3f7708d6fd3cc</sum>
        </package>
        <package name="php-devel" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-devel-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">700d7e0236d8f0a95dc4dea2490f99c808858f65adcd2544dca97fb0dadc447d</sum>
        </package>
        <package name="php-process" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-process-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">7141a292c4ec4a2625716b18cab157e0877a8a25f0a2cbff15bdc32565db054c</sum>
        </package>
        <package name="php-ldap" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-ldap-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">749388f118d697fb35a773f9b2e40ff8dd302bab4b206cab9d3361c4f0a9a0e4</sum>
        </package>
        <package name="php-soap" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-soap-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">7e57e16f6635113c9b88f74940864b4aab4aa14db1ab320df97a21b1c9b24683</sum>
        </package>
        <package name="php-opcache" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-opcache-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">83cd7988cb0b04c67af6616137d7221705e453074b9a7e1e98732b5c451646dd</sum>
        </package>
        <package name="php-pdo" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-pdo-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">957094a5d0ff7d836dc0513ff4ecafdcaf4b5e83c0554435d40edcc4b7567595</sum>
        </package>
        <package name="php-common" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-common-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">97a38095ef91794536f09a71d7780d39ecf45c547a27e1e4ff263c85b012d78b</sum>
        </package>
        <package name="php-embedded" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-embedded-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">d3f2a49bb4523aa99c08c97d624c4f6bc77c5ad7f61350a9a3b32198b2e77934</sum>
        </package>
        <package name="php-cli" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-cli-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">d6bca0775d8f3b02ff731d8ee59c6e3ee26f01d582f87723ee1269b3a186bd49</sum>
        </package>
        <package name="php-xml" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-xml-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">dc9653e93629adc4bc10181cd1e9ea9d44770699b40d6a8742b6c8ddc51c737f</sum>
        </package>
        <package name="php-ffi" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-ffi-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">e431dad50451e66d55dc405619c6b4bda58db06d1227998c5cbe2f7cb69e8d38</sum>
        </package>
        <package name="php-mbstring" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-mbstring-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">f2fb301c0a9a486ffa41dd463e56bd7fa014ab77c2df33fc6fc1682c827bee12</sum>
        </package>
        <package name="php-enchant" version="8.0.20" release="3.el9" epoch="0" arch="s390x" src="php-8.0.20-3.el9.src.rpm">
          <filename>php-enchant-8.0.20-3.el9.s390x.rpm</filename>
          <sum type="sha256">fa0d953e65f46e28a493c41db7b7c7ca489ea86c397ef48534d1e19793649a6e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8207</id>
    <title>Low: openjpeg2 security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:39:06"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openjpeg2 security update</summary>
    <description>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

* openjpeg: segmentation fault in opj2_decompress due to uninitialized pointer (CVE-2022-1122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8207" id="RHSA-2022:8207" type="rhsa" title="RHSA-2022:8207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1122" id="CVE-2022-1122" type="cve" title="CVE-2022-1122"/>
      <reference href="https://bugzilla.redhat.com/2067052" id="2067052" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8207.html" id="ALSA-2022:8207" type="self" title="ALSA-2022:8207"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="openjpeg2" version="2.4.0" release="7.el9" epoch="0" arch="s390x" src="openjpeg2-2.4.0-7.el9.src.rpm">
          <filename>openjpeg2-2.4.0-7.el9.s390x.rpm</filename>
          <sum type="sha256">25e799c95429d74d87477d4962bd06f953b79100f4d15fb40e62a2b090ce21da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8208</id>
    <title>Moderate: dovecot security and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:32:57"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dovecot security and enhancement update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: Privilege escalation when similar master and non-master passdbs are used (CVE-2022-30550)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8208" id="RHSA-2022:8208" type="rhsa" title="RHSA-2022:8208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30550" id="CVE-2022-30550" type="cve" title="CVE-2022-30550"/>
      <reference href="https://bugzilla.redhat.com/2105070" id="2105070" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8208.html" id="ALSA-2022:8208" type="self" title="ALSA-2022:8208"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="dovecot" version="2.3.16" release="7.el9" epoch="1" arch="s390x" src="dovecot-2.3.16-7.el9.src.rpm">
          <filename>dovecot-2.3.16-7.el9.s390x.rpm</filename>
          <sum type="sha256">073bc0340d97bb2d69fdf90a95ce5ba680382a144beaed29119f8634a6f8d747</sum>
        </package>
        <package name="dovecot-mysql" version="2.3.16" release="7.el9" epoch="1" arch="s390x" src="dovecot-2.3.16-7.el9.src.rpm">
          <filename>dovecot-mysql-2.3.16-7.el9.s390x.rpm</filename>
          <sum type="sha256">3d45bc1feef35a0061968bd039aed36f12e32a56345f65de31b13de6a9fbe07c</sum>
        </package>
        <package name="dovecot-pgsql" version="2.3.16" release="7.el9" epoch="1" arch="s390x" src="dovecot-2.3.16-7.el9.src.rpm">
          <filename>dovecot-pgsql-2.3.16-7.el9.s390x.rpm</filename>
          <sum type="sha256">b0e55847317cbd27bdb30ff32da773d6830da983c584e0165120eb8213b7120f</sum>
        </package>
        <package name="dovecot-pigeonhole" version="2.3.16" release="7.el9" epoch="1" arch="s390x" src="dovecot-2.3.16-7.el9.src.rpm">
          <filename>dovecot-pigeonhole-2.3.16-7.el9.s390x.rpm</filename>
          <sum type="sha256">f0f1adc1febf23050daa5d5f68f4473e62e38be86a1400c68a49217b7dc97c55</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8219</id>
    <title>Moderate: mutt security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 01:45:17"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mutt security update</summary>
    <description>Mutt is a low resource, highly configurable, text-based MIME e-mail client. Mutt supports most e-mail storing formats, such as mbox and Maildir, as well as most protocols, including POP3 and IMAP.

Security Fix(es):

* mutt: buffer overflow in uudecoder function (CVE-2022-1328)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8219" id="RHSA-2022:8219" type="rhsa" title="RHSA-2022:8219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1328" id="CVE-2022-1328" type="cve" title="CVE-2022-1328"/>
      <reference href="https://bugzilla.redhat.com/2076058" id="2076058" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8219.html" id="ALSA-2022:8219" type="self" title="ALSA-2022:8219"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="mutt" version="2.2.6" release="1.el9" epoch="5" arch="s390x" src="mutt-2.2.6-1.el9.src.rpm">
          <filename>mutt-2.2.6-1.el9.s390x.rpm</filename>
          <sum type="sha256">4edfaec9da328edcbcd4c773bae6e0ab5b6f69814eb4d05f0861baa9346c4617</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8221</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 01:36:39"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319)
* xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension (CVE-2022-2320)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8221" id="RHSA-2022:8221" type="rhsa" title="RHSA-2022:8221"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2319" id="CVE-2022-2319" type="cve" title="CVE-2022-2319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2320" id="CVE-2022-2320" type="cve" title="CVE-2022-2320"/>
      <reference href="https://bugzilla.redhat.com/2106671" id="2106671" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106683" id="2106683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8221.html" id="ALSA-2022:8221" type="self" title="ALSA-2022:8221"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="11.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-11.el9.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-11.el9.s390x.rpm</filename>
          <sum type="sha256">05f476fe296737a456c80c1635ae24587a809a8d0b77720e14d14f7810c34fa1</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="11.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-11.el9.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-11.el9.s390x.rpm</filename>
          <sum type="sha256">0c4830355d246ce0d17cf306fb47e1427ec6ee2ee15e11df79ae6ad2c119802d</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="11.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-11.el9.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-11.el9.s390x.rpm</filename>
          <sum type="sha256">1894363a846c2d582d6140000cb7044390bd67464f0dd3c0900c6896e8112e6a</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="11.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-11.el9.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-11.el9.s390x.rpm</filename>
          <sum type="sha256">3ac3e8c7b9c1a6a083153e1752af4d6881be85a295c74b6a761946f09d0baf50</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="11.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-11.el9.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-11.el9.s390x.rpm</filename>
          <sum type="sha256">bc1b355d2022b12d2594d4be8b028fc4cc399ad4fec3afe04e8842183ad8d9c8</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="11.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-11.el9.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-11.el9.s390x.rpm</filename>
          <sum type="sha256">f5df40858688b4ff028ce196c4316495dd469615b8b1f3b37d60868134968bac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8222</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 01:30:43"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319)
* xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension (CVE-2022-2320)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8222" id="RHSA-2022:8222" type="rhsa" title="RHSA-2022:8222"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2319" id="CVE-2022-2319" type="cve" title="CVE-2022-2319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2320" id="CVE-2022-2320" type="cve" title="CVE-2022-2320"/>
      <reference href="https://bugzilla.redhat.com/2106671" id="2106671" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106683" id="2106683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8222.html" id="ALSA-2022:8222" type="self" title="ALSA-2022:8222"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="3.el9" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-21.1.3-3.el9.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-3.el9.s390x.rpm</filename>
          <sum type="sha256">f0e6835a8c7beabcf6eb0b57843fe31fcf5585c0488d8aa55b01a795d6232a21</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8226</id>
    <title>Moderate: python-lxml security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 01:25:22"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-lxml security update</summary>
    <description>lxml is an XML processing library providing access to libxml2 and libxslt libraries using the Python ElementTree API. 

Security Fix(es):

* lxml: NULL Pointer Dereference in lxml (CVE-2022-2309)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8226" id="RHSA-2022:8226" type="rhsa" title="RHSA-2022:8226"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2309" id="CVE-2022-2309" type="cve" title="CVE-2022-2309"/>
      <reference href="https://bugzilla.redhat.com/2107571" id="2107571" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8226.html" id="ALSA-2022:8226" type="self" title="ALSA-2022:8226"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="python3-lxml" version="4.6.5" release="3.el9" epoch="0" arch="s390x" src="python-lxml-4.6.5-3.el9.src.rpm">
          <filename>python3-lxml-4.6.5-3.el9.s390x.rpm</filename>
          <sum type="sha256">4be38e54a35ae769b182e7280d56329ccf3e493aeed55c871e6edb511646d089</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8250</id>
    <title>Moderate: grafana-pcp security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 01:19:53"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.

Security Fix(es):

* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8250" id="RHSA-2022:8250" type="rhsa" title="RHSA-2022:8250"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1705" id="CVE-2022-1705" type="cve" title="CVE-2022-1705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30630" id="CVE-2022-30630" type="cve" title="CVE-2022-30630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30631" id="CVE-2022-30631" type="cve" title="CVE-2022-30631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30632" id="CVE-2022-30632" type="cve" title="CVE-2022-30632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30635" id="CVE-2022-30635" type="cve" title="CVE-2022-30635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32148" id="CVE-2022-32148" type="cve" title="CVE-2022-32148"/>
      <reference href="https://bugzilla.redhat.com/2107342" id="2107342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107371" id="2107371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107374" id="2107374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107383" id="2107383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107386" id="2107386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107388" id="2107388" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8250.html" id="ALSA-2022:8250" type="self" title="ALSA-2022:8250"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="grafana-pcp" version="3.2.0" release="3.el9" epoch="0" arch="s390x" src="grafana-pcp-3.2.0-3.el9.src.rpm">
          <filename>grafana-pcp-3.2.0-3.el9.s390x.rpm</filename>
          <sum type="sha256">2923a16af2b40a408f83362bd9652420b172807e92f0a05f3905490d04032f3a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8252</id>
    <title>Moderate: yajl security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 15:48:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>yajl security update</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

Security Fix(es):

* yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8252" id="RHSA-2022:8252" type="rhsa" title="RHSA-2022:8252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24795" id="CVE-2022-24795" type="cve" title="CVE-2022-24795"/>
      <reference href="https://bugzilla.redhat.com/2072912" id="2072912" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8252.html" id="ALSA-2022:8252" type="self" title="ALSA-2022:8252"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="yajl" version="2.1.0" release="21.el9" epoch="0" arch="s390x" src="yajl-2.1.0-21.el9.src.rpm">
          <filename>yajl-2.1.0-21.el9.s390x.rpm</filename>
          <sum type="sha256">abb1f940d171238b3d165c8818b677c36cff267d3e154fbc10080e41badd6a6a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8267</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 00:56:47"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* off-path attacker may inject data or terminate victim's TCP session (CVE-2020-36516)
* use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640)
* smb2_ioctl_query_info NULL pointer dereference (CVE-2022-0168)
* NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617)
* swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854)
* uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016)
* race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048)
* use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184)
* concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources (CVE-2022-1280)
* kernel info leak issue in pfkey_register (CVE-2022-1353)
* use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges (CVE-2022-1679)
* NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852)
* fanotify misuses fd_install() which could lead to use-after-free (CVE-2022-1998)
* nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586)
* integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639)
* slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368)
* incomplete clean-up of multi-core shared buffers (aka SBDR) (CVE-2022-21123)
* incomplete clean-up of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125)
* incomplete clean-up in specific special register write operations (aka DRPW) (CVE-2022-21166)
* possible to use the debugger to write zero into a location of choice (CVE-2022-21499)
* AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900)
* AMD: Branch Type Confusion (non-retbleed) (CVE-2022-23825)
* Intel: Post-barrier Return Stack Buffer Predictions (CVE-2022-26373)
* double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390)
* use after free in SUNRPC subsystem (CVE-2022-28893)
* use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581)
* Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901)
* DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946)
* nf_tables disallow binding to already bound chain (CVE-2022-39190)
* nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8267" id="RHSA-2022:8267" type="rhsa" title="RHSA-2022:8267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36516" id="CVE-2020-36516" type="cve" title="CVE-2020-36516"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3640" id="CVE-2021-3640" type="cve" title="CVE-2021-3640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0168" id="CVE-2022-0168" type="cve" title="CVE-2022-0168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0617" id="CVE-2022-0617" type="cve" title="CVE-2022-0617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0854" id="CVE-2022-0854" type="cve" title="CVE-2022-0854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1016" id="CVE-2022-1016" type="cve" title="CVE-2022-1016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1048" id="CVE-2022-1048" type="cve" title="CVE-2022-1048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1184" id="CVE-2022-1184" type="cve" title="CVE-2022-1184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1280" id="CVE-2022-1280" type="cve" title="CVE-2022-1280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1353" id="CVE-2022-1353" type="cve" title="CVE-2022-1353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1679" id="CVE-2022-1679" type="cve" title="CVE-2022-1679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1852" id="CVE-2022-1852" type="cve" title="CVE-2022-1852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1998" id="CVE-2022-1998" type="cve" title="CVE-2022-1998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-20368" id="CVE-2022-20368" type="cve" title="CVE-2022-20368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21123" id="CVE-2022-21123" type="cve" title="CVE-2022-21123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21125" id="CVE-2022-21125" type="cve" title="CVE-2022-21125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21166" id="CVE-2022-21166" type="cve" title="CVE-2022-21166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21499" id="CVE-2022-21499" type="cve" title="CVE-2022-21499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23816" id="CVE-2022-23816" type="cve" title="CVE-2022-23816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23825" id="CVE-2022-23825" type="cve" title="CVE-2022-23825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24448" id="CVE-2022-24448" type="cve" title="CVE-2022-24448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2586" id="CVE-2022-2586" type="cve" title="CVE-2022-2586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26373" id="CVE-2022-26373" type="cve" title="CVE-2022-26373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2639" id="CVE-2022-2639" type="cve" title="CVE-2022-2639"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28390" id="CVE-2022-28390" type="cve" title="CVE-2022-28390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28893" id="CVE-2022-28893" type="cve" title="CVE-2022-28893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29581" id="CVE-2022-29581" type="cve" title="CVE-2022-29581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29900" id="CVE-2022-29900" type="cve" title="CVE-2022-29900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29901" id="CVE-2022-29901" type="cve" title="CVE-2022-29901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36946" id="CVE-2022-36946" type="cve" title="CVE-2022-36946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39190" id="CVE-2022-39190" type="cve" title="CVE-2022-39190"/>
      <reference href="https://bugzilla.redhat.com/1980646" id="1980646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2037386" id="2037386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2051444" id="2051444" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2052312" id="2052312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2053632" id="2053632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2058395" id="2058395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2059928" id="2059928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066614" id="2066614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066706" id="2066706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066819" id="2066819" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070205" id="2070205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2071022" id="2071022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073064" id="2073064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074208" id="2074208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084125" id="2084125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084183" id="2084183" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084479" id="2084479" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2088021" id="2088021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2089815" id="2089815" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090226" id="2090226" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090237" id="2090237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090240" id="2090240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090241" id="2090241" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103148" id="2103148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103153" id="2103153" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114878" id="2114878" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115065" id="2115065" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115278" id="2115278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123695" id="2123695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2129152" id="2129152" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8267.html" id="ALSA-2022:8267" type="self" title="ALSA-2022:8267"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="162.6.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.6.1.el9_1.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-162.6.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">14c18a3b35a918af84e8c87a743dd14440e027c1e0c15514f5d2359acf6c71c0</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="162.6.1.el9_1" epoch="0" arch="noarch" src="kernel-5.14.0-162.6.1.el9_1.src.rpm">
          <filename>kernel-doc-5.14.0-162.6.1.el9_1.noarch.rpm</filename>
          <sum type="sha256">242aafffb0039e10a1b81169569833632199da11ac1f0616c3db4abf7b37d200</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="162.6.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.6.1.el9_1.src.rpm">
          <filename>kernel-debug-devel-5.14.0-162.6.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">61aadd379c7a8259b8e152d1bf1fc734d5e93b2884f3000c57ef34a3983797eb</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="162.6.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.6.1.el9_1.src.rpm">
          <filename>kernel-headers-5.14.0-162.6.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">90cd142ee103cd61e8c74d925d96ef4aa1ebdd01c08cbc9a9d79b39a3ceb3e00</sum>
        </package>
        <package name="perf" version="5.14.0" release="162.6.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.6.1.el9_1.src.rpm">
          <filename>perf-5.14.0-162.6.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">a432645bf7a661b605f23cd74a161afc9ba14b95df6909eeb1dd98dfabe49594</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="162.6.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.6.1.el9_1.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-162.6.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">ac08b591bcd9cc195f810e758df05f7457f6cb36c7f4c816aa263bac0954bfcf</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="162.6.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.6.1.el9_1.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-162.6.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">b46b50df002e8556daad9920533be46ae1d613b008bf5b175a9f9bde9476cb76</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="162.6.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.6.1.el9_1.src.rpm">
          <filename>kernel-devel-5.14.0-162.6.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">c11373b2a7a0fbd73ae37f9741180f84e09c4ef17fc67b94db040de14fa59e68</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="162.6.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.6.1.el9_1.src.rpm">
          <filename>kernel-devel-matched-5.14.0-162.6.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">fd04f32d9341a29e961523f295e5abd5b4b335cfd1bc14750350af57fc7f4209</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8291</id>
    <title>Moderate: rsync security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 00:39:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rsync security and bug fix update</summary>
    <description>The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.

Security Fix(es):

* zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field (CVE-2022-37434)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8291" id="RHSA-2022:8291" type="rhsa" title="RHSA-2022:8291"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37434" id="CVE-2022-37434" type="cve" title="CVE-2022-37434"/>
      <reference href="https://bugzilla.redhat.com/2116639" id="2116639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8291.html" id="ALSA-2022:8291" type="self" title="ALSA-2022:8291"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="rsync-daemon" version="3.2.3" release="18.el9" epoch="0" arch="noarch" src="rsync-3.2.3-18.el9.src.rpm">
          <filename>rsync-daemon-3.2.3-18.el9.noarch.rpm</filename>
          <sum type="sha256">1b7b8d0f1db62a381e9185eebd1de7e50598cff114744e8b9f5608fc7689b231</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8299</id>
    <title>Low: curl security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 00:15:49"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: bad local IPv6 connection reuse (CVE-2022-27775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8299" id="RHSA-2022:8299" type="rhsa" title="RHSA-2022:8299"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27775" id="CVE-2022-27775" type="cve" title="CVE-2022-27775"/>
      <reference href="https://bugzilla.redhat.com/2078388" id="2078388" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8299.html" id="ALSA-2022:8299" type="self" title="ALSA-2022:8299"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="libcurl-devel" version="7.76.1" release="19.el9" epoch="0" arch="s390x" src="curl-7.76.1-19.el9.src.rpm">
          <filename>libcurl-devel-7.76.1-19.el9.s390x.rpm</filename>
          <sum type="sha256">f816f70826fb8198f6be25ad38bcc548688bb10532492d135738e31c6ffbe27c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8317</id>
    <title>Moderate: samba security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 23:54:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.16.4). (BZ#2077487)

Security Fix(es):

* samba: server memory information leak via SMB1 (CVE-2022-32742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8317" id="RHSA-2022:8317" type="rhsa" title="RHSA-2022:8317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32742" id="CVE-2022-32742" type="cve" title="CVE-2022-32742"/>
      <reference href="https://bugzilla.redhat.com/2108196" id="2108196" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8317.html" id="ALSA-2022:8317" type="self" title="ALSA-2022:8317"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="samba-client" version="4.16.4" release="101.el9" epoch="0" arch="s390x" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-client-4.16.4-101.el9.s390x.rpm</filename>
          <sum type="sha256">1af7c3d00f0f4b21b0ad45e2af514226b60d0efc6f8657b3ff5c5fe2a466044e</sum>
        </package>
        <package name="samba-vfs-iouring" version="4.16.4" release="101.el9" epoch="0" arch="s390x" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-vfs-iouring-4.16.4-101.el9.s390x.rpm</filename>
          <sum type="sha256">67e0db2cf49921a2e85566b7f78f56ac7e79cb4f7fc68d0a5c879191e1c28227</sum>
        </package>
        <package name="samba-krb5-printing" version="4.16.4" release="101.el9" epoch="0" arch="s390x" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-krb5-printing-4.16.4-101.el9.s390x.rpm</filename>
          <sum type="sha256">89123a7c932f25fd77a03b82aea27c5e81c23303251f9f089d64aee5bf3383b4</sum>
        </package>
        <package name="samba-winbind-clients" version="4.16.4" release="101.el9" epoch="0" arch="s390x" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-winbind-clients-4.16.4-101.el9.s390x.rpm</filename>
          <sum type="sha256">971910235302aa0c962c34743838fbbf7de861b0cd623289448b8653392ba12d</sum>
        </package>
        <package name="samba-winbind-krb5-locator" version="4.16.4" release="101.el9" epoch="0" arch="s390x" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-winbind-krb5-locator-4.16.4-101.el9.s390x.rpm</filename>
          <sum type="sha256">cac69fbaa265360d55316086cf7aa2153ecfbe46112a487a9e01e88568e00eb2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8340</id>
    <title>Moderate: freetype security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 22:41:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freetype security update</summary>
    <description>FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.

Security Fix(es):

* FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404)
* FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405)
* Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8340" id="RHSA-2022:8340" type="rhsa" title="RHSA-2022:8340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27404" id="CVE-2022-27404" type="cve" title="CVE-2022-27404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27405" id="CVE-2022-27405" type="cve" title="CVE-2022-27405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27406" id="CVE-2022-27406" type="cve" title="CVE-2022-27406"/>
      <reference href="https://bugzilla.redhat.com/2077985" id="2077985" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2077989" id="2077989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2077991" id="2077991" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8340.html" id="ALSA-2022:8340" type="self" title="ALSA-2022:8340"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="freetype" version="2.10.4" release="9.el9" epoch="0" arch="s390x" src="freetype-2.10.4-9.el9.src.rpm">
          <filename>freetype-2.10.4-9.el9.s390x.rpm</filename>
          <sum type="sha256">8c92079f9acec2400045a40e5a463d2d733f54ac20f4b7a8827a7e062e248f2a</sum>
        </package>
        <package name="freetype-devel" version="2.10.4" release="9.el9" epoch="0" arch="s390x" src="freetype-2.10.4-9.el9.src.rpm">
          <filename>freetype-devel-2.10.4-9.el9.s390x.rpm</filename>
          <sum type="sha256">fc6a414c8ebe3b7708f118e3b9c27edc361ab5c4d6b8a87bff4eaf36bf608778</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8353</id>
    <title>Moderate: python3.9 security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 22:22:15"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security, bug fix, and enhancement update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python3.9 (3.9.14). (BZ#2128249)

Security Fix(es):

* python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107)
* python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8353" id="RHSA-2022:8353" type="rhsa" title="RHSA-2022:8353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2015-20107" id="CVE-2015-20107" type="cve" title="CVE-2015-20107"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-28861" id="CVE-2021-28861" type="cve" title="CVE-2021-28861"/>
      <reference href="https://bugzilla.redhat.com/2075390" id="2075390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120642" id="2120642" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8353.html" id="ALSA-2022:8353" type="self" title="ALSA-2022:8353"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="python3-tkinter" version="3.9.14" release="1.el9" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9.src.rpm">
          <filename>python3-tkinter-3.9.14-1.el9.s390x.rpm</filename>
          <sum type="sha256">6ffa9781115ac4c526d61af94191d117372273c03b532f1effcd8506e21f3682</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.14" release="1.el9" epoch="0" arch="noarch" src="python3.9-3.9.14-1.el9.src.rpm">
          <filename>python-unversioned-command-3.9.14-1.el9.noarch.rpm</filename>
          <sum type="sha256">b860a69493c595223a36e245c9abdb7f1848f6f464a97e8f4f621d885b0f2204</sum>
        </package>
        <package name="python3-devel" version="3.9.14" release="1.el9" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9.src.rpm">
          <filename>python3-devel-3.9.14-1.el9.s390x.rpm</filename>
          <sum type="sha256">c8f4365ad00344fcf7b83c3b8892d2af188ad5f3eed55da87e81dbf0796da6aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8361</id>
    <title>Moderate: e2fsprogs security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 21:48:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>e2fsprogs security update</summary>
    <description>The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems.

Security Fix(es):

* e2fsprogs: out-of-bounds read/write via crafted filesystem (CVE-2022-1304)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8361" id="RHSA-2022:8361" type="rhsa" title="RHSA-2022:8361"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1304" id="CVE-2022-1304" type="cve" title="CVE-2022-1304"/>
      <reference href="https://bugzilla.redhat.com/2069726" id="2069726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8361.html" id="ALSA-2022:8361" type="self" title="ALSA-2022:8361"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="e2fsprogs-devel" version="1.46.5" release="3.el9" epoch="0" arch="s390x" src="e2fsprogs-1.46.5-3.el9.src.rpm">
          <filename>e2fsprogs-devel-1.46.5-3.el9.s390x.rpm</filename>
          <sum type="sha256">738d8f25bc04bc9ab4f703b4b754ece58e8f647ffee0995379411264bc934ed7</sum>
        </package>
        <package name="libcom_err-devel" version="1.46.5" release="3.el9" epoch="0" arch="s390x" src="e2fsprogs-1.46.5-3.el9.src.rpm">
          <filename>libcom_err-devel-1.46.5-3.el9.s390x.rpm</filename>
          <sum type="sha256">d4fb0496783ff377e0ee0d44530ebc99b7f5e936701ef78fcf9aa81e25e2f0eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8384</id>
    <title>Moderate: harfbuzz security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 21:35:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>harfbuzz security update</summary>
    <description>HarfBuzz is an implementation of the OpenType Layout engine.

Security Fix(es):

* harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc (CVE-2022-33068)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8384" id="RHSA-2022:8384" type="rhsa" title="RHSA-2022:8384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33068" id="CVE-2022-33068" type="cve" title="CVE-2022-33068"/>
      <reference href="https://bugzilla.redhat.com/2102608" id="2102608" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8384.html" id="ALSA-2022:8384" type="self" title="ALSA-2022:8384"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="harfbuzz" version="2.7.4" release="8.el9" epoch="0" arch="s390x" src="harfbuzz-2.7.4-8.el9.src.rpm">
          <filename>harfbuzz-2.7.4-8.el9.s390x.rpm</filename>
          <sum type="sha256">a79342a572613ec7f5dce25c9121904b264320feca111ad7104e9d00eba4a6d8</sum>
        </package>
        <package name="harfbuzz-devel" version="2.7.4" release="8.el9" epoch="0" arch="s390x" src="harfbuzz-2.7.4-8.el9.src.rpm">
          <filename>harfbuzz-devel-2.7.4-8.el9.s390x.rpm</filename>
          <sum type="sha256">d4d66b6f4a4582afc9270553eeeb04504b22092c89535e3fae2a21e587c2216b</sum>
        </package>
        <package name="harfbuzz-icu" version="2.7.4" release="8.el9" epoch="0" arch="s390x" src="harfbuzz-2.7.4-8.el9.src.rpm">
          <filename>harfbuzz-icu-2.7.4-8.el9.s390x.rpm</filename>
          <sum type="sha256">d8b50bb042d82fdeb8f3d3ed8e8409297445c5bc3d3d0698630322e4312b3631</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8431</id>
    <title>Low: podman security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>podman security, bug fix, and enhancement update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

* podman: possible information disclosure and modification (CVE-2022-2989)
* buildah: possible information disclosure and modification (CVE-2022-2990)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* (podman image trust) does not support the new trust type "sigstoreSigned " (BZ#2120436)
* dnf-update broken for podman/catatonit (BZ#2123319)
* podman creates lock file in /etc/cni/net.d/cni.lock instead of /run/lock/ (BZ#2123905)
* podman kill may deadlock [AlmaLinux 9.1] (BZ#2124716)
* containers config.json gets empty after sudden power loss (BZ#2136278)
* PANIC podman API service endpoint handler panic (BZ#2136287)

Enhancement(s):

* Podman volume plugin timeout should be configurable [almalinux-9.1.0 Z] (BZ#2124676)
* [RFE]Podman support to perform custom actions on unhealthy containers (BZ#2136281)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8431" id="RHSA-2022:8431" type="rhsa" title="RHSA-2022:8431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2989" id="CVE-2022-2989" type="cve" title="CVE-2022-2989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2990" id="CVE-2022-2990" type="cve" title="CVE-2022-2990"/>
      <reference href="https://bugzilla.redhat.com/2121445" id="2121445" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2121453" id="2121453" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8431.html" id="ALSA-2022:8431" type="self" title="ALSA-2022:8431"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="podman" version="4.2.0" release="7.el9_1" epoch="2" arch="s390x" src="podman-4.2.0-7.el9_1.src.rpm">
          <filename>podman-4.2.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">11f2864ac7505d04264dfc80ed08aceed0da89129c7136316a135ea36f587f14</sum>
        </package>
        <package name="podman-gvproxy" version="4.2.0" release="7.el9_1" epoch="2" arch="s390x" src="podman-4.2.0-7.el9_1.src.rpm">
          <filename>podman-gvproxy-4.2.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">467ee3e45f2238a3cd35d6c28c394c47f522f5e88d624157322da3200753a442</sum>
        </package>
        <package name="podman-catatonit" version="4.2.0" release="7.el9_1" epoch="2" arch="s390x" src="podman-4.2.0-7.el9_1.src.rpm">
          <filename>podman-catatonit-4.2.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">4b3d311870e78872989cdffab0df2159fedf75b54781f26f1457caa567e3dd27</sum>
        </package>
        <package name="podman-docker" version="4.2.0" release="7.el9_1" epoch="2" arch="noarch" src="podman-4.2.0-7.el9_1.src.rpm">
          <filename>podman-docker-4.2.0-7.el9_1.noarch.rpm</filename>
          <sum type="sha256">5fc18b2301ea8e5a166d1c090e387bb6aa6ca2f6037faaa08e39a50baedc42ee</sum>
        </package>
        <package name="podman-remote" version="4.2.0" release="7.el9_1" epoch="2" arch="s390x" src="podman-4.2.0-7.el9_1.src.rpm">
          <filename>podman-remote-4.2.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">8ad49c2cefc6b64c04b1b9715e80b0192ecd5ae131e02cb0958a3eb08d5728cd</sum>
        </package>
        <package name="podman-tests" version="4.2.0" release="7.el9_1" epoch="2" arch="s390x" src="podman-4.2.0-7.el9_1.src.rpm">
          <filename>podman-tests-4.2.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">8ba2d0984fcb2a0bd07f99b5e1079f6022aef24b421290cafbd5381597b13db7</sum>
        </package>
        <package name="podman-plugins" version="4.2.0" release="7.el9_1" epoch="2" arch="s390x" src="podman-4.2.0-7.el9_1.src.rpm">
          <filename>podman-plugins-4.2.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">c98af756ad4e7bcdfb23367327b0c21bcb45e377a207b65d89cd49d75994a1c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8434</id>
    <title>Moderate: dotnet7.0 security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 13:06:37"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.100 RC 2 and .NET Runtime 7.0.0 RC 2. 

The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.100). (BZ#2134641)

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8434" id="RHSA-2022:8434" type="rhsa" title="RHSA-2022:8434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41032" id="CVE-2022-41032" type="cve" title="CVE-2022-41032"/>
      <reference href="https://bugzilla.redhat.com/2132614" id="2132614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8434.html" id="ALSA-2022:8434" type="self" title="ALSA-2022:8434"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="aspnetcore-runtime-7.0" version="7.0.0" release="0.5.rc2.el9_1" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.5.rc2.el9_1.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.0-0.5.rc2.el9_1.s390x.rpm</filename>
          <sum type="sha256">1f01ace8085cac6e65c0c9a3025d8c2d9205b5dc955c6566fc04763224280bdb</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.0" release="0.5.rc2.el9_1" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.5.rc2.el9_1.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.0-0.5.rc2.el9_1.s390x.rpm</filename>
          <sum type="sha256">212357e1865a93ca87774a48a58a7d6a114e6e95e4f3e7bd740c975f7592424a</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="7.0.100" release="0.5.rc2.el9_1" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.5.rc2.el9_1.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.100-0.5.rc2.el9_1.s390x.rpm</filename>
          <sum type="sha256">5c483165cc81766aa4362f1d695a25642976a68fe4ca01c921ce7970a8a0201c</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.0" release="0.5.rc2.el9_1" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.5.rc2.el9_1.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.0-0.5.rc2.el9_1.s390x.rpm</filename>
          <sum type="sha256">6084af1d4d04cb54d91c546a0c4bd61aaf7c50bc97683279ec9c44bf2882daf8</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.100" release="0.5.rc2.el9_1" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.5.rc2.el9_1.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.100-0.5.rc2.el9_1.s390x.rpm</filename>
          <sum type="sha256">60efe79e853aa623d0a27fcd3e022f7aeafeb674b6a3861f3feb819023157405</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.0" release="0.5.rc2.el9_1" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.5.rc2.el9_1.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.0-0.5.rc2.el9_1.s390x.rpm</filename>
          <sum type="sha256">8ed938b4cb8220bdc33ca01e90e63893c67e275b11ef603b2acf13d70e0be7df</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.0" release="0.5.rc2.el9_1" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.5.rc2.el9_1.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.0-0.5.rc2.el9_1.s390x.rpm</filename>
          <sum type="sha256">aaef80033e2db68b78584b359e874f0abe53c262966988d9ba11eca57c0a8fdb</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.100" release="0.5.rc2.el9_1" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.5.rc2.el9_1.src.rpm">
          <filename>dotnet-templates-7.0-7.0.100-0.5.rc2.el9_1.s390x.rpm</filename>
          <sum type="sha256">cc1e22ee653bed52ca04f6176bc9261097c8e8bd01565488afb6b1b7267e096f</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.0" release="0.5.rc2.el9_1" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.5.rc2.el9_1.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.0-0.5.rc2.el9_1.s390x.rpm</filename>
          <sum type="sha256">ceff6d4e8b3045d7c0e8a66f624490c28930b4bb23823da5164769321a2e2e01</sum>
        </package>
        <package name="dotnet-host" version="7.0.0" release="0.5.rc2.el9_1" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.5.rc2.el9_1.src.rpm">
          <filename>dotnet-host-7.0.0-0.5.rc2.el9_1.s390x.rpm</filename>
          <sum type="sha256">df3c960b65080f80455aa84af5c36a8cb2807e0b18ce7aa83f3b2d1318fed45c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8444</id>
    <title>Moderate: keylime security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 14:03:19"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>keylime security update</summary>
    <description>Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.

Security Fix(es):

* keylime: exception handling and impedance match in tornado_requests (CVE-2022-3500)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8444" id="RHSA-2022:8444" type="rhsa" title="RHSA-2022:8444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3500" id="CVE-2022-3500" type="cve" title="CVE-2022-3500"/>
      <reference href="https://bugzilla.redhat.com/2135343" id="2135343" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8444.html" id="ALSA-2022:8444" type="self" title="ALSA-2022:8444"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="keylime-verifier" version="6.5.1" release="1.el9_1" epoch="0" arch="s390x" src="keylime-6.5.1-1.el9_1.src.rpm">
          <filename>keylime-verifier-6.5.1-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">03513a1d371a37c5197f47ad021e9c203626800960d895c893aba222ee298b67</sum>
        </package>
        <package name="keylime-tenant" version="6.5.1" release="1.el9_1" epoch="0" arch="s390x" src="keylime-6.5.1-1.el9_1.src.rpm">
          <filename>keylime-tenant-6.5.1-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">0fd5319634c58d8d783bab102ee1a34ad120e6715b747a84d6a018afb7513dfe</sum>
        </package>
        <package name="keylime-base" version="6.5.1" release="1.el9_1" epoch="0" arch="s390x" src="keylime-6.5.1-1.el9_1.src.rpm">
          <filename>keylime-base-6.5.1-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">21cf71f007846e9943b2a4ff167044d893279512be059d513c5510c29046faa5</sum>
        </package>
        <package name="keylime-selinux" version="6.5.1" release="1.el9_1" epoch="0" arch="noarch" src="keylime-6.5.1-1.el9_1.src.rpm">
          <filename>keylime-selinux-6.5.1-1.el9_1.noarch.rpm</filename>
          <sum type="sha256">31db20cc7837e7a9bb5695c2d5e9462020086d85ae634a8e96214e04a01d9366</sum>
        </package>
        <package name="python3-keylime" version="6.5.1" release="1.el9_1" epoch="0" arch="s390x" src="keylime-6.5.1-1.el9_1.src.rpm">
          <filename>python3-keylime-6.5.1-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">4fd6c4ae35d2eb1dc5dd83079c9033ce6b4d532a4bdcb9ec525b83892b55a18f</sum>
        </package>
        <package name="keylime" version="6.5.1" release="1.el9_1" epoch="0" arch="s390x" src="keylime-6.5.1-1.el9_1.src.rpm">
          <filename>keylime-6.5.1-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">6196fa08ea14c77e6c0eea748552c2b7e61ae6e41ce9177370c432659bf47a74</sum>
        </package>
        <package name="keylime-registrar" version="6.5.1" release="1.el9_1" epoch="0" arch="s390x" src="keylime-6.5.1-1.el9_1.src.rpm">
          <filename>keylime-registrar-6.5.1-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">cf2838d0dc79614e115bddaf6f45322846c94563b226f1f865fa33ac637cf77b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8493</id>
    <title>Important: python3.9 security update</title>
    <issued date="2022-11-16 00:00:00"/>
    <updated date="2022-11-17 11:28:05"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: local privilege escalation via the multiprocessing forkserver start method (CVE-2022-42919)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8493" id="RHSA-2022:8493" type="rhsa" title="RHSA-2022:8493"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42919" id="CVE-2022-42919" type="cve" title="CVE-2022-42919"/>
      <reference href="https://bugzilla.redhat.com/2138705" id="2138705" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8493.html" id="ALSA-2022:8493" type="self" title="ALSA-2022:8493"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="python3-devel" version="3.9.14" release="1.el9_1.1" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-devel-3.9.14-1.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">1afe12d5b99388ca65862a4e488c327c085b3be835552812341d7c64efecc176</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.14" release="1.el9_1.1" epoch="0" arch="noarch" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python-unversioned-command-3.9.14-1.el9_1.1.noarch.rpm</filename>
          <sum type="sha256">3d2670507359984b3c6478d157fb65c2564225e0ffc774f3681647addfdf5e60</sum>
        </package>
        <package name="python3-tkinter" version="3.9.14" release="1.el9_1.1" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-tkinter-3.9.14-1.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">ba9fc1c1121d9fd3ef908d807e033c7da318ba2153141527d0d2179ad342539e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8561</id>
    <title>Important: thunderbird security update</title>
    <issued date="2022-11-21 00:00:00"/>
    <updated date="2022-11-21 21:22:05"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.5.0.

Security Fix(es):

* Mozilla: Service Workers might have learned size of cross-origin media files (CVE-2022-45403)
* Mozilla: Fullscreen notification bypass (CVE-2022-45404)
* Mozilla: Use-after-free in InputStream implementation (CVE-2022-45405)
* Mozilla: Use-after-free of a JavaScript Realm (CVE-2022-45406)
* Mozilla: Fullscreen notification bypass via windowName (CVE-2022-45408)
* Mozilla: Use-after-free in Garbage Collection (CVE-2022-45409)
* Mozilla: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5 (CVE-2022-45421)
* Mozilla: ServiceWorker-intercepted requests bypassed SameSite cookie policy (CVE-2022-45410)
* Mozilla: Cross-Site Tracing was possible via non-standard override headers (CVE-2022-45411)
* Mozilla: Symlinks may resolve to partially uninitialized buffers (CVE-2022-45412)
* Mozilla: Keystroke Side-Channel Leakage (CVE-2022-45416)
* Mozilla: Custom mouse cursor could have been drawn over browser UI (CVE-2022-45418)
* Mozilla: Iframe contents could be rendered outside the iframe (CVE-2022-45420)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8561" id="RHSA-2022:8561" type="rhsa" title="RHSA-2022:8561"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45403" id="CVE-2022-45403" type="cve" title="CVE-2022-45403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45404" id="CVE-2022-45404" type="cve" title="CVE-2022-45404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45405" id="CVE-2022-45405" type="cve" title="CVE-2022-45405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45406" id="CVE-2022-45406" type="cve" title="CVE-2022-45406"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45408" id="CVE-2022-45408" type="cve" title="CVE-2022-45408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45409" id="CVE-2022-45409" type="cve" title="CVE-2022-45409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45410" id="CVE-2022-45410" type="cve" title="CVE-2022-45410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45411" id="CVE-2022-45411" type="cve" title="CVE-2022-45411"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45412" id="CVE-2022-45412" type="cve" title="CVE-2022-45412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45416" id="CVE-2022-45416" type="cve" title="CVE-2022-45416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45418" id="CVE-2022-45418" type="cve" title="CVE-2022-45418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45420" id="CVE-2022-45420" type="cve" title="CVE-2022-45420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45421" id="CVE-2022-45421" type="cve" title="CVE-2022-45421"/>
      <reference href="https://bugzilla.redhat.com/2143197" id="2143197" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143198" id="2143198" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143199" id="2143199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143200" id="2143200" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143201" id="2143201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143202" id="2143202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143203" id="2143203" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143204" id="2143204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143205" id="2143205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143240" id="2143240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143241" id="2143241" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143242" id="2143242" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143243" id="2143243" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8561.html" id="ALSA-2022:8561" type="self" title="ALSA-2022:8561"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="thunderbird" version="102.5.0" release="2.el9_1.alma" epoch="0" arch="s390x" src="thunderbird-102.5.0-2.el9_1.alma.src.rpm">
          <filename>thunderbird-102.5.0-2.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">c1f452ee57708d0693ed167f4d3c7d1722aafe858815b4cd4a7d65c84f8f6d29</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2022:8580</id>
    <title>Important: firefox security update</title>
    <issued date="2022-11-22 00:00:00"/>
    <updated date="2022-11-22 23:10:10"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.5.0 ESR.

Security Fix(es):

* Mozilla: Service Workers might have learned size of cross-origin media files (CVE-2022-45403)
* Mozilla: Fullscreen notification bypass (CVE-2022-45404)
* Mozilla: Use-after-free in InputStream implementation (CVE-2022-45405)
* Mozilla: Use-after-free of a JavaScript Realm (CVE-2022-45406)
* Mozilla: Fullscreen notification bypass via windowName (CVE-2022-45408)
* Mozilla: Use-after-free in Garbage Collection (CVE-2022-45409)
* Mozilla: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5 (CVE-2022-45421)
* Mozilla: ServiceWorker-intercepted requests bypassed SameSite cookie policy (CVE-2022-45410)
* Mozilla: Cross-Site Tracing was possible via non-standard override headers (CVE-2022-45411)
* Mozilla: Symlinks may resolve to partially uninitialized buffers (CVE-2022-45412)
* Mozilla: Keystroke Side-Channel Leakage (CVE-2022-45416)
* Mozilla: Custom mouse cursor could have been drawn over browser UI (CVE-2022-45418)
* Mozilla: Iframe contents could be rendered outside the iframe (CVE-2022-45420)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8580" id="RHSA-2022:8580" type="rhsa" title="RHSA-2022:8580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45403" id="CVE-2022-45403" type="cve" title="CVE-2022-45403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45404" id="CVE-2022-45404" type="cve" title="CVE-2022-45404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45405" id="CVE-2022-45405" type="cve" title="CVE-2022-45405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45406" id="CVE-2022-45406" type="cve" title="CVE-2022-45406"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45408" id="CVE-2022-45408" type="cve" title="CVE-2022-45408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45409" id="CVE-2022-45409" type="cve" title="CVE-2022-45409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45410" id="CVE-2022-45410" type="cve" title="CVE-2022-45410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45411" id="CVE-2022-45411" type="cve" title="CVE-2022-45411"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45412" id="CVE-2022-45412" type="cve" title="CVE-2022-45412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45416" id="CVE-2022-45416" type="cve" title="CVE-2022-45416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45418" id="CVE-2022-45418" type="cve" title="CVE-2022-45418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45420" id="CVE-2022-45420" type="cve" title="CVE-2022-45420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45421" id="CVE-2022-45421" type="cve" title="CVE-2022-45421"/>
      <reference href="https://bugzilla.redhat.com/2143197" id="2143197" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143198" id="2143198" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143199" id="2143199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143200" id="2143200" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143201" id="2143201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143202" id="2143202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143203" id="2143203" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143204" id="2143204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143205" id="2143205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143240" id="2143240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143241" id="2143241" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143242" id="2143242" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143243" id="2143243" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8580.html" id="ALSA-2022:8580" type="self" title="ALSA-2022:8580"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="firefox" version="102.5.0" release="1.el9_1.alma" epoch="0" arch="s390x" src="firefox-102.5.0-1.el9_1.alma.src.rpm">
          <filename>firefox-102.5.0-1.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">8d4f855507485ea53f1d24d21c0a07c02a8a3021915801a1dcb4662711dfeef4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8637</id>
    <title>Important: krb5 security update</title>
    <issued date="2022-11-28 00:00:00"/>
    <updated date="2022-12-05 10:57:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

* krb5: integer overflow vulnerabilities in PAC parsing (CVE-2022-42898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8637" id="RHSA-2022:8637" type="rhsa" title="RHSA-2022:8637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42898" id="CVE-2022-42898" type="cve" title="CVE-2022-42898"/>
      <reference href="https://bugzilla.redhat.com/2140960" id="2140960" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8637.html" id="ALSA-2022:8637" type="self" title="ALSA-2022:8637"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="krb5-devel" version="1.19.1" release="24.el9_1" epoch="0" arch="s390x" src="krb5-1.19.1-24.el9_1.src.rpm">
          <filename>krb5-devel-1.19.1-24.el9_1.s390x.rpm</filename>
          <sum type="sha256">7431d3f866a4891f39de75474314d3bde187a185790afd6b507160bd851e0895</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8643</id>
    <title>Important: varnish security update</title>
    <issued date="2022-11-28 00:00:00"/>
    <updated date="2022-12-05 10:44:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: Request Forgery Vulnerability (CVE-2022-45060)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8643" id="RHSA-2022:8643" type="rhsa" title="RHSA-2022:8643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45060" id="CVE-2022-45060" type="cve" title="CVE-2022-45060"/>
      <reference href="https://bugzilla.redhat.com/2141844" id="2141844" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8643.html" id="ALSA-2022:8643" type="self" title="ALSA-2022:8643"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="varnish-docs" version="6.6.2" release="2.el9_1.1" epoch="0" arch="s390x" src="varnish-6.6.2-2.el9_1.1.src.rpm">
          <filename>varnish-docs-6.6.2-2.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">043e3af7d20339521542921d2d0d7c529284385f7addb47c57f8944512524676</sum>
        </package>
        <package name="varnish" version="6.6.2" release="2.el9_1.1" epoch="0" arch="s390x" src="varnish-6.6.2-2.el9_1.1.src.rpm">
          <filename>varnish-6.6.2-2.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">a05c07efbc82bd577cf62badea7ef87e6ba01d1b9b673bb25b7b9e351f175423</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8832</id>
    <title>Moderate: nodejs:18 security, bug fix, and enhancement update</title>
    <issued date="2022-12-06 00:00:00"/>
    <updated date="2022-12-07 14:39:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:18 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (18.12.1). (BZ#2142809, BZ#2142830, BZ#2142834, BZ#2142856)

Security Fix(es):

* nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)
* nodejs: DNS rebinding in inspect via invalid octal IP address (CVE-2022-43548)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8832" id="RHSA-2022:8832" type="rhsa" title="RHSA-2022:8832"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3517" id="CVE-2022-3517" type="cve" title="CVE-2022-3517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43548" id="CVE-2022-43548" type="cve" title="CVE-2022-43548"/>
      <reference href="https://bugzilla.redhat.com/2134609" id="2134609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140911" id="2140911" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8832.html" id="ALSA-2022:8832" type="self" title="ALSA-2022:8832"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <module name="nodejs" stream="18" version="9010020221207131845" context="8cf767d6" arch="s390x"/>
        <package name="nodejs" version="18.12.1" release="1.module_el9.1.0+16+91bc168f" epoch="1" arch="s390x" src="nodejs-18.12.1-1.module_el9.1.0+16+91bc168f.src.rpm">
          <filename>nodejs-18.12.1-1.module_el9.1.0+16+91bc168f.s390x.rpm</filename>
          <sum type="sha256">2735183018960fe14822e17d2ef00447489715c709238489fdc2595fad4bdeb7</sum>
        </package>
        <package name="nodejs-docs" version="18.12.1" release="1.module_el9.1.0+16+91bc168f" epoch="1" arch="noarch" src="nodejs-18.12.1-1.module_el9.1.0+16+91bc168f.src.rpm">
          <filename>nodejs-docs-18.12.1-1.module_el9.1.0+16+91bc168f.noarch.rpm</filename>
          <sum type="sha256">3f130838fecb45d434956e044b5336680c97eb73104c0e478ca0e9b23353467c</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="1.module_el9.1.0+16+91bc168f" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-1.module_el9.1.0+16+91bc168f.src.rpm">
          <filename>nodejs-nodemon-2.0.20-1.module_el9.1.0+16+91bc168f.noarch.rpm</filename>
          <sum type="sha256">4a7e1a042a9efbd31db5f5b4a6af0bc0b6d207a37fa374cf54dae97b4b0f09be</sum>
        </package>
        <package name="npm" version="8.19.2" release="1.18.12.1.1.module_el9.1.0+16+91bc168f" epoch="1" arch="s390x" src="nodejs-18.12.1-1.module_el9.1.0+16+91bc168f.src.rpm">
          <filename>npm-8.19.2-1.18.12.1.1.module_el9.1.0+16+91bc168f.s390x.rpm</filename>
          <sum type="sha256">67f46e815e87cb89182a0c8e25b8bbb87e54ab47b17c97fb4905d0f94e8aa33e</sum>
        </package>
        <package name="nodejs-devel" version="18.12.1" release="1.module_el9.1.0+16+91bc168f" epoch="1" arch="s390x" src="nodejs-18.12.1-1.module_el9.1.0+16+91bc168f.src.rpm">
          <filename>nodejs-devel-18.12.1-1.module_el9.1.0+16+91bc168f.s390x.rpm</filename>
          <sum type="sha256">7a765e6553a73589c788cc5ac3a8633e7c2a8d39af327f208bb1f675cbac98e2</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.12.1" release="1.module_el9.1.0+16+91bc168f" epoch="1" arch="s390x" src="nodejs-18.12.1-1.module_el9.1.0+16+91bc168f.src.rpm">
          <filename>nodejs-full-i18n-18.12.1-1.module_el9.1.0+16+91bc168f.s390x.rpm</filename>
          <sum type="sha256">c0260b2416cc6d95dfc555455e6a5334122bdf036dd02c17e30d4f1d2c41a668</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:9065</id>
    <title>Important: firefox security update</title>
    <issued date="2022-12-15 00:00:00"/>
    <updated date="2022-12-16 10:17:30"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.6.0 ESR.

Security Fix(es):

* Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878)
* Mozilla: Use-after-free in WebGL (CVE-2022-46880)
* Mozilla: Memory corruption in WebGL (CVE-2022-46881)
* Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874)
* Mozilla: Use-after-free in WebGL (CVE-2022-46882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:9065" id="RHSA-2022:9065" type="rhsa" title="RHSA-2022:9065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46872" id="CVE-2022-46872" type="cve" title="CVE-2022-46872"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46874" id="CVE-2022-46874" type="cve" title="CVE-2022-46874"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46878" id="CVE-2022-46878" type="cve" title="CVE-2022-46878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46880" id="CVE-2022-46880" type="cve" title="CVE-2022-46880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46881" id="CVE-2022-46881" type="cve" title="CVE-2022-46881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46882" id="CVE-2022-46882" type="cve" title="CVE-2022-46882"/>
      <reference href="https://bugzilla.redhat.com/2153441" id="2153441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153449" id="2153449" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153454" id="2153454" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153463" id="2153463" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153466" id="2153466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153467" id="2153467" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-9065.html" id="ALSA-2022:9065" type="self" title="ALSA-2022:9065"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="firefox" version="102.6.0" release="1.el9_1.alma" epoch="0" arch="s390x" src="firefox-102.6.0-1.el9_1.alma.src.rpm">
          <filename>firefox-102.6.0-1.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">3f8b7a8addf5978c95e9eae0f005cf4556496b564e49f1924c89a7d5d40e08b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:9080</id>
    <title>Important: thunderbird security update</title>
    <issued date="2022-12-15 00:00:00"/>
    <updated date="2022-12-16 10:36:19"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.6.0.

Security Fix(es):

* Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878)
* Mozilla: Use-after-free in WebGL (CVE-2022-46880)
* Mozilla: Memory corruption in WebGL (CVE-2022-46881)
* Mozilla: Quoting from an HTML email with certain tags will trigger network requests and load remote content, regardless of a configuration to block remote content (CVE-2022-45414)
* Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874)
* Mozilla: Use-after-free in WebGL (CVE-2022-46882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:9080" id="RHSA-2022:9080" type="rhsa" title="RHSA-2022:9080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45414" id="CVE-2022-45414" type="cve" title="CVE-2022-45414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46872" id="CVE-2022-46872" type="cve" title="CVE-2022-46872"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46874" id="CVE-2022-46874" type="cve" title="CVE-2022-46874"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46878" id="CVE-2022-46878" type="cve" title="CVE-2022-46878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46880" id="CVE-2022-46880" type="cve" title="CVE-2022-46880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46881" id="CVE-2022-46881" type="cve" title="CVE-2022-46881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46882" id="CVE-2022-46882" type="cve" title="CVE-2022-46882"/>
      <reference href="https://bugzilla.redhat.com/2149868" id="2149868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153441" id="2153441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153449" id="2153449" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153454" id="2153454" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153463" id="2153463" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153466" id="2153466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153467" id="2153467" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-9080.html" id="ALSA-2022:9080" type="self" title="ALSA-2022:9080"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="thunderbird" version="102.6.0" release="2.el9_1.alma" epoch="0" arch="s390x" src="thunderbird-102.6.0-2.el9_1.alma.src.rpm">
          <filename>thunderbird-102.6.0-2.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">f53de5883171be36b35a54f41c604a6e95d6e019f7260070dadc720a023f169a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0005</id>
    <title>Important: bcel security update</title>
    <issued date="2023-01-02 00:00:00"/>
    <updated date="2023-01-04 07:42:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bcel security update</summary>
    <description>The Byte Code Engineering Library (Apache Commons BCEL) is intended to give users a convenient way to analyze, create, and manipulate (binary) Java class files (those ending with .class).

Security Fix(es):

* Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing (CVE-2022-42920)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0005" id="RHSA-2023:0005" type="rhsa" title="RHSA-2023:0005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42920" id="CVE-2022-42920" type="cve" title="CVE-2022-42920"/>
      <reference href="https://bugzilla.redhat.com/2142707" id="2142707" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0005.html" id="ALSA-2023:0005" type="self" title="ALSA-2023:0005"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="bcel" version="6.4.1" release="9.el9_1" epoch="0" arch="noarch" src="bcel-6.4.1-9.el9_1.src.rpm">
          <filename>bcel-6.4.1-9.el9_1.noarch.rpm</filename>
          <sum type="sha256">a39a659c1e56d24d1b8070a45638ed96873ac5e2eae6c7652ba72237212611b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0021</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-01-04 00:00:00"/>
    <updated date="2023-01-12 08:39:11"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: processing maliciously crafted web content may lead to an arbitrary code execution (CVE-2022-42856)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0021" id="RHSA-2023:0021" type="rhsa" title="RHSA-2023:0021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42856" id="CVE-2022-42856" type="cve" title="CVE-2022-42856"/>
      <reference href="https://bugzilla.redhat.com/2153683" id="2153683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0021.html" id="ALSA-2023:0021" type="self" title="ALSA-2023:0021"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="webkit2gtk3" version="2.36.7" release="1.el9_1.1" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_1.1.src.rpm">
          <filename>webkit2gtk3-2.36.7-1.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">6c9390f2c8763aa0b3174bf8bebc3fe2ce36d15e94739ca67199b932750a175a</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.36.7" release="1.el9_1.1" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_1.1.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.36.7-1.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">a81c73120de1e64a5373178378767931ce221c780a923f902a74a8008e25d39f</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.36.7" release="1.el9_1.1" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_1.1.src.rpm">
          <filename>webkit2gtk3-devel-2.36.7-1.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">cecf37e2ad4a0de2b70665354ed64f8299650366791955fd9dfc10477898326e</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.36.7" release="1.el9_1.1" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_1.1.src.rpm">
          <filename>webkit2gtk3-jsc-2.36.7-1.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">e4ec27dfb8603ac2ad4a7340b86115381014daec14999ae1efaaec6e769601eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0077</id>
    <title>Moderate: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-01-11 00:00:00"/>
    <updated date="2023-01-12 19:37:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.113 and .NET Runtime 6.0.13.

The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.113). (BZ#2154459)

Security Fix(es):

* dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process (CVE-2023-21538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0077" id="RHSA-2023:0077" type="rhsa" title="RHSA-2023:0077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21538" id="CVE-2023-21538" type="cve" title="CVE-2023-21538"/>
      <reference href="https://bugzilla.redhat.com/2158342" id="2158342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0077.html" id="ALSA-2023:0077" type="self" title="ALSA-2023:0077"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="dotnet-runtime-6.0" version="6.0.13" release="1.el9_1" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el9_1.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.13-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">0b18e10471be45bc10730e334d624c2c463f0f620e992a7c280aad6381b8e828</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.113" release="1.el9_1" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el9_1.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.113-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">1263551d531aa44ad86054f14f2718770f556c601bf0512c33f86b95275b303d</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.13" release="1.el9_1" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el9_1.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.13-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">4327a41a3b7829c3d58eb772f63094a3b60da8a948df3a58c402a94b861bfc88</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.113" release="1.el9_1" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el9_1.src.rpm">
          <filename>dotnet-templates-6.0-6.0.113-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">57298585f45512aa53d9e7e9132101a04f82415c161af67cc8a38c8ea8fa0918</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.13" release="1.el9_1" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el9_1.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.13-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">597c8c55a4b3ab640adfb040c8ced90bbbf98f9c17c6bf027c597f367578419a</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.13" release="1.el9_1" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el9_1.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.13-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">794f4b0b8185c84f6ecd6c13ae9ca320d481cb0a95a02508a9961b5481ba1cbb</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.13" release="1.el9_1" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el9_1.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.13-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">b1b486d2821debec64561aa48977893a2d6c7c543e64d00769ef8cd38a80a3fa</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.13" release="1.el9_1" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el9_1.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.13-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">f4fc35d18bfe8dfcae6a19a79073296d3cfedf64b87d9ecd558f37c7e88c0df6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0194</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database.  This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147476)
* Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [almalinux-9] (BZ#2153097)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0194" id="RHSA-2023:0194" type="rhsa" title="RHSA-2023:0194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160421" id="2160421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0194.html" id="ALSA-2023:0194" type="self" title="ALSA-2023:0194"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="java-17-openjdk-javadoc" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">158e7543120145de8de79342244b5fd41679eef4407f18d59cb45eabd4e793b8</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-devel-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">23a246d02abd3ee406fcba141b9abddf1ff459ca1a8ea45e6e25e60ec0d01ba9</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">38d3effc39bdcf52cf05af3873b083f6add5140dcedfc00618280b8ab7fbebec</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-headless-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">846abda7b24413031936bb41bbed3688550f330285dbec6dfe52129b2c403c3e</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">c87d6d7c41746a81346eaf9ec11f2c5f66972407121ad5670aefa1ed5d719c06</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">c913e73de0b0bddf7e0d03f0f540a91b012fdae22044cd98ffb4334693e4dff1</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">ca00dc1d72b86f2a7f5a6f16c8b3baef3ebb8d6dfeab793842d4f572602925d8</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-demo-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">d8ab5a501e631a0d5a66721ba3e3bda8edb71415e52e55e68cddae9a6fbac279</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-src-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">eebb0fb884bde5a9b9772fcf19507c705d335f4d61cb36909499cf28e3d3b23a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0202</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-01-18 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [almalinux-9] (BZ#2157798)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0202" id="RHSA-2023:0202" type="rhsa" title="RHSA-2023:0202"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160421" id="2160421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0202.html" id="ALSA-2023:0202" type="self" title="ALSA-2023:0202"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">030737bdfd183522d8112ed24f994ea8fc0b05f4f6a1f2e969cfbe6915d83b4c</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">18b23ef28dc64704dcec634138866a45982dab1918d29d0717addfe90f5dd152</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-devel-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">4f65ac3f6277e82edb81ec421ad3e018367869e44319681dd7b293d618520c24</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">5f02dab50af52cb8b444051cc2a19b5a2805c6b07696c498d04536c0fd9d5f55</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-src-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">8dd2d37185740350ba696c5fcb1c67105476ba9d2a924f3fee96b268a090aaa3</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">a3eaadbec15b5995ac80aa37ace6a446a24812bd2427c55a2a5acc746761a06f</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-demo-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">af8776785587e2d9f0e3875a18c65cd5e86a824b4884ab3ea489aaec8fe7968f</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">e5cf29c5540dca2d8d5df561c1f6251f36a608e7a8c6c9ca8d881736035e246d</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-headless-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">f1dfb3c5b4e17830911fea974de56be60601b2252ee770afee8cd172a5e2bc17</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0210</id>
    <title>Moderate: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2023-01-26 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-01, 8u362) [almalinux-9] (BZ#2159912)
* solr broken due to access denied ("java.io.FilePermission" "/etc/pki/java/cacerts" "read") [almalinux-9, openjdk-8] (BZ#2163594)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0210" id="RHSA-2023:0210" type="rhsa" title="RHSA-2023:0210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21830" id="CVE-2023-21830" type="cve" title="CVE-2023-21830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160490" id="2160490" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0210.html" id="ALSA-2023:0210" type="self" title="ALSA-2023:0210"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.362.b09-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">021420b21b466e9771ec12911df0d2fb72ad0ed39db5555f8bb9fc41498c9444</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.362.b09-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">5701847e4f8ba122c0448cf9ce57ac98155ffe6d5cd71e6e3e8d3f0e0b102dfb</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.362.b09-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">7a7989ca37f342dc16d66b8a6e4d0d8369a8c6e6c10799b9cf5943d70040eb73</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.362.b09-2.el9_1.noarch.rpm</filename>
          <sum type="sha256">8ded73fb8d6537fcb052492f868f8869e4431cc372af44f2acae3ead0a616607</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.362.b09-2.el9_1.noarch.rpm</filename>
          <sum type="sha256">96a3da828b7bdb46d7b5013293328c4257b8d1907eaee35ca6041b4f014afd58</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">9a869f207c7696bc3c4b1a59984731e4464c3da56daa6083649e9632ae0a5958</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.362.b09" release="2.el9_1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.362.b09-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">eb99c2f16827987a751d96b073091d944089fc3f9c0cf846bb4dfe1817838033</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0282</id>
    <title>Important: sudo security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 07:20:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sudo security update</summary>
    <description>The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

* sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0282" id="RHSA-2023:0282" type="rhsa" title="RHSA-2023:0282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22809" id="CVE-2023-22809" type="cve" title="CVE-2023-22809"/>
      <reference href="https://bugzilla.redhat.com/2161142" id="2161142" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0282.html" id="ALSA-2023:0282" type="self" title="ALSA-2023:0282"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="sudo-python-plugin" version="1.9.5p2" release="7.el9_1.1" epoch="0" arch="s390x" src="sudo-1.9.5p2-7.el9_1.1.src.rpm">
          <filename>sudo-python-plugin-1.9.5p2-7.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">0793688b10af2e04bc77e9778829e66fc8b778eaad5c73cb5ca89f72209b0333</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0285</id>
    <title>Important: firefox security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 07:32:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.7.0 ESR.

Security Fix(es):

* Mozilla: libusrsctp library out of date (CVE-2022-46871)
* Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598)
* Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605)
* Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599)
* Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601)
* Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers (CVE-2023-23602)
* Mozilla: Fullscreen notification bypass (CVE-2022-46877)
* Mozilla: Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content Security Policy via format directive (CVE-2023-23603)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0285" id="RHSA-2023:0285" type="rhsa" title="RHSA-2023:0285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46871" id="CVE-2022-46871" type="cve" title="CVE-2022-46871"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46877" id="CVE-2022-46877" type="cve" title="CVE-2022-46877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23598" id="CVE-2023-23598" type="cve" title="CVE-2023-23598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23599" id="CVE-2023-23599" type="cve" title="CVE-2023-23599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23601" id="CVE-2023-23601" type="cve" title="CVE-2023-23601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23602" id="CVE-2023-23602" type="cve" title="CVE-2023-23602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23603" id="CVE-2023-23603" type="cve" title="CVE-2023-23603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23605" id="CVE-2023-23605" type="cve" title="CVE-2023-23605"/>
      <reference href="https://bugzilla.redhat.com/2162336" id="2162336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162338" id="2162338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162339" id="2162339" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162340" id="2162340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162341" id="2162341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162342" id="2162342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162343" id="2162343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162344" id="2162344" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0285.html" id="ALSA-2023:0285" type="self" title="ALSA-2023:0285"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="firefox" version="102.7.0" release="1.el9_1.alma" epoch="0" arch="s390x" src="firefox-102.7.0-1.el9_1.alma.src.rpm">
          <filename>firefox-102.7.0-1.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">882908d92f54846b7aa5825186bb018a9d69386eb48c41fc59fa6f94b5a8f471</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0302</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 11:36:43"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
* libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519)
* libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953)
* libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520)
* libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0302" id="RHSA-2023:0302" type="rhsa" title="RHSA-2023:0302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2056" id="CVE-2022-2056" type="cve" title="CVE-2022-2056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2057" id="CVE-2022-2057" type="cve" title="CVE-2022-2057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2058" id="CVE-2022-2058" type="cve" title="CVE-2022-2058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2519" id="CVE-2022-2519" type="cve" title="CVE-2022-2519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2520" id="CVE-2022-2520" type="cve" title="CVE-2022-2520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2521" id="CVE-2022-2521" type="cve" title="CVE-2022-2521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2953" id="CVE-2022-2953" type="cve" title="CVE-2022-2953"/>
      <reference href="https://bugzilla.redhat.com/2103222" id="2103222" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122789" id="2122789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122792" id="2122792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122799" id="2122799" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134432" id="2134432" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0302.html" id="ALSA-2023:0302" type="self" title="ALSA-2023:0302"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="libtiff" version="4.4.0" release="5.el9_1" epoch="0" arch="s390x" src="libtiff-4.4.0-5.el9_1.src.rpm">
          <filename>libtiff-4.4.0-5.el9_1.s390x.rpm</filename>
          <sum type="sha256">c39e07d5bd978b073b5e0b814f4b1a5f1d11f542fb4947421581aff96df50b4c</sum>
        </package>
        <package name="libtiff-devel" version="4.4.0" release="5.el9_1" epoch="0" arch="s390x" src="libtiff-4.4.0-5.el9_1.src.rpm">
          <filename>libtiff-devel-4.4.0-5.el9_1.s390x.rpm</filename>
          <sum type="sha256">e4ee1fffb695774e39ffbbed996c36e274c2be3e1df6d0ea0468163ad119c916</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0303</id>
    <title>Moderate: usbguard security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 11:26:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>usbguard security update</summary>
    <description>The USBGuard software framework provides system protection against intrusive USB devices by implementing basic whitelisting and blacklisting capabilities based on device attributes. To enforce a user-defined policy, USBGuard uses the Linux kernel USB device authorization feature.

Security Fix(es):

* usbguard: Fix unauthorized access via D-Bus (CVE-2019-25058)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0303" id="RHSA-2023:0303" type="rhsa" title="RHSA-2023:0303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-25058" id="CVE-2019-25058" type="cve" title="CVE-2019-25058"/>
      <reference href="https://bugzilla.redhat.com/2058465" id="2058465" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0303.html" id="ALSA-2023:0303" type="self" title="ALSA-2023:0303"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="usbguard-tools" version="1.0.0" release="10.el9_1.2" epoch="0" arch="s390x" src="usbguard-1.0.0-10.el9_1.2.src.rpm">
          <filename>usbguard-tools-1.0.0-10.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">317aa2e90d0668141a7d919bf293c10b9c6f308b87d2de0723cbfb4554848d77</sum>
        </package>
        <package name="usbguard-dbus" version="1.0.0" release="10.el9_1.2" epoch="0" arch="s390x" src="usbguard-1.0.0-10.el9_1.2.src.rpm">
          <filename>usbguard-dbus-1.0.0-10.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">721918331ca35a1ebecd39aec43732f6769c5c8ade53f66ba002d58bef59cdc0</sum>
        </package>
        <package name="usbguard-selinux" version="1.0.0" release="10.el9_1.2" epoch="0" arch="noarch" src="usbguard-1.0.0-10.el9_1.2.src.rpm">
          <filename>usbguard-selinux-1.0.0-10.el9_1.2.noarch.rpm</filename>
          <sum type="sha256">a415e5e1be55a36e9aad68b80ba34dc387313a81751ebc47ddf45a3ddcee81be</sum>
        </package>
        <package name="usbguard-notifier" version="1.0.0" release="10.el9_1.2" epoch="0" arch="s390x" src="usbguard-1.0.0-10.el9_1.2.src.rpm">
          <filename>usbguard-notifier-1.0.0-10.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">cabe7240258b36c776a9af816dfd049ca371a3c7c9463f39794c23e44829187e</sum>
        </package>
        <package name="usbguard" version="1.0.0" release="10.el9_1.2" epoch="0" arch="s390x" src="usbguard-1.0.0-10.el9_1.2.src.rpm">
          <filename>usbguard-1.0.0-10.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">d44085f367322ea4cab470164a894ba878bdff5600f467d23eac7f85d06c79c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0304</id>
    <title>Moderate: libreoffice security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 20:33:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Macro URL arbitrary script execution (CVE-2022-3140)
* libreoffice: Execution of Untrusted Macros Due to Improper Certificate Validation (CVE-2022-26305)
* libreoffice: Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password (CVE-2022-26306)
* libreoffice: Weak Master Keys (CVE-2022-26307)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0304" id="RHSA-2023:0304" type="rhsa" title="RHSA-2023:0304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26305" id="CVE-2022-26305" type="cve" title="CVE-2022-26305"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26306" id="CVE-2022-26306" type="cve" title="CVE-2022-26306"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26307" id="CVE-2022-26307" type="cve" title="CVE-2022-26307"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3140" id="CVE-2022-3140" type="cve" title="CVE-2022-3140"/>
      <reference href="https://bugzilla.redhat.com/2118610" id="2118610" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118611" id="2118611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118613" id="2118613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134697" id="2134697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0304.html" id="ALSA-2023:0304" type="self" title="ALSA-2023:0304"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="autocorr-lb" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-lb-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">04b3acd7c4d2f57c2aca505634d631f0d1a30c08462771bc4a80ad00d1e3e79d</sum>
        </package>
        <package name="autocorr-cs" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-cs-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">08d82f12623b3185007f267c76f601f1cdfb5cbddfb4a37d87656e91cc111217</sum>
        </package>
        <package name="autocorr-pt" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-pt-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">0f798d1e4f0eba57af2599e2afbdba3afdf06cda2039de87d3bda2ced3962f45</sum>
        </package>
        <package name="autocorr-is" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-is-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">108c5aedee8b91ca8d1b8d06813a8901d28a408f7bea7d1c8313dba8aca17d64</sum>
        </package>
        <package name="autocorr-bg" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-bg-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">137f8a1ebcbbf4407188d44faaeb2c31fd1fcde1bf5e0d465c026b708a2a8575</sum>
        </package>
        <package name="libreoffice-help-en" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-help-en-7.1.8.1-8.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">15ef60bba3d98d867cd56035f97a8c1206447a4a95d66d569854f90265cca6f2</sum>
        </package>
        <package name="autocorr-sr" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-sr-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">17218493c99575c9a48b4134875176fbf60d189786bcc2ec5eb6d9f68efe6de7</sum>
        </package>
        <package name="autocorr-ro" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-ro-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">1b7ec41c4d013e55f28fb75b49e8719f2a58ea1f0ed8f42ac6dee4b0c971400e</sum>
        </package>
        <package name="autocorr-tr" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-tr-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">1f16cba0243a479ba3dab7c705bbb4abba500edfaf9d42f8217f46756b9cf325</sum>
        </package>
        <package name="autocorr-sk" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-sk-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">2081afc6cb2d470f7031224549090b272d1e0fe18bba3666b19d2291e6a71982</sum>
        </package>
        <package name="autocorr-sl" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-sl-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">2a61f65178e3d64964706b981d7209a13a4ac76a36a44b9cda01767b1c93ff33</sum>
        </package>
        <package name="libreoffice-ure" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-ure-7.1.8.1-8.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">2c5f8f227cbcf5ea47ebcda9c1ad6cec8495df6aaf8e2a1771fa9173e3aa447c</sum>
        </package>
        <package name="libreoffice-ure-common" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-ure-common-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">2e6109f0858d12f88a00913aa2ea08803e56afefdaceeb7b39b7e0043ff1f017</sum>
        </package>
        <package name="autocorr-vi" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-vi-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">3c3e668316ccc51c30f019c641e455f10c5072db5e1969120be2d9fc2c9e5cd4</sum>
        </package>
        <package name="autocorr-sv" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-sv-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">44ee24a4d70f78195b69aac9fb5d6ffbd4de6b042c4fd029b0eaada5d69aca2c</sum>
        </package>
        <package name="autocorr-ga" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-ga-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">4a55499692a6ccf81b77165c98b4c82a5497f6dd53bd6a10ea2428d8a5906b94</sum>
        </package>
        <package name="autocorr-pl" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-pl-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">5e456d42c6c2cc8caa900a62dd4138d8ae5c493afab41b1443a18a6475387efa</sum>
        </package>
        <package name="libreoffice-core" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-core-7.1.8.1-8.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">60525a3040b71bf0768a54f966de5878a8012b86abcc9576b3377011605f4dd8</sum>
        </package>
        <package name="autocorr-ca" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-ca-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">67adb4ab5787b6655cec917858534a8cdc8febcbbb835ca2eaf1be52123cb72f</sum>
        </package>
        <package name="libreoffice-impress" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-impress-7.1.8.1-8.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">6aee28f99a4136732d74834ae637bb845df3ce0eb8f14d68963789d5bb6a9dc8</sum>
        </package>
        <package name="autocorr-fa" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-fa-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">6c81b66919480cf8cd63edfdaf98ad1e23445242fc46e02edf04ca75c14c1341</sum>
        </package>
        <package name="autocorr-dsb" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-dsb-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">6cd9e17e2b3cf4fd8b5c0fcc2f15d1137ed73fc37d2110a65d00fd1c57fda981</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-graphicfilter-7.1.8.1-8.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">7738beb4878cf1b796ea31f2488467ef879794651c757c787ff4565c7246794e</sum>
        </package>
        <package name="autocorr-da" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-da-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">782d27068da493b5d20eab479d5cbbd5ab8e0fc30f89e0e75507596a4374b866</sum>
        </package>
        <package name="autocorr-ko" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-ko-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">7c0ff6f32cb72de0e48d1bdb4b3a16deffb51fd800fa90c396f335f956e8973c</sum>
        </package>
        <package name="autocorr-vro" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-vro-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">7d1dbb2b41a8107c4958db7fd4becd417a7944e19ebef27bfca98339c93ee7d4</sum>
        </package>
        <package name="autocorr-af" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-af-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">7e4b810345114ede7b9a309a9383c144c34f6e114acd0a9c1815a7db3371b618</sum>
        </package>
        <package name="autocorr-nl" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-nl-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">88f0bb230503627426b2b5d667587bed48b6342640bece019c1facce59a01e7c</sum>
        </package>
        <package name="autocorr-en" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-en-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">8dac52cf4a0195fae6d521c17b6a190b5a304d7aedae9ba199ee900d2f5d9bf4</sum>
        </package>
        <package name="autocorr-de" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-de-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">9042d8599396e7117a1b428c61fc527cb0c10d8a9cabde997c2ca28f3853c0f9</sum>
        </package>
        <package name="libreoffice-pdfimport" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-pdfimport-7.1.8.1-8.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">919658873fb0b292377bcdc7efdf897760aa60cc1e22a65d132968db6d60b25f</sum>
        </package>
        <package name="autocorr-hsb" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-hsb-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">935eafe3250756edfba87f3fc170d07bda7305b76f4ec3bbd258787d1b7c3eb9</sum>
        </package>
        <package name="libreoffice-pyuno" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-pyuno-7.1.8.1-8.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">9a3a06721aba7968d25098c7b1a37cfb123e94ef42ff0cadef4ecb36338cc689</sum>
        </package>
        <package name="libreoffice-calc" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-calc-7.1.8.1-8.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">9e9977be124497b39d923280586246d5726555ac2627edf025cb08da259eece5</sum>
        </package>
        <package name="autocorr-lt" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-lt-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">9f4130565d2ea3d19f92ba969ca9517fea40d15f2ce72d12699f88827c4e01c2</sum>
        </package>
        <package name="autocorr-fi" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-fi-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">a67b616ff1cb7bf60a559a202f891e6da2913dc825f66f01dd28d0f03f9307d2</sum>
        </package>
        <package name="autocorr-es" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-es-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">b07b4669d8b047db9118726afaa676050183519e6cc6a7b2b34dba25b31f0dcd</sum>
        </package>
        <package name="autocorr-fr" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-fr-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">b52344015aa39080f4e92ec6ce1f81f971bb11d9efa6aefef9d183a169ecf2bb</sum>
        </package>
        <package name="autocorr-ru" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-ru-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">b6f77412865d66a179b412a6c3084fccded14c8f8a8f7a988d8744b821ecd1c8</sum>
        </package>
        <package name="libreoffice-data" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-data-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">b787bec445391f6bc4b82b56953644b186e5582a3b309a531825453eaa9bca1b</sum>
        </package>
        <package name="libreoffice-writer" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-writer-7.1.8.1-8.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">c034bf314972275b80e70ba69167ee43a3ac69b8a3e5626f9f067d04cdafb8ca</sum>
        </package>
        <package name="autocorr-it" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-it-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">c8f56e7360b7e4af1265a2574592af8c2b3facaba813e996a7316fa0b1357af4</sum>
        </package>
        <package name="autocorr-mn" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-mn-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">cc8686ce73c4edc93dfe123528a7324f9b0b6f3f790d12571f5805141a63cc84</sum>
        </package>
        <package name="autocorr-hu" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-hu-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">cf72968a3c1498d0e1146a91620c2f2c956b1dcb92ade3589d814d73df7dd7ff</sum>
        </package>
        <package name="autocorr-zh" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-zh-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">e02d336ee3abb904c676597afe677c3ea019da36d74fc8eb0a5d22791b11f1de</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-opensymbol-fonts-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">e3829098af6e4585194f6dae23105fd20bb76ba66e8ef14b82a0c5645233d5b0</sum>
        </package>
        <package name="autocorr-hr" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-hr-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">e57b366791763ce019e2408d0be6941313098060ab683cf8da7eb0d428ee805f</sum>
        </package>
        <package name="libreoffice-langpack-en" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-langpack-en-7.1.8.1-8.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">e845d43868a94a267a19953bd1e002c9b63fcdba2d3132285c7f9eca883d496d</sum>
        </package>
        <package name="autocorr-ja" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-ja-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">f00f423978fb8681748fb7fcaa6c8b2c73445be5166ab5c4fe22d79da87f4b8e</sum>
        </package>
        <package name="autocorr-el" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>autocorr-el-7.1.8.1-8.el9_1.alma.noarch.rpm</filename>
          <sum type="sha256">f474b27d6bf4d0a7605f64f929bf49549120ea7f7d42630bd222b2acffd25fb1</sum>
        </package>
        <package name="libreoffice-ogltrans" version="7.1.8.1" release="8.el9_1.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-8.el9_1.alma.src.rpm">
          <filename>libreoffice-ogltrans-7.1.8.1-8.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">fabab790d4a501e759f64a0d2f71ae1adff9295a6b9c93bccc4420d43845fb9e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0318</id>
    <title>Moderate: postgresql-jdbc security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 11:45:40"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql-jdbc security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.

Security Fix(es):

* postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names (CVE-2022-31197)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0318" id="RHSA-2023:0318" type="rhsa" title="RHSA-2023:0318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31197" id="CVE-2022-31197" type="cve" title="CVE-2022-31197"/>
      <reference href="https://bugzilla.redhat.com/2129428" id="2129428" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0318.html" id="ALSA-2023:0318" type="self" title="ALSA-2023:0318"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="postgresql-jdbc" version="42.2.18" release="6.el9_1" epoch="0" arch="noarch" src="postgresql-jdbc-42.2.18-6.el9_1.src.rpm">
          <filename>postgresql-jdbc-42.2.18-6.el9_1.noarch.rpm</filename>
          <sum type="sha256">e1f3513307b00a0bb322d145d84d83a6a537d9878b59f078f89b7536ebc3745e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0321</id>
    <title>Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs and nodejs-nodemon security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (16.18.1), nodejs-nodemon (2.0.20).

Security Fix(es):

* minimist: prototype pollution (CVE-2021-44906)
* nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)
* nodejs: HTTP Request Smuggling due to incorrect parsing of header fields (CVE-2022-35256)
* nodejs: DNS rebinding in inspect via invalid octal IP address (CVE-2022-43548)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* nodejs: Packaged version of undici does not fit with declared version. [almalinux-9] (BZ#2151627)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0321" id="RHSA-2023:0321" type="rhsa" title="RHSA-2023:0321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44906" id="CVE-2021-44906" type="cve" title="CVE-2021-44906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3517" id="CVE-2022-3517" type="cve" title="CVE-2022-3517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35256" id="CVE-2022-35256" type="cve" title="CVE-2022-35256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43548" id="CVE-2022-43548" type="cve" title="CVE-2022-43548"/>
      <reference href="https://bugzilla.redhat.com/2066009" id="2066009" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130518" id="2130518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134609" id="2134609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140911" id="2140911" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0321.html" id="ALSA-2023:0321" type="self" title="ALSA-2023:0321"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="nodejs-docs" version="16.18.1" release="3.el9_1" epoch="1" arch="noarch" src="nodejs-16.18.1-3.el9_1.src.rpm">
          <filename>nodejs-docs-16.18.1-3.el9_1.noarch.rpm</filename>
          <sum type="sha256">124046435a99e559841aa8ddd18093569656cdcf6cd39c08f237736a508bfb4a</sum>
        </package>
        <package name="nodejs" version="16.18.1" release="3.el9_1" epoch="1" arch="s390x" src="nodejs-16.18.1-3.el9_1.src.rpm">
          <filename>nodejs-16.18.1-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">4266703577ec0edaf3269bef6e17539e61edf2e442a31b1ea66d7ab1a6441656</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="2.el9_1" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-2.el9_1.src.rpm">
          <filename>nodejs-nodemon-2.0.20-2.el9_1.noarch.rpm</filename>
          <sum type="sha256">609eaededba0f488032abeb94fa0bf2acb4a4b47d33f3361c396f72cdcc71abc</sum>
        </package>
        <package name="nodejs-libs" version="16.18.1" release="3.el9_1" epoch="1" arch="s390x" src="nodejs-16.18.1-3.el9_1.src.rpm">
          <filename>nodejs-libs-16.18.1-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">89b5f37aff12e7b9dc41de581822b035777bcf126ff562c54b2aca6aef181fd8</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.18.1" release="3.el9_1" epoch="1" arch="s390x" src="nodejs-16.18.1-3.el9_1.src.rpm">
          <filename>nodejs-full-i18n-16.18.1-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">cd5c852295853e6406bfc1cd3b9114acd41630e52f8f624cbe74e2caa1149609</sum>
        </package>
        <package name="npm" version="8.19.2" release="1.16.18.1.3.el9_1" epoch="1" arch="s390x" src="nodejs-16.18.1-3.el9_1.src.rpm">
          <filename>npm-8.19.2-1.16.18.1.3.el9_1.s390x.rpm</filename>
          <sum type="sha256">d9b44f00b21e12d17e4c57d6a4ea1d784c53c10fd8ee8e10f2fdceb357f5bf8c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0328</id>
    <title>Moderate: go-toolset and golang security and bug fix update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>go-toolset and golang security and bug fix update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

The golang packages provide the Go programming language compiler.

Security Fix(es):

* golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)
* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Internal linking fails on ppc64le (BZ#2144547)
* crypto testcases fail on golang on s390x [almalinux-9] (BZ#2149311)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0328" id="RHSA-2023:0328" type="rhsa" title="RHSA-2023:0328"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2879" id="CVE-2022-2879" type="cve" title="CVE-2022-2879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2880" id="CVE-2022-2880" type="cve" title="CVE-2022-2880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41715" id="CVE-2022-41715" type="cve" title="CVE-2022-41715"/>
      <reference href="https://bugzilla.redhat.com/2132867" id="2132867" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132868" id="2132868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132872" id="2132872" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0328.html" id="ALSA-2023:0328" type="self" title="ALSA-2023:0328"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="golang-tests" version="1.18.9" release="1.el9_1" epoch="0" arch="noarch" src="golang-1.18.9-1.el9_1.src.rpm">
          <filename>golang-tests-1.18.9-1.el9_1.noarch.rpm</filename>
          <sum type="sha256">36b4b46538c05b8c5b649b551364130d4d6c637b844a82e37ba54f2b20d533da</sum>
        </package>
        <package name="go-toolset" version="1.18.9" release="1.el9_1" epoch="0" arch="s390x" src="go-toolset-1.18.9-1.el9_1.src.rpm">
          <filename>go-toolset-1.18.9-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">67af6e1ccb6976f20ddcbed00be4db658384b09e7cf8f2bbaf2bd700acafea20</sum>
        </package>
        <package name="golang" version="1.18.9" release="1.el9_1" epoch="0" arch="s390x" src="golang-1.18.9-1.el9_1.src.rpm">
          <filename>golang-1.18.9-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">779f57e0a14fb90a86c2c22813d4c8971bc625c104238e5475dbe164e2cb06c2</sum>
        </package>
        <package name="golang-docs" version="1.18.9" release="1.el9_1" epoch="0" arch="noarch" src="golang-1.18.9-1.el9_1.src.rpm">
          <filename>golang-docs-1.18.9-1.el9_1.noarch.rpm</filename>
          <sum type="sha256">90e4104f56f278b9961ee177c36d70ff4f57aceff7d580ace8033bf56d2575d3</sum>
        </package>
        <package name="golang-bin" version="1.18.9" release="1.el9_1" epoch="0" arch="s390x" src="golang-1.18.9-1.el9_1.src.rpm">
          <filename>golang-bin-1.18.9-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">9d8697b60dee4441132f365cf7d7dcb44d38d45ed434d8250d60df1e8b83cb01</sum>
        </package>
        <package name="golang-misc" version="1.18.9" release="1.el9_1" epoch="0" arch="noarch" src="golang-1.18.9-1.el9_1.src.rpm">
          <filename>golang-misc-1.18.9-1.el9_1.noarch.rpm</filename>
          <sum type="sha256">b3591a2484054919826337e2b1dcc6bd766634c2117726cb9125c2445db4b217</sum>
        </package>
        <package name="golang-src" version="1.18.9" release="1.el9_1" epoch="0" arch="noarch" src="golang-1.18.9-1.el9_1.src.rpm">
          <filename>golang-src-1.18.9-1.el9_1.noarch.rpm</filename>
          <sum type="sha256">d67d295694d8a9a8e72089c151956c9000a6dbea9c3f0f81025cca90cc171652</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0333</id>
    <title>Moderate: curl security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 12:09:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: POST following PUT confusion (CVE-2022-32221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0333" id="RHSA-2023:0333" type="rhsa" title="RHSA-2023:0333"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32221" id="CVE-2022-32221" type="cve" title="CVE-2022-32221"/>
      <reference href="https://bugzilla.redhat.com/2135411" id="2135411" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0333.html" id="ALSA-2023:0333" type="self" title="ALSA-2023:0333"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="libcurl-devel" version="7.76.1" release="19.el9_1.1" epoch="0" arch="s390x" src="curl-7.76.1-19.el9_1.1.src.rpm">
          <filename>libcurl-devel-7.76.1-19.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">f55baf50a543b53bb5409e025e4a31c60e69e85d38fab9d705abeedebd4d3338</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0334</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 16:35:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959)
* kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)
* kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139)
* kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)
* kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077)
* kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Intel 9.2: Important iavf bug fixes (BZ#2127884)
* vfio zero page mappings fail after 2M instances (BZ#2128514)
* nvme-tcp automatic reconnect fails intermittently during EMC powerstore NDU operation (BZ#2131359)
* ice: Driver Update to 5.19 (BZ#2132070)
* WARNING: CPU: 116 PID: 3440 at arch/x86/mm/extable.c:105 ex_handler_fprestore+0x3f/0x50 (BZ#2134588)
* drm: duplicated call of drm_privacy_screen_register_notifier() in drm_connector_register() (BZ#2134619)
* updating the appid field through sysfs is returning an -EINVAL error (BZ#2136914)
* DELL EMC: System is not booting into RT Kernel with perc12. (BZ#2139213)
* No signal showed in the VGA monitor when installing AlmaLinux9 in the legacy bios mode (BZ#2140153)
* Practically limit "Dummy wait" workaround to old Intel systems (BZ#2142168)
* ppc64le: unexpected oom panic when there's enough memory left in zswap test (BZ#2143976)
* fatal error: error in backend: Branch target out of insn range (BZ#2144902)
* AMdCLIENT: The kernel command line parameter "nomodeset" not working properly (BZ#2145217)
* Azure: PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (BZ#2150910)
* Azure z-stream: Sometimes newly deployed VMs are not getting accelerated network during provisioning (BZ#2151605)
* DELL 9.0 RT - On PE R760 system, call traces are observed dmesg when system is running stress (BZ#2154407)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0334" id="RHSA-2023:0334" type="rhsa" title="RHSA-2023:0334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2959" id="CVE-2022-2959" type="cve" title="CVE-2022-2959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2964" id="CVE-2022-2964" type="cve" title="CVE-2022-2964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30594" id="CVE-2022-30594" type="cve" title="CVE-2022-30594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3077" id="CVE-2022-3077" type="cve" title="CVE-2022-3077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4139" id="CVE-2022-4139" type="cve" title="CVE-2022-4139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43945" id="CVE-2022-43945" type="cve" title="CVE-2022-43945"/>
      <reference href="https://bugzilla.redhat.com/2067482" id="2067482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2085300" id="2085300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103681" id="2103681" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123309" id="2123309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2141752" id="2141752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2147572" id="2147572" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0334.html" id="ALSA-2023:0334" type="self" title="ALSA-2023:0334"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="kernel-devel-matched" version="5.14.0" release="162.12.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.12.1.el9_1.src.rpm">
          <filename>kernel-devel-matched-5.14.0-162.12.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">1ff1923c62c1e162fa0778d0d947c18ff8f78d59e5bec85525c94f3cac08f8cd</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="162.12.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.12.1.el9_1.src.rpm">
          <filename>kernel-devel-5.14.0-162.12.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">2028daf69152752667dad63af8bb6ae3cf09b4d2e0a7485c6d5d7345337e0881</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="162.12.1.el9_1" epoch="0" arch="noarch" src="kernel-5.14.0-162.12.1.el9_1.src.rpm">
          <filename>kernel-doc-5.14.0-162.12.1.el9_1.noarch.rpm</filename>
          <sum type="sha256">3b99cc439dc2e719deb6fede6a076bacfb11ecfc0c5585bfd6bc2ae308d9bb86</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="162.12.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.12.1.el9_1.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-162.12.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">67db0cfafdd1c156fb8ebf566b0a66cd4edf026f1daaecc633ba534b0988d363</sum>
        </package>
        <package name="perf" version="5.14.0" release="162.12.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.12.1.el9_1.src.rpm">
          <filename>perf-5.14.0-162.12.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">a7619c183429d7b7206eb522be8d3c4c699d813e2ff75da2e908800b82d45e6b</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="162.12.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.12.1.el9_1.src.rpm">
          <filename>kernel-debug-devel-5.14.0-162.12.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">ae78bbeb037929b52af3ef7be5567f84d77c1cc5aeaf65bcad443a09294122d4</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="162.12.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.12.1.el9_1.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-162.12.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">b82fcbd82f3f89db7abbf099e20181f58d2b6440e48a67f9cd74dd42e06c0de7</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="162.12.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.12.1.el9_1.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-162.12.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">cf4a87b75ea8616f054710cbde5defaa66837fb106de148f67923fd813a30b34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0335</id>
    <title>Moderate: dbus security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 17:01:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dbus security update</summary>
    <description>D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility.

Security Fix(es):

* dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010)
* dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011)
* dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly (CVE-2022-42012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0335" id="RHSA-2023:0335" type="rhsa" title="RHSA-2023:0335"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42010" id="CVE-2022-42010" type="cve" title="CVE-2022-42010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42011" id="CVE-2022-42011" type="cve" title="CVE-2022-42011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42012" id="CVE-2022-42012" type="cve" title="CVE-2022-42012"/>
      <reference href="https://bugzilla.redhat.com/2133616" id="2133616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133617" id="2133617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133618" id="2133618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0335.html" id="ALSA-2023:0335" type="self" title="ALSA-2023:0335"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="dbus-x11" version="1.12.20" release="7.el9_1" epoch="1" arch="s390x" src="dbus-1.12.20-7.el9_1.src.rpm">
          <filename>dbus-x11-1.12.20-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">7aef005697192435e2bb5d924f5d25633ed41c9be1104557828dca025ffc3a6e</sum>
        </package>
        <package name="dbus-devel" version="1.12.20" release="7.el9_1" epoch="1" arch="s390x" src="dbus-1.12.20-7.el9_1.src.rpm">
          <filename>dbus-devel-1.12.20-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">7dd2507adbf7fbd7a3a9fd6fddf3dceb712c08123a6eb779da963ed6ec3c54d4</sum>
        </package>
        <package name="dbus-daemon" version="1.12.20" release="7.el9_1" epoch="1" arch="s390x" src="dbus-1.12.20-7.el9_1.src.rpm">
          <filename>dbus-daemon-1.12.20-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">d64655c85529f988adeaca33daef71d797397e07ca20d9394e13ecafb10fe101</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0336</id>
    <title>Moderate: systemd security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 16:16:11"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>systemd security update</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

* systemd: buffer overrun in format_timespan() function (CVE-2022-3821)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0336" id="RHSA-2023:0336" type="rhsa" title="RHSA-2023:0336"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3821" id="CVE-2022-3821" type="cve" title="CVE-2022-3821"/>
      <reference href="https://bugzilla.redhat.com/2139327" id="2139327" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0336.html" id="ALSA-2023:0336" type="self" title="ALSA-2023:0336"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="systemd-journal-remote" version="250" release="12.el9_1.1" epoch="0" arch="s390x" src="systemd-250-12.el9_1.1.src.rpm">
          <filename>systemd-journal-remote-250-12.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">5d54503f29abad8064af7a50bb7734e3d03baacd6e3edd2e9fbb9f1011213564</sum>
        </package>
        <package name="systemd-devel" version="250" release="12.el9_1.1" epoch="0" arch="s390x" src="systemd-250-12.el9_1.1.src.rpm">
          <filename>systemd-devel-250-12.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">dcf37dd3e237a9f9b07d3826b3a30741638495b766ae4b595a47b2cf19b33a35</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0337</id>
    <title>Moderate: expat security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 10:55:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.

Security Fix(es):

* expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate (CVE-2022-43680)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0337" id="RHSA-2023:0337" type="rhsa" title="RHSA-2023:0337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43680" id="CVE-2022-43680" type="cve" title="CVE-2022-43680"/>
      <reference href="https://bugzilla.redhat.com/2140059" id="2140059" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0337.html" id="ALSA-2023:0337" type="self" title="ALSA-2023:0337"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="expat-devel" version="2.4.9" release="1.el9_1.1" epoch="0" arch="s390x" src="expat-2.4.9-1.el9_1.1.src.rpm">
          <filename>expat-devel-2.4.9-1.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">daa158e01dc824d00bc73d485a90c89d282d3d5ec457f0dc63ac0ea0e027f811</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0338</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 14:32:37"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: integer overflows with XML_PARSE_HUGE (CVE-2022-40303)
* libxml2: dict corruption caused by entity reference cycles (CVE-2022-40304)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0338" id="RHSA-2023:0338" type="rhsa" title="RHSA-2023:0338"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40303" id="CVE-2022-40303" type="cve" title="CVE-2022-40303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40304" id="CVE-2022-40304" type="cve" title="CVE-2022-40304"/>
      <reference href="https://bugzilla.redhat.com/2136266" id="2136266" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136288" id="2136288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0338.html" id="ALSA-2023:0338" type="self" title="ALSA-2023:0338"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="libxml2-devel" version="2.9.13" release="3.el9_1" epoch="0" arch="s390x" src="libxml2-2.9.13-3.el9_1.src.rpm">
          <filename>libxml2-devel-2.9.13-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">c2f3d5c6ea2f2723067ad9f3a276d577d9ef764e355e678e85b039bbde30a823</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0339</id>
    <title>Moderate: sqlite security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 10:00:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.

Security Fix(es):

* sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API (CVE-2022-35737)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0339" id="RHSA-2023:0339" type="rhsa" title="RHSA-2023:0339"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35737" id="CVE-2022-35737" type="cve" title="CVE-2022-35737"/>
      <reference href="https://bugzilla.redhat.com/2110291" id="2110291" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0339.html" id="ALSA-2023:0339" type="self" title="ALSA-2023:0339"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="sqlite-devel" version="3.34.1" release="6.el9_1" epoch="0" arch="s390x" src="sqlite-3.34.1-6.el9_1.src.rpm">
          <filename>sqlite-devel-3.34.1-6.el9_1.s390x.rpm</filename>
          <sum type="sha256">ba77d5d49439ca30e977c0fa53ab553e567aa79ea4d5dfa8b186976750d33f86</sum>
        </package>
        <package name="sqlite" version="3.34.1" release="6.el9_1" epoch="0" arch="s390x" src="sqlite-3.34.1-6.el9_1.src.rpm">
          <filename>sqlite-3.34.1-6.el9_1.s390x.rpm</filename>
          <sum type="sha256">e9275e6710b0173d25ebec08a5be547650856d5a287376f7e73e4d1c2e966d6c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0343</id>
    <title>Moderate: libtasn1 security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 10:40:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtasn1 security update</summary>
    <description>A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

* libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0343" id="RHSA-2023:0343" type="rhsa" title="RHSA-2023:0343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46848" id="CVE-2021-46848" type="cve" title="CVE-2021-46848"/>
      <reference href="https://bugzilla.redhat.com/2140058" id="2140058" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0343.html" id="ALSA-2023:0343" type="self" title="ALSA-2023:0343"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="libtasn1-devel" version="4.16.0" release="8.el9_1" epoch="0" arch="s390x" src="libtasn1-4.16.0-8.el9_1.src.rpm">
          <filename>libtasn1-devel-4.16.0-8.el9_1.s390x.rpm</filename>
          <sum type="sha256">2712fdf45135160d0e45c5975f2cc11d6d8a63809b28213648ef0b8dedd4f082</sum>
        </package>
        <package name="libtasn1-tools" version="4.16.0" release="8.el9_1" epoch="0" arch="s390x" src="libtasn1-4.16.0-8.el9_1.src.rpm">
          <filename>libtasn1-tools-4.16.0-8.el9_1.s390x.rpm</filename>
          <sum type="sha256">f7e17fbdbc8178a6f7f1897859a189cb55bda1e9419f50e6bf2a4dcc8e76b759</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0383</id>
    <title>Important: libXpm security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 14:54:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libXpm security update</summary>
    <description>X.Org X11 libXpm runtime library.

Security Fix(es):

* libXpm: compression commands depend on $PATH (CVE-2022-4883)
* libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)
* libXpm: Infinite loop on unclosed comments (CVE-2022-46285)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0383" id="RHSA-2023:0383" type="rhsa" title="RHSA-2023:0383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-44617" id="CVE-2022-44617" type="cve" title="CVE-2022-44617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46285" id="CVE-2022-46285" type="cve" title="CVE-2022-46285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4883" id="CVE-2022-4883" type="cve" title="CVE-2022-4883"/>
      <reference href="https://bugzilla.redhat.com/2160092" id="2160092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160193" id="2160193" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160213" id="2160213" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0383.html" id="ALSA-2023:0383" type="self" title="ALSA-2023:0383"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="libXpm-devel" version="3.5.13" release="8.el9_1" epoch="0" arch="s390x" src="libXpm-3.5.13-8.el9_1.src.rpm">
          <filename>libXpm-devel-3.5.13-8.el9_1.s390x.rpm</filename>
          <sum type="sha256">0cca6f2f73e7ec44b03f451dd95fab137fad7a494aaecb57b19a423fcb28f797</sum>
        </package>
        <package name="libXpm" version="3.5.13" release="8.el9_1" epoch="0" arch="s390x" src="libXpm-3.5.13-8.el9_1.src.rpm">
          <filename>libXpm-3.5.13-8.el9_1.s390x.rpm</filename>
          <sum type="sha256">16796c5d0b7d3e6586db4730349bd9c3f34ba872cfeebe0450628a1f08517a51</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0476</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-01-26 00:00:00"/>
    <updated date="2023-01-31 16:03:16"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.7.1.

Security Fix(es):

* Mozilla: libusrsctp library out of date (CVE-2022-46871)
* Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598)
* Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605)
* Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599)
* Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601)
* Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers (CVE-2023-23602)
* Mozilla: Fullscreen notification bypass (CVE-2022-46877)
* Mozilla: Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content Security Policy via format directive (CVE-2023-23603)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0476" id="RHSA-2023:0476" type="rhsa" title="RHSA-2023:0476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46871" id="CVE-2022-46871" type="cve" title="CVE-2022-46871"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46877" id="CVE-2022-46877" type="cve" title="CVE-2022-46877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23598" id="CVE-2023-23598" type="cve" title="CVE-2023-23598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23599" id="CVE-2023-23599" type="cve" title="CVE-2023-23599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23601" id="CVE-2023-23601" type="cve" title="CVE-2023-23601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23602" id="CVE-2023-23602" type="cve" title="CVE-2023-23602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23603" id="CVE-2023-23603" type="cve" title="CVE-2023-23603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23605" id="CVE-2023-23605" type="cve" title="CVE-2023-23605"/>
      <reference href="https://bugzilla.redhat.com/2162336" id="2162336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162338" id="2162338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162339" id="2162339" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162340" id="2162340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162341" id="2162341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162342" id="2162342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162343" id="2162343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162344" id="2162344" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0476.html" id="ALSA-2023:0476" type="self" title="ALSA-2023:0476"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="thunderbird" version="102.7.1" release="1.el9_1.alma" epoch="0" arch="s390x" src="thunderbird-102.7.1-1.el9_1.alma.src.rpm">
          <filename>thunderbird-102.7.1-1.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">9d0aa4b10532bf388300dd5518fb01b4d9003d9d5b48e97ce1449be4a29a5d83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0608</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-02-06 00:00:00"/>
    <updated date="2023-02-07 17:39:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.7.1.

Security Fix(es):

* Mozilla: Revocation status of S/Mime signature certificates was not checked (CVE-2023-0430)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0608" id="RHSA-2023:0608" type="rhsa" title="RHSA-2023:0608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0430" id="CVE-2023-0430" type="cve" title="CVE-2023-0430"/>
      <reference href="https://bugzilla.redhat.com/2166591" id="2166591" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0608.html" id="ALSA-2023:0608" type="self" title="ALSA-2023:0608"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="thunderbird" version="102.7.1" release="2.el9_1.alma" epoch="0" arch="s390x" src="thunderbird-102.7.1-2.el9_1.alma.src.rpm">
          <filename>thunderbird-102.7.1-2.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">6d2a7656032584c683a96370e522ee41439a2bb1dda6abf65623bbfc48b9489b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0611</id>
    <title>Important: git security update</title>
    <issued date="2023-02-06 00:00:00"/>
    <updated date="2023-02-07 21:03:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git security update</summary>
    <description>Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.

Security Fix(es):

* git: gitattributes parsing integer overflow (CVE-2022-23521)
* git: Heap overflow in `git archive`, `git log --format` leading to RCE (CVE-2022-41903)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0611" id="RHSA-2023:0611" type="rhsa" title="RHSA-2023:0611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23521" id="CVE-2022-23521" type="cve" title="CVE-2022-23521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41903" id="CVE-2022-41903" type="cve" title="CVE-2022-41903"/>
      <reference href="https://bugzilla.redhat.com/2162055" id="2162055" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162056" id="2162056" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0611.html" id="ALSA-2023:0611" type="self" title="ALSA-2023:0611"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="gitweb" version="2.31.1" release="3.el9_1" epoch="0" arch="noarch" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>gitweb-2.31.1-3.el9_1.noarch.rpm</filename>
          <sum type="sha256">0144c7a0031331fc2005e2dcba435f383ede2326425ca610305d67af21c3fdae</sum>
        </package>
        <package name="perl-Git" version="2.31.1" release="3.el9_1" epoch="0" arch="noarch" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>perl-Git-2.31.1-3.el9_1.noarch.rpm</filename>
          <sum type="sha256">02f67f177a8b7b68253f1a14b5ff83e1aeda91810ce2854e6fe9296bb90d4f2a</sum>
        </package>
        <package name="git-email" version="2.31.1" release="3.el9_1" epoch="0" arch="noarch" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>git-email-2.31.1-3.el9_1.noarch.rpm</filename>
          <sum type="sha256">15342999f25d473595061ccbaac115c900412edd5d487f2942ea848eafe7453e</sum>
        </package>
        <package name="git-core" version="2.31.1" release="3.el9_1" epoch="0" arch="s390x" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>git-core-2.31.1-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">1b5767e73c33b9c7db4c26c6601ff129b959a7aa13e51a6b08571a6afa83c542</sum>
        </package>
        <package name="git-all" version="2.31.1" release="3.el9_1" epoch="0" arch="noarch" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>git-all-2.31.1-3.el9_1.noarch.rpm</filename>
          <sum type="sha256">1d8420694c41b43364dda7c452660014fd9c569e41c36336b6771c41dd586477</sum>
        </package>
        <package name="git" version="2.31.1" release="3.el9_1" epoch="0" arch="s390x" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>git-2.31.1-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">24236337fd49b0a17631600a97150d1e25811644732db11efcb63a287aa0b0ef</sum>
        </package>
        <package name="git-subtree" version="2.31.1" release="3.el9_1" epoch="0" arch="s390x" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>git-subtree-2.31.1-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">2831514a132cf1eadef90efa8d2410404e7c5899f9628a1c4e7c4cbdeec4dede</sum>
        </package>
        <package name="git-core-doc" version="2.31.1" release="3.el9_1" epoch="0" arch="noarch" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>git-core-doc-2.31.1-3.el9_1.noarch.rpm</filename>
          <sum type="sha256">596a127aedfcb5246b203f64577f643ae5bfdf71a6ca0cf17e08aef5ba567dcb</sum>
        </package>
        <package name="git-gui" version="2.31.1" release="3.el9_1" epoch="0" arch="noarch" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>git-gui-2.31.1-3.el9_1.noarch.rpm</filename>
          <sum type="sha256">7df98a9ba52a92c739e22cf618703d0d02d9ed5fbf5bf71eef68ba7e6a8ac213</sum>
        </package>
        <package name="gitk" version="2.31.1" release="3.el9_1" epoch="0" arch="noarch" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>gitk-2.31.1-3.el9_1.noarch.rpm</filename>
          <sum type="sha256">9766f7949e4c866a285c863ad738c39ae4c27c1564a37e99d40faf2de042de90</sum>
        </package>
        <package name="git-instaweb" version="2.31.1" release="3.el9_1" epoch="0" arch="noarch" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>git-instaweb-2.31.1-3.el9_1.noarch.rpm</filename>
          <sum type="sha256">98e5682d625dcd29a2c589ea6c3baf17f04fc64946acaa6ce5f9acb6b38a5250</sum>
        </package>
        <package name="git-daemon" version="2.31.1" release="3.el9_1" epoch="0" arch="s390x" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>git-daemon-2.31.1-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">c968e456e6ed95a0433195ea57154f2502db72fc7156617e59fe0d885b06633a</sum>
        </package>
        <package name="git-credential-libsecret" version="2.31.1" release="3.el9_1" epoch="0" arch="s390x" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>git-credential-libsecret-2.31.1-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">d98cf1ecd294c805b2aaa0687521e3d52c41d52709e1defecacb4d30ac15d972</sum>
        </package>
        <package name="perl-Git-SVN" version="2.31.1" release="3.el9_1" epoch="0" arch="noarch" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>perl-Git-SVN-2.31.1-3.el9_1.noarch.rpm</filename>
          <sum type="sha256">dcc7789f454ba62248fa75a95eb332badc751de25c031b89226d7092d7304870</sum>
        </package>
        <package name="git-svn" version="2.31.1" release="3.el9_1" epoch="0" arch="noarch" src="git-2.31.1-3.el9_1.src.rpm">
          <filename>git-svn-2.31.1-3.el9_1.noarch.rpm</filename>
          <sum type="sha256">f1d0778ffb02312fb2ed05cce0146953c6027d67f3627a8a5bda53dfbb7f23e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0622</id>
    <title>Important: tigervnc security update</title>
    <issued date="2023-02-07 00:00:00"/>
    <updated date="2023-02-09 15:47:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0622" id="RHSA-2023:0622" type="rhsa" title="RHSA-2023:0622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0494" id="CVE-2023-0494" type="cve" title="CVE-2023-0494"/>
      <reference href="https://bugzilla.redhat.com/2165995" id="2165995" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0622.html" id="ALSA-2023:0622" type="self" title="ALSA-2023:0622"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="tigervnc-icons" version="1.12.0" release="5.el9_1.1" epoch="0" arch="noarch" src="tigervnc-1.12.0-5.el9_1.1.src.rpm">
          <filename>tigervnc-icons-1.12.0-5.el9_1.1.noarch.rpm</filename>
          <sum type="sha256">0933d7e5d07776398f71248b5bf23351f5f549d69014a9fecf739d2cddd977b0</sum>
        </package>
        <package name="tigervnc" version="1.12.0" release="5.el9_1.1" epoch="0" arch="s390x" src="tigervnc-1.12.0-5.el9_1.1.src.rpm">
          <filename>tigervnc-1.12.0-5.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">38d2e8fc18d7dde8ad6b8457a33cb339eff9241c13e076c45b70104228eadd0a</sum>
        </package>
        <package name="tigervnc-server-module" version="1.12.0" release="5.el9_1.1" epoch="0" arch="s390x" src="tigervnc-1.12.0-5.el9_1.1.src.rpm">
          <filename>tigervnc-server-module-1.12.0-5.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">574ba02066ba08646bff11e2541dea5155f8239149291deebe0870ce0387c426</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.12.0" release="5.el9_1.1" epoch="0" arch="s390x" src="tigervnc-1.12.0-5.el9_1.1.src.rpm">
          <filename>tigervnc-server-minimal-1.12.0-5.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">65fe12a4be1fd5706f8955710bc5813b8ca54bcbd0426a6d8ec825389f29b32a</sum>
        </package>
        <package name="tigervnc-selinux" version="1.12.0" release="5.el9_1.1" epoch="0" arch="noarch" src="tigervnc-1.12.0-5.el9_1.1.src.rpm">
          <filename>tigervnc-selinux-1.12.0-5.el9_1.1.noarch.rpm</filename>
          <sum type="sha256">728a52e2fc345721666a6ac2c8c7c5f6826077f7cfd550b017f78c16389b07f3</sum>
        </package>
        <package name="tigervnc-license" version="1.12.0" release="5.el9_1.1" epoch="0" arch="noarch" src="tigervnc-1.12.0-5.el9_1.1.src.rpm">
          <filename>tigervnc-license-1.12.0-5.el9_1.1.noarch.rpm</filename>
          <sum type="sha256">9ff23dea5996323a873dd14efd719829917875164325fd50d396325dc29ed839</sum>
        </package>
        <package name="tigervnc-server" version="1.12.0" release="5.el9_1.1" epoch="0" arch="s390x" src="tigervnc-1.12.0-5.el9_1.1.src.rpm">
          <filename>tigervnc-server-1.12.0-5.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">ae0f9bf715099a596e4c2c3783010cdbdde2dee2aeb50336efb54218f286a404</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0810</id>
    <title>Important: firefox security update</title>
    <issued date="2023-02-20 00:00:00"/>
    <updated date="2023-02-21 17:40:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.8.0 ESR.

Security Fix(es):

* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767)
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0810" id="RHSA-2023:0810" type="rhsa" title="RHSA-2023:0810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0767" id="CVE-2023-0767" type="cve" title="CVE-2023-0767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25728" id="CVE-2023-25728" type="cve" title="CVE-2023-25728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25729" id="CVE-2023-25729" type="cve" title="CVE-2023-25729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25730" id="CVE-2023-25730" type="cve" title="CVE-2023-25730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25732" id="CVE-2023-25732" type="cve" title="CVE-2023-25732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25735" id="CVE-2023-25735" type="cve" title="CVE-2023-25735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25737" id="CVE-2023-25737" type="cve" title="CVE-2023-25737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25739" id="CVE-2023-25739" type="cve" title="CVE-2023-25739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25742" id="CVE-2023-25742" type="cve" title="CVE-2023-25742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25743" id="CVE-2023-25743" type="cve" title="CVE-2023-25743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25744" id="CVE-2023-25744" type="cve" title="CVE-2023-25744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25746" id="CVE-2023-25746" type="cve" title="CVE-2023-25746"/>
      <reference href="https://bugzilla.redhat.com/2170374" id="2170374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170375" id="2170375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170376" id="2170376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170377" id="2170377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170378" id="2170378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170379" id="2170379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170381" id="2170381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170382" id="2170382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170383" id="2170383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170390" id="2170390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170391" id="2170391" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170402" id="2170402" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0810.html" id="ALSA-2023:0810" type="self" title="ALSA-2023:0810"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="firefox" version="102.8.0" release="2.el9_1.alma" epoch="0" arch="s390x" src="firefox-102.8.0-2.el9_1.alma.src.rpm">
          <filename>firefox-102.8.0-2.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">0f650f6200d87c19090dff70d100be510c58dc8de3a4cc509cf353ab77ce0777</sum>
        </package>
        <package name="firefox-x11" version="102.8.0" release="2.el9_1.alma" epoch="0" arch="s390x" src="firefox-102.8.0-2.el9_1.alma.src.rpm">
          <filename>firefox-x11-102.8.0-2.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">1061182b0b8d2bf182c9818f66778907af0355f3e8fad28c0b4986f1b394066a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0824</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-02-20 00:00:00"/>
    <updated date="2023-02-21 17:50:38"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.8.0.

Security Fix(es):

* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767)
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0824" id="RHSA-2023:0824" type="rhsa" title="RHSA-2023:0824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0616" id="CVE-2023-0616" type="cve" title="CVE-2023-0616"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0767" id="CVE-2023-0767" type="cve" title="CVE-2023-0767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25728" id="CVE-2023-25728" type="cve" title="CVE-2023-25728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25729" id="CVE-2023-25729" type="cve" title="CVE-2023-25729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25730" id="CVE-2023-25730" type="cve" title="CVE-2023-25730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25732" id="CVE-2023-25732" type="cve" title="CVE-2023-25732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25735" id="CVE-2023-25735" type="cve" title="CVE-2023-25735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25737" id="CVE-2023-25737" type="cve" title="CVE-2023-25737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25739" id="CVE-2023-25739" type="cve" title="CVE-2023-25739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25742" id="CVE-2023-25742" type="cve" title="CVE-2023-25742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25743" id="CVE-2023-25743" type="cve" title="CVE-2023-25743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25744" id="CVE-2023-25744" type="cve" title="CVE-2023-25744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25746" id="CVE-2023-25746" type="cve" title="CVE-2023-25746"/>
      <reference href="https://bugzilla.redhat.com/2170374" id="2170374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170375" id="2170375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170376" id="2170376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170377" id="2170377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170378" id="2170378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170379" id="2170379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170381" id="2170381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170382" id="2170382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170383" id="2170383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170390" id="2170390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170391" id="2170391" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170402" id="2170402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2171397" id="2171397" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0824.html" id="ALSA-2023:0824" type="self" title="ALSA-2023:0824"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="thunderbird" version="102.8.0" release="2.el9_1.alma" epoch="0" arch="s390x" src="thunderbird-102.8.0-2.el9_1.alma.src.rpm">
          <filename>thunderbird-102.8.0-2.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">3e49afef8c2487222e2103fffd36d18f76bd78be2ebd12015150d1f6c8ddb16f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0903</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-02-22 00:00:00"/>
    <updated date="2023-02-23 06:07:38"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: processing maliciously crafted web content may be exploited for arbitrary code execution (CVE-2023-23529)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0903" id="RHSA-2023:0903" type="rhsa" title="RHSA-2023:0903"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23529" id="CVE-2023-23529" type="cve" title="CVE-2023-23529"/>
      <reference href="https://bugzilla.redhat.com/2169934" id="2169934" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0903.html" id="ALSA-2023:0903" type="self" title="ALSA-2023:0903"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="webkit2gtk3-jsc" version="2.36.7" release="1.el9_1.2" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_1.2.src.rpm">
          <filename>webkit2gtk3-jsc-2.36.7-1.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">118ca98b7f7fa4d00490e538907e9a74e99797d34269847059a2db772ab31879</sum>
        </package>
        <package name="webkit2gtk3" version="2.36.7" release="1.el9_1.2" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_1.2.src.rpm">
          <filename>webkit2gtk3-2.36.7-1.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">67049b3f00c75e00a6dd1ac371e3c86c282628030d5ebbbb94f26f70283b69af</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.36.7" release="1.el9_1.2" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_1.2.src.rpm">
          <filename>webkit2gtk3-devel-2.36.7-1.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">9080c3f79796e654260c5e708a9a8ba15a20610d228eb189ba16aea4ffba4df7</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.36.7" release="1.el9_1.2" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_1.2.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.36.7-1.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">f18bb03144f41e8b4147c458a931ca4d1f3c5f918d3725e2adba39e90a79f21d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0946</id>
    <title>Moderate: openssl security and bug fix update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 17:18:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security and bug fix update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: read buffer overflow in X.509 certificate verification (CVE-2022-4203)
* openssl: timing attack in RSA Decryption implementation (CVE-2022-4304)
* openssl: double free after calling PEM_read_bio_ex (CVE-2022-4450)
* openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215)
* openssl: invalid pointer dereference in d2i_PKCS7 functions (CVE-2023-0216)
* openssl: NULL dereference validating DSA public key (CVE-2023-0217)
* openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)
* openssl: NULL dereference during PKCS7 data verification (CVE-2023-0401)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* HMAC generation should reject key lengths &lt; 112 bits or provide an indicator in FIPS mode (BZ#2144000)
* In FIPS mode, openssl should set a minimum length for passwords in PBKDF2 (BZ#2144003)
* stunnel consumes high amount of memory when pestered with TCP connections without a TLS handshake (BZ#2144008)
* In FIPS mode, openssl should reject SHAKE as digest for RSA-OAEP or provide an indicator (BZ#2144010)
* In FIPS mode, openssl should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator (BZ#2144012)
* In FIPS mode, openssl should reject RSA signatures with X9.31 padding, or provide an indicator (BZ#2144015)
* In FIPS mode, openssl should reject SHA-224, SHA-384, SHA-512-224, and SHA-512-256 as hashes for hash-based DRBGs, or provide an indicator after 2023-05-16 (BZ#2144017)
* In FIPS mode, openssl should reject KDF input and output key lengths &lt; 112 bits or provide an indicator (BZ#2144019)
* In FIPS mode, openssl should reject RSA keys &lt; 2048 bits when using EVP_PKEY_decapsulate, or provide an indicator (BZ#2145170)
* AlmaLinux9.1 Nightly[0912] - error:03000093:digital envelope routines::command not supported when git clone is run with configured ibmca engine backed by libica.so.4 (OpenSSL 3.0) (BZ#2149010)
* OpenSSL FIPS checksum code needs update (BZ#2158412)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0946" id="RHSA-2023:0946" type="rhsa" title="RHSA-2023:0946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4203" id="CVE-2022-4203" type="cve" title="CVE-2022-4203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4304" id="CVE-2022-4304" type="cve" title="CVE-2022-4304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4450" id="CVE-2022-4450" type="cve" title="CVE-2022-4450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0215" id="CVE-2023-0215" type="cve" title="CVE-2023-0215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0216" id="CVE-2023-0216" type="cve" title="CVE-2023-0216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0217" id="CVE-2023-0217" type="cve" title="CVE-2023-0217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0286" id="CVE-2023-0286" type="cve" title="CVE-2023-0286"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0401" id="CVE-2023-0401" type="cve" title="CVE-2023-0401"/>
      <reference href="https://bugzilla.redhat.com/2164440" id="2164440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164487" id="2164487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164488" id="2164488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164492" id="2164492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164494" id="2164494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164497" id="2164497" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164499" id="2164499" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164500" id="2164500" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0946.html" id="ALSA-2023:0946" type="self" title="ALSA-2023:0946"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="openssl-devel" version="3.0.1" release="47.el9_1" epoch="1" arch="s390x" src="openssl-3.0.1-47.el9_1.src.rpm">
          <filename>openssl-devel-3.0.1-47.el9_1.s390x.rpm</filename>
          <sum type="sha256">9de5a112b55e6433299fc7baf005ad0ff243cc1922e1874a0b9f5e3ed7259411</sum>
        </package>
        <package name="openssl-perl" version="3.0.1" release="47.el9_1" epoch="1" arch="s390x" src="openssl-3.0.1-47.el9_1.src.rpm">
          <filename>openssl-perl-3.0.1-47.el9_1.s390x.rpm</filename>
          <sum type="sha256">dfa573e8755ce24c3ad6b68fafb81be1ae2af9ffb31d0352d47455a236afab00</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0951</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)
* kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)
* kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service attack (CVE-2022-4379)
* kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan (CVE-2023-0179)
* kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux 9.0: LTP Test failure and crash at fork14 on Sapphire Rapids Platinum 8280+ (BZ#2133083)
* AlmaLinux 9.1 Extending NMI watchdog's timer during LPM (BZ#2140085)
* AMDSERVER 9.1: amdpstate driver incorrectly designed to load as default for Genoa (BZ#2151274)
* qla2xxx NVMe-FC:  WARNING: CPU: 0 PID: 124072 at drivers/scsi/qla2xxx/qla_init.c:70 qla2xxx_rel_done_warning+0x25/0x30 [qla2xxx] (BZ#2152178)
* Regression: Kernel panic on Lenovo T480 with AH40 USB-C docking station (BZ#2153277)
* Scheduler Update (almalinux9.2) (BZ#2153792)
* AlmaLinux9.1, Nx_Gzip: nr_total_credits is not decremented when processing units are reduced by dlpar in shared mode. (FW1030 / DLPAR) (BZ#2154305)
* MSFT, MANA, NET Patch AlmaLinux-9: Fix race on per-CQ variable napi_iperf panic fix (BZ#2155145)
* Azure vPCI AlmaLinux-9 add the support of multi-MSI (BZ#2155459)
* Azure AlmaLinux-9: VM Deployment Failures Patch Request (BZ#2155930)
* The 'date' command shows wrong time in nested KVM s390x guest (BZ#2158815)
* AlmaLinux-9.2: Update NVMe driver to sync with upstream v6.0 (BZ#2161344)
* CEE cephfs: AlmaLinux9 cephfs client crashing with RIP: 0010:netfs_rreq_unlock+0xef/0x380 [netfs] (BZ#2161418)
* block layer: update with upstream v6.0 (BZ#2162535)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0951" id="RHSA-2023:0951" type="rhsa" title="RHSA-2023:0951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2873" id="CVE-2022-2873" type="cve" title="CVE-2022-2873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3564" id="CVE-2022-3564" type="cve" title="CVE-2022-3564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4378" id="CVE-2022-4378" type="cve" title="CVE-2022-4378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4379" id="CVE-2022-4379" type="cve" title="CVE-2022-4379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0179" id="CVE-2023-0179" type="cve" title="CVE-2023-0179"/>
      <reference href="https://bugzilla.redhat.com/2119048" id="2119048" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150999" id="2150999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152548" id="2152548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152807" id="2152807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161713" id="2161713" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0951.html" id="ALSA-2023:0951" type="self" title="ALSA-2023:0951"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="kernel-doc" version="5.14.0" release="162.18.1.el9_1" epoch="0" arch="noarch" src="kernel-5.14.0-162.18.1.el9_1.src.rpm">
          <filename>kernel-doc-5.14.0-162.18.1.el9_1.noarch.rpm</filename>
          <sum type="sha256">132054043f8a786ac13369528713e8bc90a32b11706eae46f55cd94066c7cf67</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="162.18.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.18.1.el9_1.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-162.18.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">31675c98fe9525d8b95952d4407421f182fd41361efed8563fdd710f351d691b</sum>
        </package>
        <package name="perf" version="5.14.0" release="162.18.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.18.1.el9_1.src.rpm">
          <filename>perf-5.14.0-162.18.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">94da75e181e7936475ca88dd2a631e570c52263141a78ae605673b3f4dae772e</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="162.18.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.18.1.el9_1.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-162.18.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">9f8f066c68985dd1f70628e3965d78ab58f0b38508e4379e0289f52f7651a21a</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="162.18.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.18.1.el9_1.src.rpm">
          <filename>kernel-devel-matched-5.14.0-162.18.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">9fadcce255aa3f4e5c9ac8a049397617535d7d1ea434be807f8dff4b13e7336d</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="162.18.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.18.1.el9_1.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-162.18.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">a7b9ceb9b8347bf81a8a5dd1aac795a6b3bb60a019d256f511844fcae77d74f9</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="162.18.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.18.1.el9_1.src.rpm">
          <filename>kernel-devel-5.14.0-162.18.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">c601d488fb9519ae71e4e709d34d258ae8eb6079873724f9ad7c9006a429311f</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="162.18.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.18.1.el9_1.src.rpm">
          <filename>kernel-debug-devel-5.14.0-162.18.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">c96764b944c8a857c4afb8c2842c7d57208b8a4a264779bc244576aca7cb2e91</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0953</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 17:45:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0953" id="RHSA-2023:0953" type="rhsa" title="RHSA-2023:0953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45061" id="CVE-2022-45061" type="cve" title="CVE-2022-45061"/>
      <reference href="https://bugzilla.redhat.com/2144072" id="2144072" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0953.html" id="ALSA-2023:0953" type="self" title="ALSA-2023:0953"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="python-unversioned-command" version="3.9.14" release="1.el9_1.2" epoch="0" arch="noarch" src="python3.9-3.9.14-1.el9_1.2.src.rpm">
          <filename>python-unversioned-command-3.9.14-1.el9_1.2.noarch.rpm</filename>
          <sum type="sha256">4c196d0362e2bfad00a4627155c295f8b60bbca8eef7be0a51c7e85c57ed1579</sum>
        </package>
        <package name="python3-devel" version="3.9.14" release="1.el9_1.2" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9_1.2.src.rpm">
          <filename>python3-devel-3.9.14-1.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">829affab387307fa56b9093bb7e549724120ca8661ab1a86c6e716bceeef0af2</sum>
        </package>
        <package name="python3-tkinter" version="3.9.14" release="1.el9_1.2" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9_1.2.src.rpm">
          <filename>python3-tkinter-3.9.14-1.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">d660435239641f17df19ae77e8911fb0fa9fa14f2a428010be5311ce1461df88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0954</id>
    <title>Moderate: systemd security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 17:55:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>systemd security update</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

* systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting (CVE-2022-4415)
* systemd: deadlock in systemd-coredump via a crash with a long backtrace (CVE-2022-45873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0954" id="RHSA-2023:0954" type="rhsa" title="RHSA-2023:0954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4415" id="CVE-2022-4415" type="cve" title="CVE-2022-4415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45873" id="CVE-2022-45873" type="cve" title="CVE-2022-45873"/>
      <reference href="https://bugzilla.redhat.com/2149063" id="2149063" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2155515" id="2155515" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0954.html" id="ALSA-2023:0954" type="self" title="ALSA-2023:0954"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="systemd-devel" version="250" release="12.el9_1.3" epoch="0" arch="s390x" src="systemd-250-12.el9_1.3.src.rpm">
          <filename>systemd-devel-250-12.el9_1.3.s390x.rpm</filename>
          <sum type="sha256">565ead04a8c357a1b09f0bacfd3be0ddc7794b0d399cb2e577c8dfa34377fcb3</sum>
        </package>
        <package name="systemd-journal-remote" version="250" release="12.el9_1.3" epoch="0" arch="s390x" src="systemd-250-12.el9_1.3.src.rpm">
          <filename>systemd-journal-remote-250-12.el9_1.3.s390x.rpm</filename>
          <sum type="sha256">e5c830f846bce859819a2a160d46df0df399c8dd0975555e3c07d33bbf53857b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0957</id>
    <title>Moderate: lua security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 18:03:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>lua security update</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: use after free allows Sandbox Escape (CVE-2021-44964)
* lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0957" id="RHSA-2023:0957" type="rhsa" title="RHSA-2023:0957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-43519" id="CVE-2021-43519" type="cve" title="CVE-2021-43519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44964" id="CVE-2021-44964" type="cve" title="CVE-2021-44964"/>
      <reference href="https://bugzilla.redhat.com/2047672" id="2047672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064772" id="2064772" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0957.html" id="ALSA-2023:0957" type="self" title="ALSA-2023:0957"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="lua" version="5.4.4" release="2.el9_1" epoch="0" arch="s390x" src="lua-5.4.4-2.el9_1.src.rpm">
          <filename>lua-5.4.4-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">75873bc393179499368c6903dd5cb348033e6164ed593c4296bbf4d09f982272</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0958</id>
    <title>Moderate: vim security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 18:13:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: no check if the return value of XChangeGC() is NULL (CVE-2022-47024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0958" id="RHSA-2023:0958" type="rhsa" title="RHSA-2023:0958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47024" id="CVE-2022-47024" type="cve" title="CVE-2022-47024"/>
      <reference href="https://bugzilla.redhat.com/2163613" id="2163613" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0958.html" id="ALSA-2023:0958" type="self" title="ALSA-2023:0958"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="vim-X11" version="8.2.2637" release="20.el9_1" epoch="2" arch="s390x" src="vim-8.2.2637-20.el9_1.src.rpm">
          <filename>vim-X11-8.2.2637-20.el9_1.s390x.rpm</filename>
          <sum type="sha256">6f86bd3bc7d364dd5c3df968d13de7d811151fe26f4090676784744b7908968c</sum>
        </package>
        <package name="vim-enhanced" version="8.2.2637" release="20.el9_1" epoch="2" arch="s390x" src="vim-8.2.2637-20.el9_1.src.rpm">
          <filename>vim-enhanced-8.2.2637-20.el9_1.s390x.rpm</filename>
          <sum type="sha256">89ba90b54610a169fa948c0876eaf66481e2caaa39df73528e241089ad39634c</sum>
        </package>
        <package name="vim-common" version="8.2.2637" release="20.el9_1" epoch="2" arch="s390x" src="vim-8.2.2637-20.el9_1.src.rpm">
          <filename>vim-common-8.2.2637-20.el9_1.s390x.rpm</filename>
          <sum type="sha256">c1dc30bed31050f62161d51030da52d4eb8a0c18f0e227c972511a559d4be460</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0965</id>
    <title>Moderate: php security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 18:26:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (8.0.27). (BZ#2161667)

Security Fix(es):

* XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)
* php: standard insecure cookie could be treated as a `__Host-` or `__Secure-` cookie by PHP applications (CVE-2022-31629)
* php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)
* php: Due to an integer overflow PDO::quote() may return unquoted string (CVE-2022-31631)
* php: phar wrapper can occur dos when using quine gzip file (CVE-2022-31628)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0965" id="RHSA-2023:0965" type="rhsa" title="RHSA-2023:0965"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31628" id="CVE-2022-31628" type="cve" title="CVE-2022-31628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31629" id="CVE-2022-31629" type="cve" title="CVE-2022-31629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31630" id="CVE-2022-31630" type="cve" title="CVE-2022-31630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31631" id="CVE-2022-31631" type="cve" title="CVE-2022-31631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37454" id="CVE-2022-37454" type="cve" title="CVE-2022-37454"/>
      <reference href="https://bugzilla.redhat.com/2133687" id="2133687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133688" id="2133688" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2139280" id="2139280" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140200" id="2140200" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2158791" id="2158791" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0965.html" id="ALSA-2023:0965" type="self" title="ALSA-2023:0965"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="php-xml" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-xml-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">0191c42872f59374d94841fc54ded08cd294469e5fd7af45231370aa3632e797</sum>
        </package>
        <package name="php-pdo" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-pdo-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">04c1847fd85054b8ff106e5812cf3c77240489f9f50c114149b3edfc4d11655f</sum>
        </package>
        <package name="php-gd" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-gd-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">062db49d581a01e990636c834a4b262c2c0b1fe41469bb4203c1b89c46ea4b70</sum>
        </package>
        <package name="php-gmp" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-gmp-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">07dbdb39886777b23a8f450598d5e4e964bd07e5b970110c4e758d330a6b37cb</sum>
        </package>
        <package name="php-opcache" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-opcache-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">1c900a2ef0eba924407066f0217cbcfda3328582789a7f0c962ee34be4e6336b</sum>
        </package>
        <package name="php-ffi" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-ffi-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">25e691d62e441a13e64b0d43cfe4eed258fba93d6e53d43b02c5256051b644c3</sum>
        </package>
        <package name="php-common" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-common-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">282c169a8864df0c54aa1ab027678e35475fd48c4378b48ab0a3965873376fb9</sum>
        </package>
        <package name="php-ldap" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-ldap-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">2e2f81c2aa2303c79e3f698465306563a84d8b5450cb83308a8e7fd53b20ae33</sum>
        </package>
        <package name="php-odbc" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-odbc-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">3bc95347a7abb9f6e2ed7b3a25f2693789571ab06325d9845c5ac4b0ad8d9c41</sum>
        </package>
        <package name="php-dbg" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-dbg-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">4c8a63682099b88988e81d34fbc2e5967275a24ca2d0639cb2cdb88bbcf55327</sum>
        </package>
        <package name="php-snmp" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-snmp-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">6b3e59a8ada9aa361d09ea5292b24f10fcc7d043bc5fe48861e676fa4c893f72</sum>
        </package>
        <package name="php-soap" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-soap-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">6d2ec05e6171f9ce67b14ade23524792e2a9983d85831864eeed0f262406ae60</sum>
        </package>
        <package name="php-cli" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-cli-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">6d77c6f316f381bb1f26ae18993fce5b59e70e9b5a31bae6fa01822daf268fd4</sum>
        </package>
        <package name="php-mysqlnd" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-mysqlnd-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">7fd8628e406582b7c5733408dcc8b2201d423eeeb63d1938ad449097ff6fa19c</sum>
        </package>
        <package name="php-enchant" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-enchant-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">8ccd4427efbf8512830515fa85aca20b358508f78e0a2ce6f874a3f5e3557921</sum>
        </package>
        <package name="php-intl" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-intl-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">8e0898d586a6448e7ebbc290ef50a49df99259792b9905629030bcbdf9e2e35f</sum>
        </package>
        <package name="php-bcmath" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-bcmath-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">8f80213221ba9df6d78698342cd6b26ba37a1bd17d72c9aae2988f01c75e7ad4</sum>
        </package>
        <package name="php-pgsql" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-pgsql-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">9cb88c106cdb2d168b7bb741a918f0473e6df4cd23b9228864ca53ce02b6c243</sum>
        </package>
        <package name="php-process" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-process-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">a1559a0f3908815ff31b58d309dba43f67139946e2b474124d6638588c9e6846</sum>
        </package>
        <package name="php-embedded" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-embedded-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">a2a2e39143a7d7343a6b5b9671ed9d8d233454524745161c225115b319f9cb35</sum>
        </package>
        <package name="php" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">a7892041eab777e02a163d684104da4bd8304baf0c0fd90bc6ee506693d4d59d</sum>
        </package>
        <package name="php-mbstring" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-mbstring-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">ad30c189b3d2d562f4c5fd619a042548dd38af777a9fac45af1b6d6c48a8e93f</sum>
        </package>
        <package name="php-fpm" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-fpm-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">b7c92f50db2d5a4f0d0e95c415e2b09b4becb016c42529fa1d11de2792961248</sum>
        </package>
        <package name="php-devel" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-devel-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">f01c6ed1d320817a2d6d4680b66448b8b90240b55d4ccfa1c68ca60c42a22a01</sum>
        </package>
        <package name="php-dba" version="8.0.27" release="1.el9_1" epoch="0" arch="s390x" src="php-8.0.27-1.el9_1.src.rpm">
          <filename>php-dba-8.0.27-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">f030916e464c664524c31d39eed780ab466a76b94f2ff21249ca5c4d012baedf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0970</id>
    <title>Moderate: httpd security and bug fix update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 18:31:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>httpd security and bug fix update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_dav: out-of-bounds read/write of zero byte (CVE-2006-20001)
* httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-36760)
* httpd: mod_proxy: HTTP response splitting (CVE-2022-37436)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* httpd-init fails to create localhost.crt, localhost.key due to "sscg" default now creates a /dhparams.pem and is not idempotent if the file /dhparams.pem already exists. (BZ#2165975)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0970" id="RHSA-2023:0970" type="rhsa" title="RHSA-2023:0970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2006-20001" id="CVE-2006-20001" type="cve" title="CVE-2006-20001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36760" id="CVE-2022-36760" type="cve" title="CVE-2022-36760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37436" id="CVE-2022-37436" type="cve" title="CVE-2022-37436"/>
      <reference href="https://bugzilla.redhat.com/2161773" id="2161773" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161774" id="2161774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161777" id="2161777" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0970.html" id="ALSA-2023:0970" type="self" title="ALSA-2023:0970"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="mod_session" version="2.4.53" release="7.el9_1.1" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.1.src.rpm">
          <filename>mod_session-2.4.53-7.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">21526c482f82ecacb246cd1cd00f89dbe74be7d5d0d342af7f21936cafe5d0bd</sum>
        </package>
        <package name="mod_lua" version="2.4.53" release="7.el9_1.1" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.1.src.rpm">
          <filename>mod_lua-2.4.53-7.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">23cfc2b13779347a6b977fdd0b80d5ae451d499c4a7ee5e5ae3c463d4f5f1634</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.53" release="7.el9_1.1" epoch="0" arch="noarch" src="httpd-2.4.53-7.el9_1.1.src.rpm">
          <filename>httpd-filesystem-2.4.53-7.el9_1.1.noarch.rpm</filename>
          <sum type="sha256">3352de6afe7653c880424816ba8d8d8cf5ec226f325f6f2548eb0a54e55eaf6f</sum>
        </package>
        <package name="httpd-devel" version="2.4.53" release="7.el9_1.1" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.1.src.rpm">
          <filename>httpd-devel-2.4.53-7.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">6f15b710780729d5c5cc53b637c9d72386941778a863b2d38e41ddaefbe76a68</sum>
        </package>
        <package name="httpd" version="2.4.53" release="7.el9_1.1" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.1.src.rpm">
          <filename>httpd-2.4.53-7.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">8d2ecea64b7e5521ca2009a2be1712831c9bfdb00be93753db57290949526b2b</sum>
        </package>
        <package name="httpd-manual" version="2.4.53" release="7.el9_1.1" epoch="0" arch="noarch" src="httpd-2.4.53-7.el9_1.1.src.rpm">
          <filename>httpd-manual-2.4.53-7.el9_1.1.noarch.rpm</filename>
          <sum type="sha256">a7a5ffeedf4e3b3a6908d659b4d9982d805f81d111ed27cef9f254c7f6896830</sum>
        </package>
        <package name="mod_ssl" version="2.4.53" release="7.el9_1.1" epoch="1" arch="s390x" src="httpd-2.4.53-7.el9_1.1.src.rpm">
          <filename>mod_ssl-2.4.53-7.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">acb75efc590ee42717d52908e3c12b0a8072edfa1f23aa03649ccc536dd44ab9</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.53" release="7.el9_1.1" epoch="1" arch="s390x" src="httpd-2.4.53-7.el9_1.1.src.rpm">
          <filename>mod_proxy_html-2.4.53-7.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">b8ed59fab4f01a314a96ca553151d01c7724743ac8818159c6d05754c9702f1f</sum>
        </package>
        <package name="httpd-core" version="2.4.53" release="7.el9_1.1" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.1.src.rpm">
          <filename>httpd-core-2.4.53-7.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">c542bdea990edd3abc64a0fb1554bde617e6ac45570668bb93d3095bf2dfca77</sum>
        </package>
        <package name="mod_ldap" version="2.4.53" release="7.el9_1.1" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.1.src.rpm">
          <filename>mod_ldap-2.4.53-7.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">cb5e30cd95e8a2b9670de172db6fc7769ed096bbd047430b31ead9eda8d3cdc4</sum>
        </package>
        <package name="httpd-tools" version="2.4.53" release="7.el9_1.1" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.1.src.rpm">
          <filename>httpd-tools-2.4.53-7.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">fa2ec05f9345ad0187e89f311efa3dbb7e8c61de3b2677043c184f96b0e738d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1068</id>
    <title>Moderate: libjpeg-turbo security update</title>
    <issued date="2023-03-06 00:00:00"/>
    <updated date="2023-03-06 21:05:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libjpeg-turbo security update</summary>
    <description>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

* libjpeg-turbo: heap buffer overflow in get_word_rgb_row() in rdppm.c (CVE-2021-46822)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1068" id="RHSA-2023:1068" type="rhsa" title="RHSA-2023:1068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46822" id="CVE-2021-46822" type="cve" title="CVE-2021-46822"/>
      <reference href="https://bugzilla.redhat.com/2100044" id="2100044" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1068.html" id="ALSA-2023:1068" type="self" title="ALSA-2023:1068"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="libjpeg-turbo-devel" version="2.0.90" release="6.el9_1" epoch="0" arch="s390x" src="libjpeg-turbo-2.0.90-6.el9_1.src.rpm">
          <filename>libjpeg-turbo-devel-2.0.90-6.el9_1.s390x.rpm</filename>
          <sum type="sha256">8f9105fd79a7c611311bb255ab9f6783312277c9c909c185bdd97585c0b5d176</sum>
        </package>
        <package name="libjpeg-turbo" version="2.0.90" release="6.el9_1" epoch="0" arch="s390x" src="libjpeg-turbo-2.0.90-6.el9_1.src.rpm">
          <filename>libjpeg-turbo-2.0.90-6.el9_1.s390x.rpm</filename>
          <sum type="sha256">a77511769044ab403b8215ac5f449ea2dd996f08fd66396db141f1c4eaf3de55</sum>
        </package>
        <package name="libjpeg-turbo-utils" version="2.0.90" release="6.el9_1" epoch="0" arch="s390x" src="libjpeg-turbo-2.0.90-6.el9_1.src.rpm">
          <filename>libjpeg-turbo-utils-2.0.90-6.el9_1.s390x.rpm</filename>
          <sum type="sha256">bc7136224231c28213fe96faea87a64ca1bf5b81d2c5be971e73846e170958ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1141</id>
    <title>Moderate: gnutls security and bug fix update</title>
    <issued date="2023-03-07 00:00:00"/>
    <updated date="2023-03-13 11:03:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security and bug fix update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: timing side-channel in the TLS RSA key exchange code (CVE-2023-0361)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* CCM tag length should be limited to known values (BZ#2144535)
* In FIPS mode, gnutls should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator (BZ#2144537)
* dracut-cmdline[554]: Error in GnuTLS initialization: Error while performing self checks i FIPS mode (BZ#2149640)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1141" id="RHSA-2023:1141" type="rhsa" title="RHSA-2023:1141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0361" id="CVE-2023-0361" type="cve" title="CVE-2023-0361"/>
      <reference href="https://bugzilla.redhat.com/2162596" id="2162596" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1141.html" id="ALSA-2023:1141" type="self" title="ALSA-2023:1141"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="gnutls-utils" version="3.7.6" release="18.el9_1" epoch="0" arch="s390x" src="gnutls-3.7.6-18.el9_1.src.rpm">
          <filename>gnutls-utils-3.7.6-18.el9_1.s390x.rpm</filename>
          <sum type="sha256">0738f5452b9b406299d36a100709de7613f9ad9492dfc452b876080fc56a8aeb</sum>
        </package>
        <package name="gnutls-devel" version="3.7.6" release="18.el9_1" epoch="0" arch="s390x" src="gnutls-3.7.6-18.el9_1.src.rpm">
          <filename>gnutls-devel-3.7.6-18.el9_1.s390x.rpm</filename>
          <sum type="sha256">1bd96df9b0118904172d24f040c55c0d7f9de9725ac4c7397e0aee596e586a03</sum>
        </package>
        <package name="gnutls-c++" version="3.7.6" release="18.el9_1" epoch="0" arch="s390x" src="gnutls-3.7.6-18.el9_1.src.rpm">
          <filename>gnutls-c++-3.7.6-18.el9_1.s390x.rpm</filename>
          <sum type="sha256">2b2613e2c8ef48fc2546b9291e98179d25ddbeeae6d501ea9f3c2873b7b7d50f</sum>
        </package>
        <package name="gnutls-dane" version="3.7.6" release="18.el9_1" epoch="0" arch="s390x" src="gnutls-3.7.6-18.el9_1.src.rpm">
          <filename>gnutls-dane-3.7.6-18.el9_1.s390x.rpm</filename>
          <sum type="sha256">4cc31a5be5166d3d7bbe0442c8feaab2c2aaeb8eae0e4eb97fbbdf5a546d9e15</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1337</id>
    <title>Important: firefox security update</title>
    <issued date="2023-03-20 00:00:00"/>
    <updated date="2023-03-20 21:08:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.9.0 ESR.

Security Fix(es):

* Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751)
* Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 (CVE-2023-28176)
* Mozilla: Potential out-of-bounds when accessing throttled streams (CVE-2023-25752)
* Mozilla: Invalid downcast in Worklets (CVE-2023-28162)
* Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation (CVE-2023-28164)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1337" id="RHSA-2023:1337" type="rhsa" title="RHSA-2023:1337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25751" id="CVE-2023-25751" type="cve" title="CVE-2023-25751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25752" id="CVE-2023-25752" type="cve" title="CVE-2023-25752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28162" id="CVE-2023-28162" type="cve" title="CVE-2023-28162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28164" id="CVE-2023-28164" type="cve" title="CVE-2023-28164"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28176" id="CVE-2023-28176" type="cve" title="CVE-2023-28176"/>
      <reference href="https://bugzilla.redhat.com/2178458" id="2178458" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178460" id="2178460" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178466" id="2178466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178470" id="2178470" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178472" id="2178472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1337.html" id="ALSA-2023:1337" type="self" title="ALSA-2023:1337"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="firefox" version="102.9.0" release="3.el9_1.alma" epoch="0" arch="s390x" src="firefox-102.9.0-3.el9_1.alma.src.rpm">
          <filename>firefox-102.9.0-3.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">896582eca97da5b5a79cd91143d0b5e83f519b37aae61d0e2a867865dae3f219</sum>
        </package>
        <package name="firefox-x11" version="102.9.0" release="3.el9_1.alma" epoch="0" arch="s390x" src="firefox-102.9.0-3.el9_1.alma.src.rpm">
          <filename>firefox-x11-102.9.0-3.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">fabff2ce14654d377d67f2d5dfba03714dfacc512ca81b745bfac7258391a08c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1368</id>
    <title>Important: nss security and bug fix update</title>
    <issued date="2023-03-21 00:00:00"/>
    <updated date="2023-03-23 17:15:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nss security and bug fix update</summary>
    <description>Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

* nss: Arbitrary memory write via PKCS 12 (CVE-2023-0767)

Bug Fix(es):

* In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator. (BZ#2177434)
* Need to update FIPS review comments into NSS AlmaLinux-9. (BZ#2177875)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1368" id="RHSA-2023:1368" type="rhsa" title="RHSA-2023:1368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0767" id="CVE-2023-0767" type="cve" title="CVE-2023-0767"/>
      <reference href="https://bugzilla.redhat.com/2170377" id="2170377" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1368.html" id="ALSA-2023:1368" type="self" title="ALSA-2023:1368"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="nss-softokn" version="3.79.0" release="17.el9_1" epoch="0" arch="s390x" src="nss-3.79.0-17.el9_1.src.rpm">
          <filename>nss-softokn-3.79.0-17.el9_1.s390x.rpm</filename>
          <sum type="sha256">0796d3166e340374679ce3462174aa4a46c0ae759719da80da764af8eeade677</sum>
        </package>
        <package name="nss-tools" version="3.79.0" release="17.el9_1" epoch="0" arch="s390x" src="nss-3.79.0-17.el9_1.src.rpm">
          <filename>nss-tools-3.79.0-17.el9_1.s390x.rpm</filename>
          <sum type="sha256">0d5a585b43713871f401441c7ee8ccc7f03a2619513c3b2fa6af5016fccaf835</sum>
        </package>
        <package name="nspr-devel" version="4.34.0" release="17.el9_1" epoch="0" arch="s390x" src="nss-3.79.0-17.el9_1.src.rpm">
          <filename>nspr-devel-4.34.0-17.el9_1.s390x.rpm</filename>
          <sum type="sha256">3604637223fe2e56d2e631561b98141afd85835987e5d80f327e6f12eb4fc695</sum>
        </package>
        <package name="nss-devel" version="3.79.0" release="17.el9_1" epoch="0" arch="s390x" src="nss-3.79.0-17.el9_1.src.rpm">
          <filename>nss-devel-3.79.0-17.el9_1.s390x.rpm</filename>
          <sum type="sha256">6fba075a25e91f5f58ffb00d28c533b7da4a877569034d9718a6a5a5ef545c3d</sum>
        </package>
        <package name="nss-util-devel" version="3.79.0" release="17.el9_1" epoch="0" arch="s390x" src="nss-3.79.0-17.el9_1.src.rpm">
          <filename>nss-util-devel-3.79.0-17.el9_1.s390x.rpm</filename>
          <sum type="sha256">7bb6081a97b29dc34ccc25463845c93848c3026be02ca9ecccbbc339ad13f073</sum>
        </package>
        <package name="nss-softokn-devel" version="3.79.0" release="17.el9_1" epoch="0" arch="s390x" src="nss-3.79.0-17.el9_1.src.rpm">
          <filename>nss-softokn-devel-3.79.0-17.el9_1.s390x.rpm</filename>
          <sum type="sha256">b9f09e9fcbcb97108ff49aa2ab8e299d17c9d96e0dd8536f16477dd7e1a9f9d0</sum>
        </package>
        <package name="nss-softokn-freebl" version="3.79.0" release="17.el9_1" epoch="0" arch="s390x" src="nss-3.79.0-17.el9_1.src.rpm">
          <filename>nss-softokn-freebl-3.79.0-17.el9_1.s390x.rpm</filename>
          <sum type="sha256">bb6e963376f70350554f1a0a70d300e376ab2be5aa5b41fe05cf3934416a460b</sum>
        </package>
        <package name="nspr" version="4.34.0" release="17.el9_1" epoch="0" arch="s390x" src="nss-3.79.0-17.el9_1.src.rpm">
          <filename>nspr-4.34.0-17.el9_1.s390x.rpm</filename>
          <sum type="sha256">be7337b988b961acf774873376f77af90485ffcd4f396bff56ba69f64be68481</sum>
        </package>
        <package name="nss" version="3.79.0" release="17.el9_1" epoch="0" arch="s390x" src="nss-3.79.0-17.el9_1.src.rpm">
          <filename>nss-3.79.0-17.el9_1.s390x.rpm</filename>
          <sum type="sha256">bff5ef98bc9ea4b2a81c68103ef8f37fff55434692ff58e0e1b70ba96a7e4eb1</sum>
        </package>
        <package name="nss-sysinit" version="3.79.0" release="17.el9_1" epoch="0" arch="s390x" src="nss-3.79.0-17.el9_1.src.rpm">
          <filename>nss-sysinit-3.79.0-17.el9_1.s390x.rpm</filename>
          <sum type="sha256">e4f4a1d2bb6810f0eef4fbae35149a304579973744682cdc554b6799fbfac5ec</sum>
        </package>
        <package name="nss-softokn-freebl-devel" version="3.79.0" release="17.el9_1" epoch="0" arch="s390x" src="nss-3.79.0-17.el9_1.src.rpm">
          <filename>nss-softokn-freebl-devel-3.79.0-17.el9_1.s390x.rpm</filename>
          <sum type="sha256">edd863be9cfabd519a73a72c33cda418b964bedbe44460330d47376f867dffc1</sum>
        </package>
        <package name="nss-util" version="3.79.0" release="17.el9_1" epoch="0" arch="s390x" src="nss-3.79.0-17.el9_1.src.rpm">
          <filename>nss-util-3.79.0-17.el9_1.s390x.rpm</filename>
          <sum type="sha256">ef30548b73fad044a7e37dae3523f1c0fddc8f8751072c12f849cf1558188328</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1407</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-03-22 00:00:00"/>
    <updated date="2023-03-23 17:40:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.9.0.

Security Fix(es):

* Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751)
* Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 (CVE-2023-28176)
* Mozilla: Potential out-of-bounds when accessing throttled streams (CVE-2023-25752)
* Mozilla: Invalid downcast in Worklets (CVE-2023-28162)
* Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation (CVE-2023-28164)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1407" id="RHSA-2023:1407" type="rhsa" title="RHSA-2023:1407"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25751" id="CVE-2023-25751" type="cve" title="CVE-2023-25751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25752" id="CVE-2023-25752" type="cve" title="CVE-2023-25752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28162" id="CVE-2023-28162" type="cve" title="CVE-2023-28162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28164" id="CVE-2023-28164" type="cve" title="CVE-2023-28164"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28176" id="CVE-2023-28176" type="cve" title="CVE-2023-28176"/>
      <reference href="https://bugzilla.redhat.com/2178458" id="2178458" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178460" id="2178460" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178466" id="2178466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178470" id="2178470" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178472" id="2178472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1407.html" id="ALSA-2023:1407" type="self" title="ALSA-2023:1407"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="thunderbird" version="102.9.0" release="1.el9_1.alma" epoch="0" arch="s390x" src="thunderbird-102.9.0-1.el9_1.alma.src.rpm">
          <filename>thunderbird-102.9.0-1.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">466527c63581bc5360ab6c4b0520d6d2298ff45b68e05448d0b9dce8e2a208ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1470</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-03-27 00:00:00"/>
    <updated date="2023-03-27 21:59:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744)
* ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266)
* kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux9.0 - zfcp: fix missing auto port scan and thus missing target ports (BZ#2127880)
* Cgroups_v2, when creating new cgroup/container, resets the cpu affinity masks for all usr processes on the system. (BZ#2143766)
* AlmaLinux9.0 - boot: Add secure boot trailer (BZ#2151528)
* kernel-rt-debug: WARNING: possible circular locking dependency detected (&amp;n-&gt;list_lock-&gt;&amp;p-&gt;pi_lock-&gt;&amp;lock-&gt;wait_lock) (BZ#2160614)
* Support cpuset.sched_load_balance by changing default CPUset directory structure (BZ#2161105)
* AlmaLinux9.0 -  s390/kexec: fix ipl report address for kdump (BZ#2166903)
* libgpiod doesn't seem to work with Interphase gpiochip (BZ#2166956)
* Azure AlmaLinux9 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (BZ#2170227)

Enhancement(s):

* IBM 9.2 FEAT: Upgrade the QETH driver to latest from upstream, e.g. kernel 6.0 (BZ#2166304)
* Intel 9.2 FEAT SPR CPU: AMX: Improve the init_fpstate setup code (BZ#2168382)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1470" id="RHSA-2023:1470" type="rhsa" title="RHSA-2023:1470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4269" id="CVE-2022-4269" type="cve" title="CVE-2022-4269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4744" id="CVE-2022-4744" type="cve" title="CVE-2022-4744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0266" id="CVE-2023-0266" type="cve" title="CVE-2023-0266"/>
      <reference href="https://bugzilla.redhat.com/2150272" id="2150272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156322" id="2156322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2163379" id="2163379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1470.html" id="ALSA-2023:1470" type="self" title="ALSA-2023:1470"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="perf" version="5.14.0" release="162.22.2.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>perf-5.14.0-162.22.2.el9_1.s390x.rpm</filename>
          <sum type="sha256">176299cb34f53a58aae1825887201701c0db815eeb642c1bb89dbf649f5d2c44</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="162.22.2.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>kernel-devel-5.14.0-162.22.2.el9_1.s390x.rpm</filename>
          <sum type="sha256">54fc050781e49fef5a287655202d12a7ada790540f615ed052f03c66b8c1a638</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="162.22.2.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-162.22.2.el9_1.s390x.rpm</filename>
          <sum type="sha256">5e5c02696ed82491089088e3d191a7d4b28126d11b0b3527cc66b1dde4ed1dc9</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="162.22.2.el9_1" epoch="0" arch="noarch" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>kernel-doc-5.14.0-162.22.2.el9_1.noarch.rpm</filename>
          <sum type="sha256">987ec41dd3e0fe1f213134794e49a14672763055ce2574b91005ced4ab2f7f10</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="162.22.2.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>kernel-devel-matched-5.14.0-162.22.2.el9_1.s390x.rpm</filename>
          <sum type="sha256">b38a11e7994849687b0418365f19f25170dfc913c2b7c368e2c9e2d5e2f4c84e</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="162.22.2.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-162.22.2.el9_1.s390x.rpm</filename>
          <sum type="sha256">b627684cf619724acc7b31673c2e56f70bd4bb3f3a5e9b248e415ccb9ed3f070</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="162.22.2.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-162.22.2.el9_1.s390x.rpm</filename>
          <sum type="sha256">cd8977bb1fd4eec63037ecd12a6ecb124fe6ef55c31114b0f90d26f1131e107d</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="162.22.2.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>kernel-debug-devel-5.14.0-162.22.2.el9_1.s390x.rpm</filename>
          <sum type="sha256">e53317090ecbb350d91da88d18264cd658213a0d30b272992d73bf2d0db5743b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1592</id>
    <title>Important: tigervnc security update</title>
    <issued date="2023-04-04 00:00:00"/>
    <updated date="2023-04-05 11:38:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1592" id="RHSA-2023:1592" type="rhsa" title="RHSA-2023:1592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1393" id="CVE-2023-1393" type="cve" title="CVE-2023-1393"/>
      <reference href="https://bugzilla.redhat.com/2180288" id="2180288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1592.html" id="ALSA-2023:1592" type="self" title="ALSA-2023:1592"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="tigervnc" version="1.12.0" release="5.el9_1.2" epoch="0" arch="s390x" src="tigervnc-1.12.0-5.el9_1.2.src.rpm">
          <filename>tigervnc-1.12.0-5.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">1f284c30cefc0e8473eeeafd49c699069a85c031bb9a420f1a7e5c520a0d1939</sum>
        </package>
        <package name="tigervnc-icons" version="1.12.0" release="5.el9_1.2" epoch="0" arch="noarch" src="tigervnc-1.12.0-5.el9_1.2.src.rpm">
          <filename>tigervnc-icons-1.12.0-5.el9_1.2.noarch.rpm</filename>
          <sum type="sha256">2ad4b6a6488ca31b057eb3cb4f6d73353faac50f363cae37fafc4d736c87114c</sum>
        </package>
        <package name="tigervnc-server-module" version="1.12.0" release="5.el9_1.2" epoch="0" arch="s390x" src="tigervnc-1.12.0-5.el9_1.2.src.rpm">
          <filename>tigervnc-server-module-1.12.0-5.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">48ac903d2915a13aa7d47c230c9ce76e1cfad9db5ccec829d99a7d20d2276ff4</sum>
        </package>
        <package name="tigervnc-license" version="1.12.0" release="5.el9_1.2" epoch="0" arch="noarch" src="tigervnc-1.12.0-5.el9_1.2.src.rpm">
          <filename>tigervnc-license-1.12.0-5.el9_1.2.noarch.rpm</filename>
          <sum type="sha256">75e3b6a43db5608e112099a7647d48eefe274349a7446b3a6af3bc47f50af9fc</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.12.0" release="5.el9_1.2" epoch="0" arch="s390x" src="tigervnc-1.12.0-5.el9_1.2.src.rpm">
          <filename>tigervnc-server-minimal-1.12.0-5.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">c201b12cfb50585f6d5652f56fd62839456c7285503e7557a72cb54bacfb350a</sum>
        </package>
        <package name="tigervnc-selinux" version="1.12.0" release="5.el9_1.2" epoch="0" arch="noarch" src="tigervnc-1.12.0-5.el9_1.2.src.rpm">
          <filename>tigervnc-selinux-1.12.0-5.el9_1.2.noarch.rpm</filename>
          <sum type="sha256">c564a1884269c72b7ce100d33882bce39543628cc033e33f5983d64258cdc14b</sum>
        </package>
        <package name="tigervnc-server" version="1.12.0" release="5.el9_1.2" epoch="0" arch="s390x" src="tigervnc-1.12.0-5.el9_1.2.src.rpm">
          <filename>tigervnc-server-1.12.0-5.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">d0909531c9e21c60766800f0cb5b69bd0dfd93f1839d777df998a76a5165b38f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1670</id>
    <title>Important: httpd and mod_http2 security update</title>
    <issued date="2023-04-06 00:00:00"/>
    <updated date="2023-04-20 13:39:37"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>httpd and mod_http2 security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: HTTP request splitting with mod_rewrite and mod_proxy (CVE-2023-25690)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1670" id="RHSA-2023:1670" type="rhsa" title="RHSA-2023:1670"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25690" id="CVE-2023-25690" type="cve" title="CVE-2023-25690"/>
      <reference href="https://bugzilla.redhat.com/2176209" id="2176209" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1670.html" id="ALSA-2023:1670" type="self" title="ALSA-2023:1670"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="mod_ssl" version="2.4.53" release="7.el9_1.5" epoch="1" arch="s390x" src="httpd-2.4.53-7.el9_1.5.src.rpm">
          <filename>mod_ssl-2.4.53-7.el9_1.5.s390x.rpm</filename>
          <sum type="sha256">02b939a75b7d21967af50fd4bc36adf0a2b5517354c1a649a04f8f355cd94e5f</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.53" release="7.el9_1.5" epoch="0" arch="noarch" src="httpd-2.4.53-7.el9_1.5.src.rpm">
          <filename>httpd-filesystem-2.4.53-7.el9_1.5.noarch.rpm</filename>
          <sum type="sha256">0e18fe73ce1d645cee0c29947658d8d7cf764cd0d5dff4a9d29e549dea3ccd98</sum>
        </package>
        <package name="mod_session" version="2.4.53" release="7.el9_1.5" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.5.src.rpm">
          <filename>mod_session-2.4.53-7.el9_1.5.s390x.rpm</filename>
          <sum type="sha256">220332d4c4fa6c62c175263b76a2aa975c2e8ddb40d9c14ba3c84881f45a8e50</sum>
        </package>
        <package name="mod_lua" version="2.4.53" release="7.el9_1.5" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.5.src.rpm">
          <filename>mod_lua-2.4.53-7.el9_1.5.s390x.rpm</filename>
          <sum type="sha256">2779e10c1bdc38b48db688ff6f7d8600b4f8c2ae1aec00424e7d30ef4366995f</sum>
        </package>
        <package name="httpd-manual" version="2.4.53" release="7.el9_1.5" epoch="0" arch="noarch" src="httpd-2.4.53-7.el9_1.5.src.rpm">
          <filename>httpd-manual-2.4.53-7.el9_1.5.noarch.rpm</filename>
          <sum type="sha256">2f9fcaf5d345420c53a8c3125d3f20a94e594d2c4fc208c8f71a194624f859bc</sum>
        </package>
        <package name="httpd-devel" version="2.4.53" release="7.el9_1.5" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.5.src.rpm">
          <filename>httpd-devel-2.4.53-7.el9_1.5.s390x.rpm</filename>
          <sum type="sha256">3c5851d233a48c72aa44bfb4f6506c20ed06e6924aa3a403a48ad745a80002a7</sum>
        </package>
        <package name="mod_ldap" version="2.4.53" release="7.el9_1.5" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.5.src.rpm">
          <filename>mod_ldap-2.4.53-7.el9_1.5.s390x.rpm</filename>
          <sum type="sha256">5637f79dfc0b43e37752361732a1ee3496617985054c0ae37240e591510a2ed2</sum>
        </package>
        <package name="httpd-tools" version="2.4.53" release="7.el9_1.5" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.5.src.rpm">
          <filename>httpd-tools-2.4.53-7.el9_1.5.s390x.rpm</filename>
          <sum type="sha256">5e683b2fd9e6b0fa8b3d1bc7ba71a2407c3d9745252bb03504cd7472f49bcb1a</sum>
        </package>
        <package name="httpd-core" version="2.4.53" release="7.el9_1.5" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.5.src.rpm">
          <filename>httpd-core-2.4.53-7.el9_1.5.s390x.rpm</filename>
          <sum type="sha256">982b635a21c26a49073c4adef37373eda502e7681cb86c52c4936b0e556631a9</sum>
        </package>
        <package name="mod_http2" version="1.15.19" release="3.el9_1.5" epoch="0" arch="s390x" src="mod_http2-1.15.19-3.el9_1.5.src.rpm">
          <filename>mod_http2-1.15.19-3.el9_1.5.s390x.rpm</filename>
          <sum type="sha256">a861746b9543a14aad72f8bdfa046c7dfcc5ec341d1367190afb748bd430e756</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.53" release="7.el9_1.5" epoch="1" arch="s390x" src="httpd-2.4.53-7.el9_1.5.src.rpm">
          <filename>mod_proxy_html-2.4.53-7.el9_1.5.s390x.rpm</filename>
          <sum type="sha256">b1c26d45dae78827e22be5211a678382cc4886ca76ec1111b8125f7039f4f2a7</sum>
        </package>
        <package name="httpd" version="2.4.53" release="7.el9_1.5" epoch="0" arch="s390x" src="httpd-2.4.53-7.el9_1.5.src.rpm">
          <filename>httpd-2.4.53-7.el9_1.5.s390x.rpm</filename>
          <sum type="sha256">f13f2dac237d4af313dbcbf65e8dd893e9eca56adc9ae89ba923befb0953d5a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1693</id>
    <title>Moderate: postgresql security update</title>
    <issued date="2023-04-11 00:00:00"/>
    <updated date="2023-04-20 13:52:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Extension scripts replace objects not belonging to the extension. (CVE-2022-2625)
* postgresql: Client memory disclosure when connecting with Kerberos to modified server (CVE-2022-41862)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1693" id="RHSA-2023:1693" type="rhsa" title="RHSA-2023:1693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2625" id="CVE-2022-2625" type="cve" title="CVE-2022-2625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41862" id="CVE-2022-41862" type="cve" title="CVE-2022-41862"/>
      <reference href="https://bugzilla.redhat.com/2113825" id="2113825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165722" id="2165722" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1693.html" id="ALSA-2023:1693" type="self" title="ALSA-2023:1693"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="postgresql-private-libs" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-private-libs-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">15e4b239905a64d2546ee8652ccbd204cff3889b6122a73b0557ad0cf0331b03</sum>
        </package>
        <package name="postgresql-upgrade" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-upgrade-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">1e48d23b3e6c2b4627b9d49e85da8dea31eb21c5f25dac494c10df7422da1670</sum>
        </package>
        <package name="postgresql" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">4157a58c45ca9fa4cc6656107421d0c5f79cc39ca59a9b307189069158125390</sum>
        </package>
        <package name="postgresql-server" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-server-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">94dc9adef730c20607611306958f0d5f6176b26c6a086ab23448c9be61d44256</sum>
        </package>
        <package name="postgresql-contrib" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-contrib-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">a17dc753dc949f146ad3c1709bd0772addb6ded280c2d06df91bf1c43ed45a20</sum>
        </package>
        <package name="postgresql-plperl" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-plperl-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">a7dfe8e692f01936b4bbd1a0f41770d3dab90bf3b16238f63f99447818991679</sum>
        </package>
        <package name="postgresql-plpython3" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-plpython3-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">bee7f6ad960c03cbf2d939bbbbb83492c78977a3f314320f7eef81a173164770</sum>
        </package>
        <package name="postgresql-pltcl" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-pltcl-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">d377a6baadf4efcc99df3d6fedbd734a43c0171766e094c2093465270ce46225</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1696</id>
    <title>Moderate: haproxy security update</title>
    <issued date="2023-04-11 00:00:00"/>
    <updated date="2023-04-20 14:00:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>haproxy security update</summary>
    <description>The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.

Security Fix(es):

* haproxy: segfault DoS (CVE-2023-0056)
* haproxy: request smuggling attack in HTTP/1 header parsing (CVE-2023-25725)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1696" id="RHSA-2023:1696" type="rhsa" title="RHSA-2023:1696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0056" id="CVE-2023-0056" type="cve" title="CVE-2023-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25725" id="CVE-2023-25725" type="cve" title="CVE-2023-25725"/>
      <reference href="https://bugzilla.redhat.com/2160808" id="2160808" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2169089" id="2169089" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1696.html" id="ALSA-2023:1696" type="self" title="ALSA-2023:1696"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="haproxy" version="2.4.17" release="3.el9_1.2" epoch="0" arch="s390x" src="haproxy-2.4.17-3.el9_1.2.src.rpm">
          <filename>haproxy-2.4.17-3.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">9db25d4d75528f1104434f9c8407f603a6b760dc32eb34b8f8de86dbd85e479d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1701</id>
    <title>Moderate: curl security update</title>
    <issued date="2023-04-11 00:00:00"/>
    <updated date="2023-04-20 14:09:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: HTTP multi-header compression denial of service (CVE-2023-23916)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1701" id="RHSA-2023:1701" type="rhsa" title="RHSA-2023:1701"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23916" id="CVE-2023-23916" type="cve" title="CVE-2023-23916"/>
      <reference href="https://bugzilla.redhat.com/2167815" id="2167815" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1701.html" id="ALSA-2023:1701" type="self" title="ALSA-2023:1701"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="libcurl-devel" version="7.76.1" release="19.el9_1.2" epoch="0" arch="s390x" src="curl-7.76.1-19.el9_1.2.src.rpm">
          <filename>libcurl-devel-7.76.1-19.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">ac6c9f72c1f5bcc01d81b294c6e8b919dd8e1e4711fe4bd977f5b907c89e0291</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1703</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-04-11 00:00:00"/>
    <updated date="2023-04-20 14:34:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Update intel_idle for Eaglestream/Sapphire Rapids support (BZ#2168361)
* AlmaLinux9: An application stopped on robust futex used via pthread_mutex_lock() (BZ#2168836)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1703" id="RHSA-2023:1703" type="rhsa" title="RHSA-2023:1703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0386" id="CVE-2023-0386" type="cve" title="CVE-2023-0386"/>
      <reference href="https://bugzilla.redhat.com/2159505" id="2159505" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1703.html" id="ALSA-2023:1703" type="self" title="ALSA-2023:1703"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="kernel-doc" version="5.14.0" release="162.23.1.el9_1" epoch="0" arch="noarch" src="kernel-5.14.0-162.23.1.el9_1.src.rpm">
          <filename>kernel-doc-5.14.0-162.23.1.el9_1.noarch.rpm</filename>
          <sum type="sha256">094def3a0784f6ca8cebd409b973dc0087cc3a39c13f7f32792e7038448f5538</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="162.23.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.23.1.el9_1.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-162.23.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">3a3d9baaf0affe4f67bb6265d2811b9b5561bbc1d280ecf83e8132af721e5e23</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="162.23.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.23.1.el9_1.src.rpm">
          <filename>kernel-devel-5.14.0-162.23.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">53eb26119d05f924dbecf1c4513bb4ef9d8419172bef313dbc8282fde0e39673</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="162.23.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.23.1.el9_1.src.rpm">
          <filename>kernel-debug-devel-5.14.0-162.23.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">71e936484aed0a5eb02f7f3993dd3a29c273535296252c0823273acbb6b88e4d</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="162.23.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.23.1.el9_1.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-162.23.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">80b76cb657688c483cac7cbe90b3c7c65f490eca7221e479bf966d7b67588db2</sum>
        </package>
        <package name="perf" version="5.14.0" release="162.23.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.23.1.el9_1.src.rpm">
          <filename>perf-5.14.0-162.23.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">8d973fdd3c9b8ba1da0273a63ec92332052f0d1de8c9f43769b246e9e74765f8</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="162.23.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.23.1.el9_1.src.rpm">
          <filename>kernel-devel-matched-5.14.0-162.23.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">93b7713874f4be5bfba85283bbf52991d8f1d445e980f8e8aa7583de26267e88</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="162.23.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.23.1.el9_1.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-162.23.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">b30cf5c2b8845e04556bf9fdee0a43831bb5e4df3d1cb5ebe360d9c71fc17afd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1786</id>
    <title>Important: firefox security update</title>
    <issued date="2023-04-14 00:00:00"/>
    <updated date="2023-04-20 15:16:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.10.0 ESR.

Security Fix(es):

* MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102)
* Mozilla: Fullscreen notification obscured (CVE-2023-29533)
* Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535)
* Mozilla: Invalid free from JavaScript code (CVE-2023-29536)
* Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550)
* Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945)
* Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539)
* Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541)
* Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1786" id="RHSA-2023:1786" type="rhsa" title="RHSA-2023:1786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1945" id="CVE-2023-1945" type="cve" title="CVE-2023-1945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29533" id="CVE-2023-29533" type="cve" title="CVE-2023-29533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29535" id="CVE-2023-29535" type="cve" title="CVE-2023-29535"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29536" id="CVE-2023-29536" type="cve" title="CVE-2023-29536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29539" id="CVE-2023-29539" type="cve" title="CVE-2023-29539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29541" id="CVE-2023-29541" type="cve" title="CVE-2023-29541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29548" id="CVE-2023-29548" type="cve" title="CVE-2023-29548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29550" id="CVE-2023-29550" type="cve" title="CVE-2023-29550"/>
      <reference href="https://bugzilla.redhat.com/2186101" id="2186101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186103" id="2186103" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186104" id="2186104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186105" id="2186105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186106" id="2186106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186109" id="2186109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186110" id="2186110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186111" id="2186111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1786.html" id="ALSA-2023:1786" type="self" title="ALSA-2023:1786"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="firefox-x11" version="102.10.0" release="1.el9_1.alma" epoch="0" arch="s390x" src="firefox-102.10.0-1.el9_1.alma.src.rpm">
          <filename>firefox-x11-102.10.0-1.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">0b9b27465612b2226c8690b1d573dc6f6cc1410a0dbc48dde290211deb8a7756</sum>
        </package>
        <package name="firefox" version="102.10.0" release="1.el9_1.alma" epoch="0" arch="s390x" src="firefox-102.10.0-1.el9_1.alma.src.rpm">
          <filename>firefox-102.10.0-1.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">bbe61a936af73e4ddddcf6ed45283de4b8e4df072e9df5dc74502eebdd42c0ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1809</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-04-17 00:00:00"/>
    <updated date="2023-04-20 15:37:01"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.10.0.

Security Fix(es):

* Thunderbird: Revocation status of S/Mime recipient certificates was not checked (CVE-2023-0547)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2023-28427)
* Mozilla: Fullscreen notification obscured (CVE-2023-29533)
* Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535)
* Mozilla: Invalid free from JavaScript code (CVE-2023-29536)
* Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550)
* Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945)
* Thunderbird: Hang when processing certain OpenPGP messages (CVE-2023-29479)
* Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539)
* Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541)
* Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548)
* MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1809" id="RHSA-2023:1809" type="rhsa" title="RHSA-2023:1809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0547" id="CVE-2023-0547" type="cve" title="CVE-2023-0547"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1945" id="CVE-2023-1945" type="cve" title="CVE-2023-1945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28427" id="CVE-2023-28427" type="cve" title="CVE-2023-28427"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29479" id="CVE-2023-29479" type="cve" title="CVE-2023-29479"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29533" id="CVE-2023-29533" type="cve" title="CVE-2023-29533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29535" id="CVE-2023-29535" type="cve" title="CVE-2023-29535"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29536" id="CVE-2023-29536" type="cve" title="CVE-2023-29536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29539" id="CVE-2023-29539" type="cve" title="CVE-2023-29539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29541" id="CVE-2023-29541" type="cve" title="CVE-2023-29541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29548" id="CVE-2023-29548" type="cve" title="CVE-2023-29548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29550" id="CVE-2023-29550" type="cve" title="CVE-2023-29550"/>
      <reference href="https://bugzilla.redhat.com/2183278" id="2183278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186101" id="2186101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186103" id="2186103" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186104" id="2186104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186105" id="2186105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186106" id="2186106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186109" id="2186109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186110" id="2186110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186111" id="2186111" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186734" id="2186734" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186735" id="2186735" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1809.html" id="ALSA-2023:1809" type="self" title="ALSA-2023:1809"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="thunderbird" version="102.10.0" release="2.el9_1.alma" epoch="0" arch="s390x" src="thunderbird-102.10.0-2.el9_1.alma.src.rpm">
          <filename>thunderbird-102.10.0-2.el9_1.alma.s390x.rpm</filename>
          <sum type="sha256">e552f0c1d531aed452d02c5412d6cf2d78ca179bf4121b0ae1646dbab76195fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1879</id>
    <title>Important: java-17-openjdk security and bug fix update</title>
    <issued date="2023-04-19 00:00:00"/>
    <updated date="2023-04-20 15:45:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the list of cryptographic services and algorithms available is limited to those that are FIPS compliant. It was found that this filtering was too strict and was also excluding service attributes. These attributes are now made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186804)
* Previously, the XML signature provider was unable to operate in FIPS mode. Following recent enhancements to FIPS mode support, the XML signature provider can now be supported. It is now enabled in FIPS mode. (RHBZ#2186811)
* The PKCS#11 provider used by FIPS mode can be supported by different PKCS#11 tokens. It was found that some PKCS#11 tokens may not be initialised fully before use, leading to an exception being thrown by the provider. With this release, this exception is now expected and handled by the FIPS support code. (RHBZ#2186807)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1879" id="RHSA-2023:1879" type="rhsa" title="RHSA-2023:1879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1879.html" id="ALSA-2023:1879" type="self" title="ALSA-2023:1879"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="java-17-openjdk" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">0241f009047f48e125b0ac9664c41b20e56f6b7849d75e17c3c1f7fa3eb6f974</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-src-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">31484af3750b36c23cc344b36ae247488d9b41a7561c860656fe1e8de8a2bb44</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">414741df01ca5bf6bd5f0fc10c18a2736905de341abcb14075671a5f63bf18ff</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-devel-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">42f9e99ea83d26a03023433dc993fd5e9f1dbb52cf22a2863b327a4e9334e3ff</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">431b4131e01adf988d77d65df0ffa22121189a255c3d5b6d9edbbc39770bca42</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-demo-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">8c176c92cbdb4fa3366ce6aa5b535df12693ad67d68f12659de9d9af07bf21b8</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-headless-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">be0a7336a4a959d626370683b56d5edc97e03b791fc5fafa56cd01d5d3773071</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">c54f6ff9f82acbd3c1243ceaaf34eab4de8c51f80f3452b2c7a61c30a72bb85d</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">fed251282fe5fad9cd7794f39cb3d6a2db321ca1e9ca638fa0143592ecdd08db</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1880</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2023-04-19 00:00:00"/>
    <updated date="2023-04-20 15:55:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1880" id="RHSA-2023:1880" type="rhsa" title="RHSA-2023:1880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1880.html" id="ALSA-2023:1880" type="self" title="ALSA-2023:1880"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="java-11-openjdk-headless" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-headless-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">4560d38e2271aba5706ac217bb9458451b9bb14f0cc06ab323f2e6823be98ce3</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">68a6ef115d22f3ed968ca9df85afdcb62bf96b9a9ac3f4864df71d1e82a53acf</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">7db9f7b04e946d51ff061dbc09c1cb213e28057d2cfb835c9fca9ba7b991e34c</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">b0e66caa775088a4b11ad0fef3ce98450df9dceb32ac8c7ff4665d2107cc3f7a</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-demo-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">d6934706ea5756019bfd68dbacfaf86033250ca1ee0ca7b1ff7a0db1d3a77241</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-devel-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">e08b80cbb14be81bb0541dd7d5e10024976635f1791999d7d0f9e860bc15ed30</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">f2ed7d4aaa42858c7833e75e2a2846358f5a66048bb908b7679fe3bb7dfb1c9b</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">f533971169169cb0a115d5b9b5089448c63122ce2dfdbe2786d6c31f7d1dbc25</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-src-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">fd042a52d52bf4e45365db2511d42f710f38cb23105f55c35a2a2f1ea8e0024e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1909</id>
    <title>Important: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2023-04-25 00:00:00"/>
    <updated date="2023-05-02 23:24:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* The RSAPSSSignature implementation works with RSA keys via the SunRSASign provider. However, it did not fully check that the RSA key could be used by the provider before attempting to do so, leading to the possibility of errors being returned with custom security providers. The implementation now validates RSA keys and will allow other providers to handle such keys where it cannot. (RHBZ#2188024)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1909" id="RHSA-2023:1909" type="rhsa" title="RHSA-2023:1909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1909.html" id="ALSA-2023:1909" type="self" title="ALSA-2023:1909"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.372.b07-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">1dbee311dccd53ca2d4b9ab63a55db2e59e3a66a6d3b76e6ebf70c1669c1c3e2</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.372.b07-1.el9_1.noarch.rpm</filename>
          <sum type="sha256">2711ce201b3b912fdbaa892c8b55c5f91f140bc424f492a5f7bb4ff282d29d84</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.372.b07-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">39c1eb013d0418310aa80d650231c3a078430e9142176fb0972bc385707a93e6</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.372.b07-1.el9_1.noarch.rpm</filename>
          <sum type="sha256">b21ea0f06466b6f20204c59af52b08a0a5675e760f790e4c907e6d0269e6f2ea</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.372.b07-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">b7467409c07e0483d5e814cad0ed0c8f78d3396aea9fcba32e234d5f75d990d7</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.372.b07-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">be627087df55ee49c83967b25bd0091273ea1bfd1ddd897d55e2316a38b7294e</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.372.b07" release="1.el9_1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.372.b07-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">e24656d80c7c641d502ccf0ec6244cbed13de63cc6dcad652aa9193e8e4b6402</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1918</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-04-20 00:00:00"/>
    <updated date="2023-04-21 08:29:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* WebKitGTK: use-after-free leads to arbitrary code execution (CVE-2023-28205)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1918" id="RHSA-2023:1918" type="rhsa" title="RHSA-2023:1918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28205" id="CVE-2023-28205" type="cve" title="CVE-2023-28205"/>
      <reference href="https://bugzilla.redhat.com/2185724" id="2185724" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1918.html" id="ALSA-2023:1918" type="self" title="ALSA-2023:1918"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="webkit2gtk3-jsc" version="2.36.7" release="1.el9_1.3" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_1.3.src.rpm">
          <filename>webkit2gtk3-jsc-2.36.7-1.el9_1.3.s390x.rpm</filename>
          <sum type="sha256">4f51470c38db8a5a477db1488f890d6cda7163257cacb0f2093590a20c0ef6f5</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.36.7" release="1.el9_1.3" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_1.3.src.rpm">
          <filename>webkit2gtk3-devel-2.36.7-1.el9_1.3.s390x.rpm</filename>
          <sum type="sha256">9596d3518ae76e10f3941062eed3fcc8d1e7083d5ddddd005a662b6cebfbe3ef</sum>
        </package>
        <package name="webkit2gtk3" version="2.36.7" release="1.el9_1.3" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_1.3.src.rpm">
          <filename>webkit2gtk3-2.36.7-1.el9_1.3.s390x.rpm</filename>
          <sum type="sha256">9c634f3f734d472d1c273ca603e6e6e3404e16d168a4cb060c021b142d81d741</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.36.7" release="1.el9_1.3" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el9_1.3.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.36.7-1.el9_1.3.s390x.rpm</filename>
          <sum type="sha256">bab8a4ea44056d9b5a7519c543dc6990aa493e5910717f76f0769ee5b448879f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2074</id>
    <title>Important: emacs security update</title>
    <issued date="2023-05-02 00:00:00"/>
    <updated date="2023-05-03 08:08:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>emacs security update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: command injection vulnerability in org-mode (CVE-2023-28617)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2074" id="RHSA-2023:2074" type="rhsa" title="RHSA-2023:2074"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28617" id="CVE-2023-28617" type="cve" title="CVE-2023-28617"/>
      <reference href="https://bugzilla.redhat.com/2180544" id="2180544" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2074.html" id="ALSA-2023:2074" type="self" title="ALSA-2023:2074"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="emacs" version="27.2" release="6.el9_1.1" epoch="1" arch="s390x" src="emacs-27.2-6.el9_1.1.src.rpm">
          <filename>emacs-27.2-6.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">1b0046f98c521633023653aa97c550af94db145d31835818b77ff8c1f640ef08</sum>
        </package>
        <package name="emacs-lucid" version="27.2" release="6.el9_1.1" epoch="1" arch="s390x" src="emacs-27.2-6.el9_1.1.src.rpm">
          <filename>emacs-lucid-27.2-6.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">1b9f0448c003e8a0d3d52d1f2f80c6e1a44fd79bd341d3104f1bcf279ed61f0b</sum>
        </package>
        <package name="emacs-common" version="27.2" release="6.el9_1.1" epoch="1" arch="s390x" src="emacs-27.2-6.el9_1.1.src.rpm">
          <filename>emacs-common-27.2-6.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">1c06cefa94b784bd8079763d5e128bae041313c54d734de6b4fb7d72a1156f0b</sum>
        </package>
        <package name="emacs-nox" version="27.2" release="6.el9_1.1" epoch="1" arch="s390x" src="emacs-27.2-6.el9_1.1.src.rpm">
          <filename>emacs-nox-27.2-6.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">6a01f6b17c99a5926f4c02b847a5c7b72692c5f7fe070e3a86365eeeb5ce8dc8</sum>
        </package>
        <package name="emacs-filesystem" version="27.2" release="6.el9_1.1" epoch="1" arch="noarch" src="emacs-27.2-6.el9_1.1.src.rpm">
          <filename>emacs-filesystem-27.2-6.el9_1.1.noarch.rpm</filename>
          <sum type="sha256">d6466e576a0bf2d374c78b962fa9bfc089a4041c027b49abefb0292b86d89e49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2078</id>
    <title>Important: libwebp security update</title>
    <issued date="2023-05-02 00:00:00"/>
    <updated date="2023-05-03 08:01:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libwebp security update</summary>
    <description>The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

* Mozilla: libwebp: Double-free in libwebp (CVE-2023-1999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2078" id="RHSA-2023:2078" type="rhsa" title="RHSA-2023:2078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1999" id="CVE-2023-1999" type="cve" title="CVE-2023-1999"/>
      <reference href="https://bugzilla.redhat.com/2186102" id="2186102" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2078.html" id="ALSA-2023:2078" type="self" title="ALSA-2023:2078"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="libwebp" version="1.2.0" release="6.el9_1" epoch="0" arch="s390x" src="libwebp-1.2.0-6.el9_1.src.rpm">
          <filename>libwebp-1.2.0-6.el9_1.s390x.rpm</filename>
          <sum type="sha256">bbd3325877c0b1aa5eeb874644cd460a33aed09c5532b656c37ff5d23540f384</sum>
        </package>
        <package name="libwebp-devel" version="1.2.0" release="6.el9_1" epoch="0" arch="s390x" src="libwebp-1.2.0-6.el9_1.src.rpm">
          <filename>libwebp-devel-1.2.0-6.el9_1.s390x.rpm</filename>
          <sum type="sha256">d1b813e0ed40aa7b7c705ca5663129290a91f56350664645e5b238eba4682725</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2127</id>
    <title>Important: samba security update</title>
    <issued date="2023-05-04 00:00:00"/>
    <updated date="2023-05-05 10:51:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2127" id="RHSA-2023:2127" type="rhsa" title="RHSA-2023:2127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38023" id="CVE-2022-38023" type="cve" title="CVE-2022-38023"/>
      <reference href="https://bugzilla.redhat.com/2154362" id="2154362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2127.html" id="ALSA-2023:2127" type="self" title="ALSA-2023:2127"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_1_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_1_default</name>
        <package name="samba-krb5-printing" version="4.16.4" release="103.el9_1" epoch="0" arch="s390x" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-krb5-printing-4.16.4-103.el9_1.s390x.rpm</filename>
          <sum type="sha256">34721bd4494b047b1d571dcb2696eb5fdd93424cf23d61bdb99e99fdf78637ac</sum>
        </package>
        <package name="samba-winbind-krb5-locator" version="4.16.4" release="103.el9_1" epoch="0" arch="s390x" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-winbind-krb5-locator-4.16.4-103.el9_1.s390x.rpm</filename>
          <sum type="sha256">3c16b02f0110264a1ab92b27d9fc9a88b839f1c321d9e53f6eba2052a9464db9</sum>
        </package>
        <package name="samba-vfs-iouring" version="4.16.4" release="103.el9_1" epoch="0" arch="s390x" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-vfs-iouring-4.16.4-103.el9_1.s390x.rpm</filename>
          <sum type="sha256">3fd98061ccd36ac4dc2dfe7da6c60b278ca868645423c30d3ef93791bf3659b1</sum>
        </package>
        <package name="samba-client" version="4.16.4" release="103.el9_1" epoch="0" arch="s390x" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-client-4.16.4-103.el9_1.s390x.rpm</filename>
          <sum type="sha256">4f7f072484997a6b5bd8b257b912457bc8683c8c2de456e73b3c30125ac48de6</sum>
        </package>
        <package name="samba-winbind-clients" version="4.16.4" release="103.el9_1" epoch="0" arch="s390x" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-winbind-clients-4.16.4-103.el9_1.s390x.rpm</filename>
          <sum type="sha256">53d714a44f3d3588d93ed822e0461789ff6d55f468b15f55e2e1f3738f5b86d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2161</id>
    <title>Moderate: fence-agents security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 15:36:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security and bug fix update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. 

Security Fix(es):

* python-oauthlib: DoS when attacker provides malicious IPV6 URI (CVE-2022-36087)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2161" id="RHSA-2023:2161" type="rhsa" title="RHSA-2023:2161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36087" id="CVE-2022-36087" type="cve" title="CVE-2022-36087"/>
      <reference href="https://bugzilla.redhat.com/2128425" id="2128425" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2161.html" id="ALSA-2023:2161" type="self" title="ALSA-2023:2161"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="fence-agents-ibm-powervs" version="4.10.0" release="43.el9" epoch="0" arch="noarch" src="fence-agents-4.10.0-43.el9.src.rpm">
          <filename>fence-agents-ibm-powervs-4.10.0-43.el9.noarch.rpm</filename>
          <sum type="sha256">003ba1cd769dfb6f5b67097c7fe03923f6277475d9c23316be410989698a50e7</sum>
        </package>
        <package name="fence-agents-common" version="4.10.0" release="43.el9" epoch="0" arch="noarch" src="fence-agents-4.10.0-43.el9.src.rpm">
          <filename>fence-agents-common-4.10.0-43.el9.noarch.rpm</filename>
          <sum type="sha256">84b299610a1c9a40dbebb1b47d93a2857b183cfe8c3a337d96e095f26b569271</sum>
        </package>
        <package name="fence-agents-virsh" version="4.10.0" release="43.el9" epoch="0" arch="noarch" src="fence-agents-4.10.0-43.el9.src.rpm">
          <filename>fence-agents-virsh-4.10.0-43.el9.noarch.rpm</filename>
          <sum type="sha256">a20ed002a18cb9e7f36e202b90abad255cbbce18324b2bf1e38e22d5a1c37b1c</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.10.0" release="43.el9" epoch="0" arch="s390x" src="fence-agents-4.10.0-43.el9.src.rpm">
          <filename>fence-agents-kubevirt-4.10.0-43.el9.s390x.rpm</filename>
          <sum type="sha256">eae1582175ef8f4afbd1b8381cb0d3dad2f5958df5f32d8483633747950aa7fd</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.10.0" release="43.el9" epoch="0" arch="noarch" src="fence-agents-4.10.0-43.el9.src.rpm">
          <filename>fence-agents-ibm-vpc-4.10.0-43.el9.noarch.rpm</filename>
          <sum type="sha256">fb84d450a5beaa0f0427ac9735b6cb926017afbbcf407a7a389da3cdfa6141e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2162</id>
    <title>Moderate: qemu-kvm security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 16:34:36"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qemu-kvm security, bug fix, and enhancement update</summary>
    <description>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

The following packages have been upgraded to a later upstream version: qemu-kvm (7.2.0). (BZ#2111769, BZ#2135806)

Security Fix(es):

* QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion (CVE-2022-3165)
* QEMU: ACPI ERST: memory corruption issues in read_erst_record and write_erst_record (CVE-2022-4172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2162" id="RHSA-2023:2162" type="rhsa" title="RHSA-2023:2162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3165" id="CVE-2022-3165" type="cve" title="CVE-2022-3165"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4172" id="CVE-2022-4172" type="cve" title="CVE-2022-4172"/>
      <reference href="https://bugzilla.redhat.com/2129739" id="2129739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2149105" id="2149105" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2162.html" id="ALSA-2023:2162" type="self" title="ALSA-2023:2162"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="qemu-kvm-audio-pa" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-kvm-audio-pa-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">0df656eef9715fa73ffd9bf4dc21e4d38ef4820f24909026c3919975f1d6240e</sum>
        </package>
        <package name="qemu-pr-helper" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-pr-helper-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">0e6cfb2775290406a40c5a2c943ee20b3199709b32f08883c7e6e25ed168234d</sum>
        </package>
        <package name="qemu-kvm-docs" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-kvm-docs-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">1a35e502d4e2c21df48baaf545f8c599c20724c9c74d2db0178f449c691afd2d</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-kvm-block-rbd-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">2de285fb8fa22581db13ec9c2015f63a6af3c9a05023f0b6a20a6dfd4bfe73cd</sum>
        </package>
        <package name="qemu-kvm-tools" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-kvm-tools-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">32346af0d8911f644bd271dbb0ef27dc59532520a2e330531a7caf18dc021a67</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">498512a150f92f3fa34749515db40840a624eae9880a9ddfd7847ce5e9b47727</sum>
        </package>
        <package name="qemu-kvm-device-usb-host" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-kvm-device-usb-host-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">5ba3c809701a24d5df99fab7770618969f528ddede747bf6189a812cf7bb77d8</sum>
        </package>
        <package name="qemu-guest-agent" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-guest-agent-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">715ae3725a22df4d036c16b11feba3507e403b65011af1fdfd5401dd1b104000</sum>
        </package>
        <package name="qemu-img" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-img-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">a8cf540ef6a0b71af07094da5b592c7813caaa0efa0b907aeb1fc8f526ddf0e9</sum>
        </package>
        <package name="qemu-kvm-core" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-kvm-core-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">ac313902cf3622194198dc76e9463231cdfbb762a8b8dcdf84bea245253b0708</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-kvm-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">b0ba02187df75c14180006c7b7d3067a926697100d5c1b82bb102de6df614c21</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-kvm-block-curl-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">b3a3f8762a25c92882429306a7cef2b2f9e62e272fb612b6c022443376243c7e</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu-ccw" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-ccw-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">c02d4daa990e9a6d321351c7cd3a7a9a0b832cc894abbeabd3b3417b85740e13</sum>
        </package>
        <package name="qemu-kvm-common" version="7.2.0" release="14.el9_2" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.src.rpm">
          <filename>qemu-kvm-common-7.2.0-14.el9_2.s390x.rpm</filename>
          <sum type="sha256">f35ae42f999a666613cb26ed07c7151eef9d4c820f18d60d63ae93b210387253</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2166</id>
    <title>Moderate: freeradius security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 17:13:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freeradius security and bug fix update</summary>
    <description>FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

* freeradius: Information leakage in EAP-PWD (CVE-2022-41859)
* freeradius: Crash on unknown option in EAP-SIM (CVE-2022-41860)
* freeradius: Crash on invalid abinary data (CVE-2022-41861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2166" id="RHSA-2023:2166" type="rhsa" title="RHSA-2023:2166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41859" id="CVE-2022-41859" type="cve" title="CVE-2022-41859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41860" id="CVE-2022-41860" type="cve" title="CVE-2022-41860"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41861" id="CVE-2022-41861" type="cve" title="CVE-2022-41861"/>
      <reference href="https://bugzilla.redhat.com/2078483" id="2078483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078485" id="2078485" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078487" id="2078487" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2166.html" id="ALSA-2023:2166" type="self" title="ALSA-2023:2166"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="freeradius-krb5" version="3.0.21" release="37.el9" epoch="0" arch="s390x" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-krb5-3.0.21-37.el9.s390x.rpm</filename>
          <sum type="sha256">52478132427bf722ef535350ccaafade02a5b49181a8f712f784421537231500</sum>
        </package>
        <package name="freeradius-doc" version="3.0.21" release="37.el9" epoch="0" arch="s390x" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-doc-3.0.21-37.el9.s390x.rpm</filename>
          <sum type="sha256">7320ec4f6db7d45b1213db1de0c1a4103128c439ecae44ae03ed38dcd713dfeb</sum>
        </package>
        <package name="freeradius-ldap" version="3.0.21" release="37.el9" epoch="0" arch="s390x" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-ldap-3.0.21-37.el9.s390x.rpm</filename>
          <sum type="sha256">738560c6cfdeab6b071de6fb374355e1e4ce6b3fa51f5c80bb994683c0a28819</sum>
        </package>
        <package name="freeradius-utils" version="3.0.21" release="37.el9" epoch="0" arch="s390x" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-utils-3.0.21-37.el9.s390x.rpm</filename>
          <sum type="sha256">79c2729c08d30b41e2a3d1219a547a90929594a67b5ad878db2a26a2bb7214a4</sum>
        </package>
        <package name="freeradius" version="3.0.21" release="37.el9" epoch="0" arch="s390x" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-3.0.21-37.el9.s390x.rpm</filename>
          <sum type="sha256">c954b52e5b6300e1829bf7543b01e9fc8bceb07ee42b4b8948700d3e435105b8</sum>
        </package>
        <package name="freeradius-devel" version="3.0.21" release="37.el9" epoch="0" arch="s390x" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-devel-3.0.21-37.el9.s390x.rpm</filename>
          <sum type="sha256">cd6c6fd85966f10e9ae6e61cd49f74b8c549f6febdc94ad4b87f90a66ea6b112</sum>
        </package>
        <package name="python3-freeradius" version="3.0.21" release="37.el9" epoch="0" arch="s390x" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>python3-freeradius-3.0.21-37.el9.s390x.rpm</filename>
          <sum type="sha256">cfb2d49838ed3adc523cbd99265cadb52e76e5fb5d5b4254416f81433348685a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2167</id>
    <title>Moderate: grafana security and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 17:41:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security and enhancement update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB. 

Security Fix(es):

* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
* grafana: Escalation from admin to server admin when auth proxy is used (CVE-2022-35957)
* grafana: using email as a username can block other users from signing in (CVE-2022-39229)
* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2167" id="RHSA-2023:2167" type="rhsa" title="RHSA-2023:2167"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27664" id="CVE-2022-27664" type="cve" title="CVE-2022-27664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2880" id="CVE-2022-2880" type="cve" title="CVE-2022-2880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35957" id="CVE-2022-35957" type="cve" title="CVE-2022-35957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39229" id="CVE-2022-39229" type="cve" title="CVE-2022-39229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41715" id="CVE-2022-41715" type="cve" title="CVE-2022-41715"/>
      <reference href="https://bugzilla.redhat.com/2124669" id="2124669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2125514" id="2125514" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2131149" id="2131149" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132868" id="2132868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132872" id="2132872" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2167.html" id="ALSA-2023:2167" type="self" title="ALSA-2023:2167"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="grafana" version="9.0.9" release="2.el9" epoch="0" arch="s390x" src="grafana-9.0.9-2.el9.src.rpm">
          <filename>grafana-9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">0696a8d7068e4231925094e4e703a35cf2a88ca99d3476bbf7329d667a8f5c31</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2177</id>
    <title>Moderate: grafana-pcp security and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 12:18:28"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana-pcp security and enhancement update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.

Security Fix(es):

* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2177" id="RHSA-2023:2177" type="rhsa" title="RHSA-2023:2177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27664" id="CVE-2022-27664" type="cve" title="CVE-2022-27664"/>
      <reference href="https://bugzilla.redhat.com/2124669" id="2124669" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2177.html" id="ALSA-2023:2177" type="self" title="ALSA-2023:2177"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="grafana-pcp" version="5.1.1" release="1.el9" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-1.el9.src.rpm">
          <filename>grafana-pcp-5.1.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">ff79cd2582d6f79be1916532fb57ef4b1a18f3f555cae0b692bd16cc7234d92a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2179</id>
    <title>Moderate: libguestfs-winsupport security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 12:18:28"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libguestfs-winsupport security update</summary>
    <description>The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and libraries allowing users to access and modify virtual machine (VM) disk images.

Security Fix(es):

* ntfs-3g: heap-based buffer overflow in ntfsck (CVE-2021-46790)
* ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value (CVE-2022-30784)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate (CVE-2022-30786)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc (CVE-2022-30788)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array (CVE-2022-30789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2179" id="RHSA-2023:2179" type="rhsa" title="RHSA-2023:2179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46790" id="CVE-2021-46790" type="cve" title="CVE-2021-46790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30784" id="CVE-2022-30784" type="cve" title="CVE-2022-30784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30786" id="CVE-2022-30786" type="cve" title="CVE-2022-30786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30788" id="CVE-2022-30788" type="cve" title="CVE-2022-30788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30789" id="CVE-2022-30789" type="cve" title="CVE-2022-30789"/>
      <reference href="https://bugzilla.redhat.com/2093314" id="2093314" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093326" id="2093326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093340" id="2093340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093348" id="2093348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093358" id="2093358" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2179.html" id="ALSA-2023:2179" type="self" title="ALSA-2023:2179"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libguestfs-winsupport" version="9.2" release="1.el9" epoch="0" arch="s390x" src="libguestfs-winsupport-9.2-1.el9.src.rpm">
          <filename>libguestfs-winsupport-9.2-1.el9.s390x.rpm</filename>
          <sum type="sha256">78f47919ebf8581920dc6abadfaa3300cc42dfdf528f5628897e84b8b32b364a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2193</id>
    <title>Moderate: butane security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 12:18:28"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>butane security, bug fix, and enhancement update</summary>
    <description>Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition.

The following packages have been upgraded to a later upstream version: butane (0.16.0). (BZ#2135475)

Security Fix(es):

* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2193" id="RHSA-2023:2193" type="rhsa" title="RHSA-2023:2193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27664" id="CVE-2022-27664" type="cve" title="CVE-2022-27664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32189" id="CVE-2022-32189" type="cve" title="CVE-2022-32189"/>
      <reference href="https://bugzilla.redhat.com/2113814" id="2113814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2124669" id="2124669" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2193.html" id="ALSA-2023:2193" type="self" title="ALSA-2023:2193"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="butane" version="0.16.0" release="1.el9" epoch="0" arch="s390x" src="butane-0.16.0-1.el9.src.rpm">
          <filename>butane-0.16.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">21b1fcc1b474851d30ede795515fa0a793f8a83378626c6b8c247e7fc167b6c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2202</id>
    <title>Moderate: frr security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 12:19:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>frr security, bug fix, and enhancement update</summary>
    <description>FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. 

The following packages have been upgraded to a later upstream version: frr (8.3.1). (BZ#2129731)

Security Fix(es):

* frr: out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service (CVE-2022-37032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2202" id="RHSA-2023:2202" type="rhsa" title="RHSA-2023:2202"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37032" id="CVE-2022-37032" type="cve" title="CVE-2022-37032"/>
      <reference href="https://bugzilla.redhat.com/2128713" id="2128713" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2202.html" id="ALSA-2023:2202" type="self" title="ALSA-2023:2202"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="frr-selinux" version="8.3.1" release="5.el9" epoch="0" arch="noarch" src="frr-8.3.1-5.el9.src.rpm">
          <filename>frr-selinux-8.3.1-5.el9.noarch.rpm</filename>
          <sum type="sha256">48dd31748b80d33523d32a8bf40f0b9b0890940de43306fca30e429d7f8b5832</sum>
        </package>
        <package name="frr" version="8.3.1" release="5.el9" epoch="0" arch="s390x" src="frr-8.3.1-5.el9.src.rpm">
          <filename>frr-8.3.1-5.el9.s390x.rpm</filename>
          <sum type="sha256">eadd4dcb234ea7d276c4c6a37417dcf2124be5ff07156d50fa9dff2cc5439e37</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2204</id>
    <title>Moderate: Image Builder security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 13:23:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>Image Builder security, bug fix, and enhancement update</summary>
    <description>Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood.

Security Fix(es):

* golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)
* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)
* golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2204" id="RHSA-2023:2204" type="rhsa" title="RHSA-2023:2204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27664" id="CVE-2022-27664" type="cve" title="CVE-2022-27664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2879" id="CVE-2022-2879" type="cve" title="CVE-2022-2879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2880" id="CVE-2022-2880" type="cve" title="CVE-2022-2880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41715" id="CVE-2022-41715" type="cve" title="CVE-2022-41715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41717" id="CVE-2022-41717" type="cve" title="CVE-2022-41717"/>
      <reference href="https://bugzilla.redhat.com/2124669" id="2124669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132867" id="2132867" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132868" id="2132868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132872" id="2132872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161274" id="2161274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2204.html" id="ALSA-2023:2204" type="self" title="ALSA-2023:2204"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="osbuild-composer" version="76" release="2.el9_2.alma" epoch="0" arch="s390x" src="osbuild-composer-76-2.el9_2.alma.src.rpm">
          <filename>osbuild-composer-76-2.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">0ec27bf7233cc110fdbe3d0b4423cd903714258eb2db06c91672fdf71df59d25</sum>
        </package>
        <package name="weldr-client" version="35.9" release="1.el9" epoch="0" arch="s390x" src="weldr-client-35.9-1.el9.src.rpm">
          <filename>weldr-client-35.9-1.el9.s390x.rpm</filename>
          <sum type="sha256">1363987722103df7684ce456cb5ef2033d89cffe9b1c86db83e752ea1c040579</sum>
        </package>
        <package name="osbuild-composer-core" version="76" release="2.el9_2.alma" epoch="0" arch="s390x" src="osbuild-composer-76-2.el9_2.alma.src.rpm">
          <filename>osbuild-composer-core-76-2.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">3c8e3df36178b4082144c07476d3db46a883b5c5a347908e8ec361f6820046f9</sum>
        </package>
        <package name="osbuild-composer-dnf-json" version="76" release="2.el9_2.alma" epoch="0" arch="s390x" src="osbuild-composer-76-2.el9_2.alma.src.rpm">
          <filename>osbuild-composer-dnf-json-76-2.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">f55857e8fda2e6b39a8ee94d196d6d16902bee5ad2094d3ecd9124d4f71a32c0</sum>
        </package>
        <package name="osbuild-composer-worker" version="76" release="2.el9_2.alma" epoch="0" arch="s390x" src="osbuild-composer-76-2.el9_2.alma.src.rpm">
          <filename>osbuild-composer-worker-76-2.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">f911f4607d0478d9836aa2e1b358222b4660f8f8b2630bd3ed2fef00c76f3f80</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2216</id>
    <title>Moderate: gdk-pixbuf2 security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 12:18:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gdk-pixbuf2 security update</summary>
    <description>The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.

Security Fix(es):

* gdk-pixbuf: heap-buffer overflow when decoding the lzw compressed stream of image data (CVE-2021-44648)
* gdk-pixbuf: heap-based buffer overflow when compositing or clearing frames in GIF files (CVE-2021-46829)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2216" id="RHSA-2023:2216" type="rhsa" title="RHSA-2023:2216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44648" id="CVE-2021-44648" type="cve" title="CVE-2021-44648"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46829" id="CVE-2021-46829" type="cve" title="CVE-2021-46829"/>
      <reference href="https://bugzilla.redhat.com/2043722" id="2043722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114940" id="2114940" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2216.html" id="ALSA-2023:2216" type="self" title="ALSA-2023:2216"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="gdk-pixbuf2-devel" version="2.42.6" release="3.el9" epoch="0" arch="s390x" src="gdk-pixbuf2-2.42.6-3.el9.src.rpm">
          <filename>gdk-pixbuf2-devel-2.42.6-3.el9.s390x.rpm</filename>
          <sum type="sha256">57ded8fdf0da2e42930df2eea2c6db621d846a8f1ad7cfd46222f05bd9d8cdf8</sum>
        </package>
        <package name="gdk-pixbuf2" version="2.42.6" release="3.el9" epoch="0" arch="s390x" src="gdk-pixbuf2-2.42.6-3.el9.src.rpm">
          <filename>gdk-pixbuf2-2.42.6-3.el9.s390x.rpm</filename>
          <sum type="sha256">73e1d7519795df27edbfd200c8176dd9362808792d259c3590a645f2f7de783b</sum>
        </package>
        <package name="gdk-pixbuf2-modules" version="2.42.6" release="3.el9" epoch="0" arch="s390x" src="gdk-pixbuf2-2.42.6-3.el9.src.rpm">
          <filename>gdk-pixbuf2-modules-2.42.6-3.el9.s390x.rpm</filename>
          <sum type="sha256">d6c933abf94176c6d8e26dfd45c16b318e244411de37c6b7e830f1550b678ec7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2222</id>
    <title>Moderate: conmon security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 12:18:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>conmon security and bug fix update</summary>
    <description>Conmon is an OCI container runtime monitor.

Security Fix(es):

* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2222" id="RHSA-2023:2222" type="rhsa" title="RHSA-2023:2222"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41717" id="CVE-2022-41717" type="cve" title="CVE-2022-41717"/>
      <reference href="https://bugzilla.redhat.com/2161274" id="2161274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2222.html" id="ALSA-2023:2222" type="self" title="ALSA-2023:2222"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="conmon" version="2.1.7" release="1.el9_2" epoch="2" arch="s390x" src="conmon-2.1.7-1.el9_2.src.rpm">
          <filename>conmon-2.1.7-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">42cd4fc6ad7bff8a9c4280be9ad49f82a4655ec8fc725ffb4a0806490b25078b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2234</id>
    <title>Moderate: sysstat security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 12:18:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sysstat security and bug fix update</summary>
    <description>The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity.

Security Fix(es):

* sysstat: arithmetic overflow in allocate_structures() on 32 bit systems (CVE-2022-39377)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2234" id="RHSA-2023:2234" type="rhsa" title="RHSA-2023:2234"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39377" id="CVE-2022-39377" type="cve" title="CVE-2022-39377"/>
      <reference href="https://bugzilla.redhat.com/2141207" id="2141207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2234.html" id="ALSA-2023:2234" type="self" title="ALSA-2023:2234"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="sysstat" version="12.5.4" release="5.el9" epoch="0" arch="s390x" src="sysstat-12.5.4-5.el9.src.rpm">
          <filename>sysstat-12.5.4-5.el9.s390x.rpm</filename>
          <sum type="sha256">3518add89885755c858def536a420c343ae8c30a30fe9f0327f56bc85c5e1471</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2236</id>
    <title>Moderate: toolbox security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 12:18:33"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>toolbox security and bug fix update</summary>
    <description>Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI.

Security Fix(es):

* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
* golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2236" id="RHSA-2023:2236" type="rhsa" title="RHSA-2023:2236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27664" id="CVE-2022-27664" type="cve" title="CVE-2022-27664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32189" id="CVE-2022-32189" type="cve" title="CVE-2022-32189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41717" id="CVE-2022-41717" type="cve" title="CVE-2022-41717"/>
      <reference href="https://bugzilla.redhat.com/2113814" id="2113814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2124669" id="2124669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161274" id="2161274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2236.html" id="ALSA-2023:2236" type="self" title="ALSA-2023:2236"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="toolbox" version="0.0.99.3" release="9.el9" epoch="0" arch="s390x" src="toolbox-0.0.99.3-9.el9.src.rpm">
          <filename>toolbox-0.0.99.3-9.el9.s390x.rpm</filename>
          <sum type="sha256">51229c7bc20a726d8ba45acea35555c4f9f08955a822eaebd6a9b7d2b90b5d12</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.3" release="9.el9" epoch="0" arch="s390x" src="toolbox-0.0.99.3-9.el9.src.rpm">
          <filename>toolbox-tests-0.0.99.3-9.el9.s390x.rpm</filename>
          <sum type="sha256">b7d39e7c2e24d14757e0341f5215c0bf5e039927447c5da27becb4970e96a8d2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2248</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 12:18:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550)
* xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)
* xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)
* xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)
* xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)
* xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)
* xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)
* xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)
* xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2248" id="RHSA-2023:2248" type="rhsa" title="RHSA-2023:2248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3550" id="CVE-2022-3550" type="cve" title="CVE-2022-3550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3551" id="CVE-2022-3551" type="cve" title="CVE-2022-3551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4283" id="CVE-2022-4283" type="cve" title="CVE-2022-4283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46340" id="CVE-2022-46340" type="cve" title="CVE-2022-46340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46341" id="CVE-2022-46341" type="cve" title="CVE-2022-46341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46342" id="CVE-2022-46342" type="cve" title="CVE-2022-46342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46343" id="CVE-2022-46343" type="cve" title="CVE-2022-46343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46344" id="CVE-2022-46344" type="cve" title="CVE-2022-46344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0494" id="CVE-2023-0494" type="cve" title="CVE-2023-0494"/>
      <reference href="https://bugzilla.redhat.com/2140698" id="2140698" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140701" id="2140701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151755" id="2151755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151756" id="2151756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151757" id="2151757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151758" id="2151758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151760" id="2151760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151761" id="2151761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165995" id="2165995" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2248.html" id="ALSA-2023:2248" type="self" title="ALSA-2023:2248"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="17.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el9.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-17.el9.s390x.rpm</filename>
          <sum type="sha256">68035ce408f99b2802854a43cc34f127a2fc97c553f6eb507c9b7d8e8b9e0769</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="17.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el9.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-17.el9.s390x.rpm</filename>
          <sum type="sha256">7fcd07e10da5c454d31dcc38176826b0e9cd357fdb91b28db850a9437d613775</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="17.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el9.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-17.el9.s390x.rpm</filename>
          <sum type="sha256">93ef713723e6dc1089d5e1a0937ef5ef3695c8347ceb6da90806913d4b7ab049</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="17.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el9.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-17.el9.s390x.rpm</filename>
          <sum type="sha256">a86f59b6efb9af87dfededd8278cc1a0a269bd3a8d20bcb3f3eacd157f07d7d8</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="17.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el9.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-17.el9.s390x.rpm</filename>
          <sum type="sha256">d7c2124349d39c831f17aacfd57429f06c7c9e853aa3149f0695fc71e6157129</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="17.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el9.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-17.el9.s390x.rpm</filename>
          <sum type="sha256">dc925c2f4926b95787fc4cd6bbd1ee6e42d881d6fbd9fe200c391304caa7d9e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2249</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 13:16:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550)
* xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)
* xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)
* xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)
* xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)
* xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)
* xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)
* xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)
* xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2249" id="RHSA-2023:2249" type="rhsa" title="RHSA-2023:2249"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3550" id="CVE-2022-3550" type="cve" title="CVE-2022-3550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3551" id="CVE-2022-3551" type="cve" title="CVE-2022-3551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4283" id="CVE-2022-4283" type="cve" title="CVE-2022-4283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46340" id="CVE-2022-46340" type="cve" title="CVE-2022-46340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46341" id="CVE-2022-46341" type="cve" title="CVE-2022-46341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46342" id="CVE-2022-46342" type="cve" title="CVE-2022-46342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46343" id="CVE-2022-46343" type="cve" title="CVE-2022-46343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46344" id="CVE-2022-46344" type="cve" title="CVE-2022-46344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0494" id="CVE-2023-0494" type="cve" title="CVE-2023-0494"/>
      <reference href="https://bugzilla.redhat.com/2140698" id="2140698" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140701" id="2140701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151755" id="2151755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151756" id="2151756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151757" id="2151757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151758" id="2151758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151760" id="2151760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151761" id="2151761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165995" id="2165995" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2249.html" id="ALSA-2023:2249" type="self" title="ALSA-2023:2249"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="7.el9" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-21.1.3-7.el9.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-7.el9.s390x.rpm</filename>
          <sum type="sha256">0de9fadda6bc1d4c64e49f3d9b8b6cc813867779cc4d69f1034a2bb191a7f334</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2253</id>
    <title>Moderate: buildah security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 09:32:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>buildah security and bug fix update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. 

Security Fix(es):

* golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2253" id="RHSA-2023:2253" type="rhsa" title="RHSA-2023:2253"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30629" id="CVE-2022-30629" type="cve" title="CVE-2022-30629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41717" id="CVE-2022-41717" type="cve" title="CVE-2022-41717"/>
      <reference href="https://bugzilla.redhat.com/2092793" id="2092793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161274" id="2161274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2253.html" id="ALSA-2023:2253" type="self" title="ALSA-2023:2253"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="buildah" version="1.29.1" release="1.el9" epoch="1" arch="s390x" src="buildah-1.29.1-1.el9.src.rpm">
          <filename>buildah-1.29.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">5996606f57a5e8357c89d8f5f274a2d28d1c50e3a6ac393ef3791c24b2e50d9f</sum>
        </package>
        <package name="buildah-tests" version="1.29.1" release="1.el9" epoch="1" arch="s390x" src="buildah-1.29.1-1.el9.src.rpm">
          <filename>buildah-tests-1.29.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">803a91a19198392e39eb4d11adbd216c241c6aa614e0f8809c6a2f8d4b6fb22d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2256</id>
    <title>Important: webkit2gtk3 security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 09:20:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security and bug fix update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518)
* webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886)
* webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888)
* webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923)
* webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799)
* webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823)
* webkitgtk: sensitive information disclosure issue (CVE-2022-42824)
* webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863)
* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691)
* webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692)
* webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2256" id="RHSA-2023:2256" type="rhsa" title="RHSA-2023:2256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32886" id="CVE-2022-32886" type="cve" title="CVE-2022-32886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32888" id="CVE-2022-32888" type="cve" title="CVE-2022-32888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32923" id="CVE-2022-32923" type="cve" title="CVE-2022-32923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42799" id="CVE-2022-42799" type="cve" title="CVE-2022-42799"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42823" id="CVE-2022-42823" type="cve" title="CVE-2022-42823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42824" id="CVE-2022-42824" type="cve" title="CVE-2022-42824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42826" id="CVE-2022-42826" type="cve" title="CVE-2022-42826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42852" id="CVE-2022-42852" type="cve" title="CVE-2022-42852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42863" id="CVE-2022-42863" type="cve" title="CVE-2022-42863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42867" id="CVE-2022-42867" type="cve" title="CVE-2022-42867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46691" id="CVE-2022-46691" type="cve" title="CVE-2022-46691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46692" id="CVE-2022-46692" type="cve" title="CVE-2022-46692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46698" id="CVE-2022-46698" type="cve" title="CVE-2022-46698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46699" id="CVE-2022-46699" type="cve" title="CVE-2022-46699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46700" id="CVE-2022-46700" type="cve" title="CVE-2022-46700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23517" id="CVE-2023-23517" type="cve" title="CVE-2023-23517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23518" id="CVE-2023-23518" type="cve" title="CVE-2023-23518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25358" id="CVE-2023-25358" type="cve" title="CVE-2023-25358"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25360" id="CVE-2023-25360" type="cve" title="CVE-2023-25360"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25361" id="CVE-2023-25361" type="cve" title="CVE-2023-25361"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25362" id="CVE-2023-25362" type="cve" title="CVE-2023-25362"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25363" id="CVE-2023-25363" type="cve" title="CVE-2023-25363"/>
      <reference href="https://bugzilla.redhat.com/2128643" id="2128643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140501" id="2140501" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140502" id="2140502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140503" id="2140503" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140504" id="2140504" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140505" id="2140505" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156986" id="2156986" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156987" id="2156987" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156989" id="2156989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156990" id="2156990" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156991" id="2156991" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156992" id="2156992" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156993" id="2156993" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156994" id="2156994" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2167715" id="2167715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2167716" id="2167716" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2167717" id="2167717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175099" id="2175099" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175101" id="2175101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175103" id="2175103" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175105" id="2175105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175107" id="2175107" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2256.html" id="ALSA-2023:2256" type="self" title="ALSA-2023:2256"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="webkit2gtk3-jsc" version="2.38.5" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9.src.rpm">
          <filename>webkit2gtk3-jsc-2.38.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">3bded3ff59ddcdc5da21913a9f28563559b631d2cc2d08cc136a0fdb268fdf99</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.38.5" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9.src.rpm">
          <filename>webkit2gtk3-devel-2.38.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">b3bcd8abe8d0f61bd1a2b8ced2a20565ea853bf4b8cd13b9a7fea74e47a1c425</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.38.5" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.38.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">df7cbc5551053afe01c48ba8f2eb99ac0603f41413b702fa5ed617ecb4065e68</sum>
        </package>
        <package name="webkit2gtk3" version="2.38.5" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9.src.rpm">
          <filename>webkit2gtk3-2.38.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">f5d21a68dcd606a335fb8ad2ce7237ba22e6fbb5c01fcb30f28c89546559bf21</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2257</id>
    <title>Moderate: tigervnc security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 09:08:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tigervnc security and bug fix update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)
* xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)
* xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)
* xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)
* xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)
* xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2257" id="RHSA-2023:2257" type="rhsa" title="RHSA-2023:2257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4283" id="CVE-2022-4283" type="cve" title="CVE-2022-4283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46340" id="CVE-2022-46340" type="cve" title="CVE-2022-46340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46341" id="CVE-2022-46341" type="cve" title="CVE-2022-46341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46342" id="CVE-2022-46342" type="cve" title="CVE-2022-46342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46343" id="CVE-2022-46343" type="cve" title="CVE-2022-46343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46344" id="CVE-2022-46344" type="cve" title="CVE-2022-46344"/>
      <reference href="https://bugzilla.redhat.com/2151755" id="2151755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151756" id="2151756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151757" id="2151757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151758" id="2151758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151760" id="2151760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151761" id="2151761" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2257.html" id="ALSA-2023:2257" type="self" title="ALSA-2023:2257"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="tigervnc-server-minimal" version="1.12.0" release="13.el9_2" epoch="0" arch="s390x" src="tigervnc-1.12.0-13.el9_2.src.rpm">
          <filename>tigervnc-server-minimal-1.12.0-13.el9_2.s390x.rpm</filename>
          <sum type="sha256">45c8bc62ee8e6b219b0dc3ba6090af12ba9e1ca4211e538effe39210199c1f01</sum>
        </package>
        <package name="tigervnc-server-module" version="1.12.0" release="13.el9_2" epoch="0" arch="s390x" src="tigervnc-1.12.0-13.el9_2.src.rpm">
          <filename>tigervnc-server-module-1.12.0-13.el9_2.s390x.rpm</filename>
          <sum type="sha256">47522241b61c15f89606bb7567cf69287a3687cc2a17ea76bd2950adeabb18b2</sum>
        </package>
        <package name="tigervnc" version="1.12.0" release="13.el9_2" epoch="0" arch="s390x" src="tigervnc-1.12.0-13.el9_2.src.rpm">
          <filename>tigervnc-1.12.0-13.el9_2.s390x.rpm</filename>
          <sum type="sha256">6cb58c4d2d3be066630ba7639065ad2f129b5a98707687991c2328f61ea733f9</sum>
        </package>
        <package name="tigervnc-icons" version="1.12.0" release="13.el9_2" epoch="0" arch="noarch" src="tigervnc-1.12.0-13.el9_2.src.rpm">
          <filename>tigervnc-icons-1.12.0-13.el9_2.noarch.rpm</filename>
          <sum type="sha256">7639bb9bfa5a418dbb416785f31cf16899a54d4618e0c83b66bfd984761ed1a4</sum>
        </package>
        <package name="tigervnc-license" version="1.12.0" release="13.el9_2" epoch="0" arch="noarch" src="tigervnc-1.12.0-13.el9_2.src.rpm">
          <filename>tigervnc-license-1.12.0-13.el9_2.noarch.rpm</filename>
          <sum type="sha256">831eff733daac545f21e1414cc9479dfc1b50a1e9dcab5e45b24d024e7bfca3c</sum>
        </package>
        <package name="tigervnc-server" version="1.12.0" release="13.el9_2" epoch="0" arch="s390x" src="tigervnc-1.12.0-13.el9_2.src.rpm">
          <filename>tigervnc-server-1.12.0-13.el9_2.s390x.rpm</filename>
          <sum type="sha256">a9990f4401a3ff0d6a27fb2bd36938327882b01baf8b7533a8b886c8cb1f81b1</sum>
        </package>
        <package name="tigervnc-selinux" version="1.12.0" release="13.el9_2" epoch="0" arch="noarch" src="tigervnc-1.12.0-13.el9_2.src.rpm">
          <filename>tigervnc-selinux-1.12.0-13.el9_2.noarch.rpm</filename>
          <sum type="sha256">e9b0a7560481052f404e85eabcea26f8ddb5bf6c776c00da92545c70f2dfd578</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2258</id>
    <title>Moderate: python-mako security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 08:53:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-mako security update</summary>
    <description>Mako is a template library written in Python. It provides a familiar, non-XML syntax which compiles into Python modules for maximum performance.

Security Fix(es):

* python-mako: REDoS in Lexer class (CVE-2022-40023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2258" id="RHSA-2023:2258" type="rhsa" title="RHSA-2023:2258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40023" id="CVE-2022-40023" type="cve" title="CVE-2022-40023"/>
      <reference href="https://bugzilla.redhat.com/2128977" id="2128977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2258.html" id="ALSA-2023:2258" type="self" title="ALSA-2023:2258"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="python3-mako" version="1.1.4" release="6.el9" epoch="0" arch="noarch" src="python-mako-1.1.4-6.el9.src.rpm">
          <filename>python3-mako-1.1.4-6.el9.noarch.rpm</filename>
          <sum type="sha256">87df3d16e78b6d737409258c82f6cdb53c0949dfb9adeb3cd2d9d280ce255fd3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2259</id>
    <title>Moderate: poppler security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 08:29:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security and bug fix update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2259" id="RHSA-2023:2259" type="rhsa" title="RHSA-2023:2259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38784" id="CVE-2022-38784" type="cve" title="CVE-2022-38784"/>
      <reference href="https://bugzilla.redhat.com/2124527" id="2124527" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2259.html" id="ALSA-2023:2259" type="self" title="ALSA-2023:2259"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="poppler" version="21.01.0" release="14.el9" epoch="0" arch="s390x" src="poppler-21.01.0-14.el9.src.rpm">
          <filename>poppler-21.01.0-14.el9.s390x.rpm</filename>
          <sum type="sha256">219fab78fdf3efa4645401b1b435a8af417c67cff1bbd1053e41215287bfd6ad</sum>
        </package>
        <package name="poppler-cpp" version="21.01.0" release="14.el9" epoch="0" arch="s390x" src="poppler-21.01.0-14.el9.src.rpm">
          <filename>poppler-cpp-21.01.0-14.el9.s390x.rpm</filename>
          <sum type="sha256">60ba60b8e6c18c4a693ffee0ac90128991587c219d3a0a10b684b1f88e0a42d4</sum>
        </package>
        <package name="poppler-glib" version="21.01.0" release="14.el9" epoch="0" arch="s390x" src="poppler-21.01.0-14.el9.src.rpm">
          <filename>poppler-glib-21.01.0-14.el9.s390x.rpm</filename>
          <sum type="sha256">9200e7ab3253c3c00f6370312e2755921c87f837f0cd3896069957ef45a150c9</sum>
        </package>
        <package name="poppler-utils" version="21.01.0" release="14.el9" epoch="0" arch="s390x" src="poppler-21.01.0-14.el9.src.rpm">
          <filename>poppler-utils-21.01.0-14.el9.s390x.rpm</filename>
          <sum type="sha256">945523f06249314908f21058a4b12d51497bef7f2198a15900b6e87a692e0fa9</sum>
        </package>
        <package name="poppler-qt5" version="21.01.0" release="14.el9" epoch="0" arch="s390x" src="poppler-21.01.0-14.el9.src.rpm">
          <filename>poppler-qt5-21.01.0-14.el9.s390x.rpm</filename>
          <sum type="sha256">e3b7908957e9ac6fb3f5d5f556141bc56b2ffb69766a747cfaba2a1ceaba6d61</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2260</id>
    <title>Moderate: gstreamer1-plugins-good security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 08:16:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-good security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

* gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920)
* gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files (CVE-2022-1921)
* gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression (CVE-2022-1922)
* gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression (CVE-2022-1923)
* gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression (CVE-2022-1924)
* gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression (CVE-2022-1925)
* gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression (CVE-2022-2122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2260" id="RHSA-2023:2260" type="rhsa" title="RHSA-2023:2260"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1920" id="CVE-2022-1920" type="cve" title="CVE-2022-1920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1921" id="CVE-2022-1921" type="cve" title="CVE-2022-1921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1922" id="CVE-2022-1922" type="cve" title="CVE-2022-1922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1923" id="CVE-2022-1923" type="cve" title="CVE-2022-1923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1924" id="CVE-2022-1924" type="cve" title="CVE-2022-1924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1925" id="CVE-2022-1925" type="cve" title="CVE-2022-1925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2122" id="CVE-2022-2122" type="cve" title="CVE-2022-2122"/>
      <reference href="https://bugzilla.redhat.com/2130935" id="2130935" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130949" id="2130949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130955" id="2130955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130959" id="2130959" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2131003" id="2131003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2131007" id="2131007" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2131018" id="2131018" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2260.html" id="ALSA-2023:2260" type="self" title="ALSA-2023:2260"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="gstreamer1-plugins-good-gtk" version="1.18.4" release="6.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.18.4-6.el9.src.rpm">
          <filename>gstreamer1-plugins-good-gtk-1.18.4-6.el9.s390x.rpm</filename>
          <sum type="sha256">7e003330072f1b390a597ea7dba37121dcb57c6c285d223e934da036c493d363</sum>
        </package>
        <package name="gstreamer1-plugins-good" version="1.18.4" release="6.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.18.4-6.el9.src.rpm">
          <filename>gstreamer1-plugins-good-1.18.4-6.el9.s390x.rpm</filename>
          <sum type="sha256">d959fb3d2b3c7df6cfb10855d02200b8bd358b6d4c1bddba11caa4fba4a0ef81</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2261</id>
    <title>Moderate: bind security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 07:55:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bind security and bug fix update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795)
* bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094)
* bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3736)
* bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3924)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2261" id="RHSA-2023:2261" type="rhsa" title="RHSA-2023:2261"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2795" id="CVE-2022-2795" type="cve" title="CVE-2022-2795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3094" id="CVE-2022-3094" type="cve" title="CVE-2022-3094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3736" id="CVE-2022-3736" type="cve" title="CVE-2022-3736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3924" id="CVE-2022-3924" type="cve" title="CVE-2022-3924"/>
      <reference href="https://bugzilla.redhat.com/2128584" id="2128584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164032" id="2164032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164038" id="2164038" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164039" id="2164039" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2261.html" id="ALSA-2023:2261" type="self" title="ALSA-2023:2261"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="bind-license" version="9.16.23" release="11.el9" epoch="32" arch="noarch" src="bind-9.16.23-11.el9.src.rpm">
          <filename>bind-license-9.16.23-11.el9.noarch.rpm</filename>
          <sum type="sha256">081ed63b5d5a469a4aa4c6c6ce5becfc91d96265c13d206acaf8d4f8fcb978a3</sum>
        </package>
        <package name="python3-bind" version="9.16.23" release="11.el9" epoch="32" arch="noarch" src="bind-9.16.23-11.el9.src.rpm">
          <filename>python3-bind-9.16.23-11.el9.noarch.rpm</filename>
          <sum type="sha256">1015d08bfc1d080cbe3bd6df98e2fb3e44bae0abd58dc1cc47e2232a649d637e</sum>
        </package>
        <package name="bind-dnssec-doc" version="9.16.23" release="11.el9" epoch="32" arch="noarch" src="bind-9.16.23-11.el9.src.rpm">
          <filename>bind-dnssec-doc-9.16.23-11.el9.noarch.rpm</filename>
          <sum type="sha256">35bcaf2195ea1447d653c44080d8c2e57bb8124046c022066cd6796b4d377442</sum>
        </package>
        <package name="bind-utils" version="9.16.23" release="11.el9" epoch="32" arch="s390x" src="bind-9.16.23-11.el9.src.rpm">
          <filename>bind-utils-9.16.23-11.el9.s390x.rpm</filename>
          <sum type="sha256">9ee2a93cd4b54ef72fc0a8cfdf47713868acb048dacf106ef726806606a64a6d</sum>
        </package>
        <package name="bind-chroot" version="9.16.23" release="11.el9" epoch="32" arch="s390x" src="bind-9.16.23-11.el9.src.rpm">
          <filename>bind-chroot-9.16.23-11.el9.s390x.rpm</filename>
          <sum type="sha256">b33fd37735e4828782d8c368cd03eb6a77b142255fe29af858bfd4744d00b68c</sum>
        </package>
        <package name="bind" version="9.16.23" release="11.el9" epoch="32" arch="s390x" src="bind-9.16.23-11.el9.src.rpm">
          <filename>bind-9.16.23-11.el9.s390x.rpm</filename>
          <sum type="sha256">bd614d2aec8ca564924eb0c06ca918cb0980bc7fcb9eee37e0b5136ada15b91b</sum>
        </package>
        <package name="bind-libs" version="9.16.23" release="11.el9" epoch="32" arch="s390x" src="bind-9.16.23-11.el9.src.rpm">
          <filename>bind-libs-9.16.23-11.el9.s390x.rpm</filename>
          <sum type="sha256">dc8cbbe85dc08f0c86259981dc7fb7d3f623783c8811f5c9b4012653b208d149</sum>
        </package>
        <package name="bind-dnssec-utils" version="9.16.23" release="11.el9" epoch="32" arch="s390x" src="bind-9.16.23-11.el9.src.rpm">
          <filename>bind-dnssec-utils-9.16.23-11.el9.s390x.rpm</filename>
          <sum type="sha256">eceab7c29d18e2dd6030b641612c5c094b9c9391a36b426b1b201ea54e3efae7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2282</id>
    <title>Moderate: podman security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 07:42:38"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>podman security and bug fix update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2282" id="RHSA-2023:2282" type="rhsa" title="RHSA-2023:2282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30629" id="CVE-2022-30629" type="cve" title="CVE-2022-30629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41717" id="CVE-2022-41717" type="cve" title="CVE-2022-41717"/>
      <reference href="https://bugzilla.redhat.com/2092793" id="2092793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161274" id="2161274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2282.html" id="ALSA-2023:2282" type="self" title="ALSA-2023:2282"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="podman-remote" version="4.4.1" release="3.el9" epoch="2" arch="s390x" src="podman-4.4.1-3.el9.src.rpm">
          <filename>podman-remote-4.4.1-3.el9.s390x.rpm</filename>
          <sum type="sha256">27e3062ad967d456e91c104554406df3547965b187e92edfc1c75ea345face21</sum>
        </package>
        <package name="podman-plugins" version="4.4.1" release="3.el9" epoch="2" arch="s390x" src="podman-4.4.1-3.el9.src.rpm">
          <filename>podman-plugins-4.4.1-3.el9.s390x.rpm</filename>
          <sum type="sha256">9790c7f55263164890931e50418bb3424b2f08d881a088c23ce2dfe95f1b78de</sum>
        </package>
        <package name="podman-gvproxy" version="4.4.1" release="3.el9" epoch="2" arch="s390x" src="podman-4.4.1-3.el9.src.rpm">
          <filename>podman-gvproxy-4.4.1-3.el9.s390x.rpm</filename>
          <sum type="sha256">9d9db1f4f9ba960259e730f1f2bd1ae1e38f1ea3e3185afc3c3780388bd3c087</sum>
        </package>
        <package name="podman-tests" version="4.4.1" release="3.el9" epoch="2" arch="s390x" src="podman-4.4.1-3.el9.src.rpm">
          <filename>podman-tests-4.4.1-3.el9.s390x.rpm</filename>
          <sum type="sha256">bef6bbcf28e29a23e38149acb4c192ab7ca6518424265950c9f0e393733c4d70</sum>
        </package>
        <package name="podman-docker" version="4.4.1" release="3.el9" epoch="2" arch="noarch" src="podman-4.4.1-3.el9.src.rpm">
          <filename>podman-docker-4.4.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">e448deef45fcc9ba8e0d73412d3db5a6ac11b8efc3cecdd29f8f8f2f56e7552f</sum>
        </package>
        <package name="podman" version="4.4.1" release="3.el9" epoch="2" arch="s390x" src="podman-4.4.1-3.el9.src.rpm">
          <filename>podman-4.4.1-3.el9.s390x.rpm</filename>
          <sum type="sha256">f89c400a65e51fda33e7ae6035c9d8dae101db6264792fcdbbd4a208c3b2bd4a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2283</id>
    <title>Moderate: skopeo security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 07:32:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>skopeo security and bug fix update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. 

Security Fix(es):

* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2283" id="RHSA-2023:2283" type="rhsa" title="RHSA-2023:2283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30629" id="CVE-2022-30629" type="cve" title="CVE-2022-30629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41717" id="CVE-2022-41717" type="cve" title="CVE-2022-41717"/>
      <reference href="https://bugzilla.redhat.com/2092793" id="2092793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161274" id="2161274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2283.html" id="ALSA-2023:2283" type="self" title="ALSA-2023:2283"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="skopeo" version="1.11.2" release="0.1.el9" epoch="2" arch="s390x" src="skopeo-1.11.2-0.1.el9.src.rpm">
          <filename>skopeo-1.11.2-0.1.el9.s390x.rpm</filename>
          <sum type="sha256">91bb9b7bc7a6f9a0200a7a0dd9fd833f11c955584db6d26ec9a30048a7045dba</sum>
        </package>
        <package name="skopeo-tests" version="1.11.2" release="0.1.el9" epoch="2" arch="s390x" src="skopeo-1.11.2-0.1.el9.src.rpm">
          <filename>skopeo-tests-1.11.2-0.1.el9.s390x.rpm</filename>
          <sum type="sha256">e38efdc7abc3a47e40102d42c0fb7cac86008fcf7b7eae215f68664d68b8ba22</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2293</id>
    <title>Moderate: pki-core security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 07:26:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>pki-core security, bug fix, and enhancement update</summary>
    <description>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

* pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field (CVE-2022-2393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2293" id="RHSA-2023:2293" type="rhsa" title="RHSA-2023:2293"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2393" id="CVE-2022-2393" type="cve" title="CVE-2022-2393"/>
      <reference href="https://bugzilla.redhat.com/2101046" id="2101046" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2293.html" id="ALSA-2023:2293" type="self" title="ALSA-2023:2293"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="idm-pki-ca" version="11.3.0" release="1.el9" epoch="0" arch="noarch" src="pki-core-11.3.0-1.el9.src.rpm">
          <filename>idm-pki-ca-11.3.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">1aa86b42762e59396be9dfd98f1573408a841a80efcbfaaba5bd29098f8d44ee</sum>
        </package>
        <package name="idm-pki-tools" version="11.3.0" release="1.el9" epoch="0" arch="s390x" src="pki-core-11.3.0-1.el9.src.rpm">
          <filename>idm-pki-tools-11.3.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">2eda3f2e8979a6b723d7664d784b696847775edbc46327848f80ebfc6244c982</sum>
        </package>
        <package name="idm-pki-base" version="11.3.0" release="1.el9" epoch="0" arch="noarch" src="pki-core-11.3.0-1.el9.src.rpm">
          <filename>idm-pki-base-11.3.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">4335559cc9154417a4c913ea4408d4b9b20fd7fbb8b02d20261f445ce17ad820</sum>
        </package>
        <package name="idm-pki-server" version="11.3.0" release="1.el9" epoch="0" arch="noarch" src="pki-core-11.3.0-1.el9.src.rpm">
          <filename>idm-pki-server-11.3.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">699890ee224b32fee8cd5bd661087f0f81ada5e51ad88d5bfb4e22f07e334ad3</sum>
        </package>
        <package name="idm-pki-kra" version="11.3.0" release="1.el9" epoch="0" arch="noarch" src="pki-core-11.3.0-1.el9.src.rpm">
          <filename>idm-pki-kra-11.3.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">7b3ffae57c4f39d6ac35c295ff763e0de9c2c9397cc172314341b4bf78b6604b</sum>
        </package>
        <package name="python3-idm-pki" version="11.3.0" release="1.el9" epoch="0" arch="noarch" src="pki-core-11.3.0-1.el9.src.rpm">
          <filename>python3-idm-pki-11.3.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">91a057affd429536485172e1256b7e7eeb490d61a090fa840f356e5bba054fa6</sum>
        </package>
        <package name="idm-pki-est" version="11.3.0" release="1.el9" epoch="0" arch="noarch" src="pki-core-11.3.0-1.el9.src.rpm">
          <filename>idm-pki-est-11.3.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">a6cd83adb3db223611ad1de515ece9ebb4ad9030520c3824a9af77f00c39d624</sum>
        </package>
        <package name="idm-pki-java" version="11.3.0" release="1.el9" epoch="0" arch="noarch" src="pki-core-11.3.0-1.el9.src.rpm">
          <filename>idm-pki-java-11.3.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">afb1c2e1f62ffc34c2afb30809ce9c0cb38245db47dd12fca4d4bff4a54bf1fe</sum>
        </package>
        <package name="idm-pki-acme" version="11.3.0" release="1.el9" epoch="0" arch="noarch" src="pki-core-11.3.0-1.el9.src.rpm">
          <filename>idm-pki-acme-11.3.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">b6962a25e271cd56c33a8ee8e7da33e01c55a2a41d0de1d2358be1fddc7a5dc6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2312</id>
    <title>Moderate: jackson security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 07:12:28"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>jackson security update</summary>
    <description>Jackson is a suite of data-processing tools for Java, including the flagship streaming JSON parser / generator library, matching data-binding library, and additional modules to process data encoded in various other data formats.

Security Fix(es):

* jackson-databind: denial of service via a large depth of nested objects (CVE-2020-36518)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2312" id="RHSA-2023:2312" type="rhsa" title="RHSA-2023:2312"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36518" id="CVE-2020-36518" type="cve" title="CVE-2020-36518"/>
      <reference href="https://bugzilla.redhat.com/2064698" id="2064698" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2312.html" id="ALSA-2023:2312" type="self" title="ALSA-2023:2312"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="pki-jackson-databind" version="2.14.1" release="2.el9" epoch="0" arch="noarch" src="jackson-databind-2.14.1-2.el9.src.rpm">
          <filename>pki-jackson-databind-2.14.1-2.el9.noarch.rpm</filename>
          <sum type="sha256">da28784a41fd010e96065fdf2a2dc83360004f68ea9615c72e57e671cfba7fbd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2319</id>
    <title>Moderate: git security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 07:01:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>git security and bug fix update</summary>
    <description>Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.

Security Fix(es):

* git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree (CVE-2022-24765)
* git: Bypass of safe.directory protections (CVE-2022-29187)
* git: exposure of sensitive information to a malicious actor (CVE-2022-39253)
* git: git shell function that splits command arguments can lead to arbitrary heap writes. (CVE-2022-39260)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2319" id="RHSA-2023:2319" type="rhsa" title="RHSA-2023:2319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24765" id="CVE-2022-24765" type="cve" title="CVE-2022-24765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29187" id="CVE-2022-29187" type="cve" title="CVE-2022-29187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39253" id="CVE-2022-39253" type="cve" title="CVE-2022-39253"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39260" id="CVE-2022-39260" type="cve" title="CVE-2022-39260"/>
      <reference href="https://bugzilla.redhat.com/2073414" id="2073414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107439" id="2107439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2137422" id="2137422" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2137423" id="2137423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2319.html" id="ALSA-2023:2319" type="self" title="ALSA-2023:2319"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="git-email" version="2.39.1" release="1.el9" epoch="0" arch="noarch" src="git-2.39.1-1.el9.src.rpm">
          <filename>git-email-2.39.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">06c5197bbb46f5f456332cf8ec8e64c088e7d9c7bd7fbd3f5be6febe4c10e3d3</sum>
        </package>
        <package name="git-all" version="2.39.1" release="1.el9" epoch="0" arch="noarch" src="git-2.39.1-1.el9.src.rpm">
          <filename>git-all-2.39.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">0ceda64a7e43f550ddd1e929e2be7bf62c433494b764bff188f0cc82621b6d40</sum>
        </package>
        <package name="git-core-doc" version="2.39.1" release="1.el9" epoch="0" arch="noarch" src="git-2.39.1-1.el9.src.rpm">
          <filename>git-core-doc-2.39.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">18987b26a87ea025b06738f7228b549aae2c7a10d66faff4920937e1f1662fda</sum>
        </package>
        <package name="git-daemon" version="2.39.1" release="1.el9" epoch="0" arch="s390x" src="git-2.39.1-1.el9.src.rpm">
          <filename>git-daemon-2.39.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">27dd6585389f4cbfb2ae20dc7bc94eb6824c0be9de7b584d951df7f605f4d038</sum>
        </package>
        <package name="git-core" version="2.39.1" release="1.el9" epoch="0" arch="s390x" src="git-2.39.1-1.el9.src.rpm">
          <filename>git-core-2.39.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">31b0a37f347cd27e051972ed7b2c4ae74033efadde428c2191dbe79be690a2c9</sum>
        </package>
        <package name="git-svn" version="2.39.1" release="1.el9" epoch="0" arch="noarch" src="git-2.39.1-1.el9.src.rpm">
          <filename>git-svn-2.39.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">49ca591b4eb101559af0ad38343e245c13e7c5d76535ee67ad95ba62c86a94c7</sum>
        </package>
        <package name="gitweb" version="2.39.1" release="1.el9" epoch="0" arch="noarch" src="git-2.39.1-1.el9.src.rpm">
          <filename>gitweb-2.39.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">4a3b1fcdd8bc561e13182eafa34e996725d960ecdf82ca4f67dedab9ca86f0ed</sum>
        </package>
        <package name="git-gui" version="2.39.1" release="1.el9" epoch="0" arch="noarch" src="git-2.39.1-1.el9.src.rpm">
          <filename>git-gui-2.39.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">61a3868b23dde63f4bf4e29a1e50ffe5913b89a1090b7240e908e62a71622a74</sum>
        </package>
        <package name="git-instaweb" version="2.39.1" release="1.el9" epoch="0" arch="noarch" src="git-2.39.1-1.el9.src.rpm">
          <filename>git-instaweb-2.39.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">64cf2a3ea318e2e438b6ed0dfc2bce43b86c4ed2e9a76660adfdc3f50efed40a</sum>
        </package>
        <package name="perl-Git-SVN" version="2.39.1" release="1.el9" epoch="0" arch="noarch" src="git-2.39.1-1.el9.src.rpm">
          <filename>perl-Git-SVN-2.39.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">83f3a7c296f27edd51f53ee53cbe2c9a2eda0f60668f8b9d5457c2ca6431be7f</sum>
        </package>
        <package name="git" version="2.39.1" release="1.el9" epoch="0" arch="s390x" src="git-2.39.1-1.el9.src.rpm">
          <filename>git-2.39.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">98c532dc9ae127fa57eca3295c5e4d82db57b7285644ce9d16553412375b2784</sum>
        </package>
        <package name="perl-Git" version="2.39.1" release="1.el9" epoch="0" arch="noarch" src="git-2.39.1-1.el9.src.rpm">
          <filename>perl-Git-2.39.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">aae2f2a7bc2a33e01ac61a8f0ecab7b9cd1000e72c40f882c69e84df1803b144</sum>
        </package>
        <package name="git-subtree" version="2.39.1" release="1.el9" epoch="0" arch="s390x" src="git-2.39.1-1.el9.src.rpm">
          <filename>git-subtree-2.39.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">b5b47fae3427679176274d9d9711b4d7f506a4acef715f041b611c04be4dc95e</sum>
        </package>
        <package name="gitk" version="2.39.1" release="1.el9" epoch="0" arch="noarch" src="git-2.39.1-1.el9.src.rpm">
          <filename>gitk-2.39.1-1.el9.noarch.rpm</filename>
          <sum type="sha256">cb1e0cb42193227d09ed0a15c9124493df822c8ed8aad5ee6c09965bc71287a6</sum>
        </package>
        <package name="git-credential-libsecret" version="2.39.1" release="1.el9" epoch="0" arch="s390x" src="git-2.39.1-1.el9.src.rpm">
          <filename>git-credential-libsecret-2.39.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">f7ff1a64abea940a8bc80ae46a1caecf95b38f060735957f4d3a82ebbb6940de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2326</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 06:35:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282)
* freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283)
* freerdp: out of bounds read in zgfx decoder (CVE-2022-39316)
* freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317)
* freerdp: division by zero in urbdrc channel (CVE-2022-39318)
* freerdp: missing length validation in urbdrc channel (CVE-2022-39319)
* freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320)
* freerdp: missing path sanitation with `drive` channel (CVE-2022-39347)
* freerdp: missing input length validation in `drive` channel (CVE-2022-41877)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2326" id="RHSA-2023:2326" type="rhsa" title="RHSA-2023:2326"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39282" id="CVE-2022-39282" type="cve" title="CVE-2022-39282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39283" id="CVE-2022-39283" type="cve" title="CVE-2022-39283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39316" id="CVE-2022-39316" type="cve" title="CVE-2022-39316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39317" id="CVE-2022-39317" type="cve" title="CVE-2022-39317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39318" id="CVE-2022-39318" type="cve" title="CVE-2022-39318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39319" id="CVE-2022-39319" type="cve" title="CVE-2022-39319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39320" id="CVE-2022-39320" type="cve" title="CVE-2022-39320"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39347" id="CVE-2022-39347" type="cve" title="CVE-2022-39347"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41877" id="CVE-2022-41877" type="cve" title="CVE-2022-41877"/>
      <reference href="https://bugzilla.redhat.com/2134713" id="2134713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134717" id="2134717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143642" id="2143642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143643" id="2143643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143644" id="2143644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143645" id="2143645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143646" id="2143646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143647" id="2143647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143648" id="2143648" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2326.html" id="ALSA-2023:2326" type="self" title="ALSA-2023:2326"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="freerdp" version="2.4.1" release="5.el9" epoch="2" arch="s390x" src="freerdp-2.4.1-5.el9.src.rpm">
          <filename>freerdp-2.4.1-5.el9.s390x.rpm</filename>
          <sum type="sha256">0b657653005d2abedd2d9ec8a4d35824a72623c4d790deea7b5aa67f8ee89a2f</sum>
        </package>
        <package name="libwinpr" version="2.4.1" release="5.el9" epoch="2" arch="s390x" src="freerdp-2.4.1-5.el9.src.rpm">
          <filename>libwinpr-2.4.1-5.el9.s390x.rpm</filename>
          <sum type="sha256">817dc21383f015ec08f461bf12785698f2cd48532282ddb9b3342929f786bf2d</sum>
        </package>
        <package name="freerdp-libs" version="2.4.1" release="5.el9" epoch="2" arch="s390x" src="freerdp-2.4.1-5.el9.src.rpm">
          <filename>freerdp-libs-2.4.1-5.el9.s390x.rpm</filename>
          <sum type="sha256">c8ce550f3b7fc5be65667123e727290e91f26d446b268113a0c6c7eb27a466cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2340</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 06:12:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: heap Buffer overflows in tiffcrop.c (CVE-2022-3570)
* libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix (CVE-2022-3597)
* libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c (CVE-2022-3598)
* libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c (CVE-2022-3599)
* libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (CVE-2022-3626)
* libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (CVE-2022-3627)
* libtiff: integer overflow in function TIFFReadRGBATileExt of the file (CVE-2022-3970)
* libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c (CVE-2022-4645)
* libtiff: heap buffer overflow issues related to TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2023-30774)
* libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c (CVE-2023-30775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2340" id="RHSA-2023:2340" type="rhsa" title="RHSA-2023:2340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3570" id="CVE-2022-3570" type="cve" title="CVE-2022-3570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3597" id="CVE-2022-3597" type="cve" title="CVE-2022-3597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3598" id="CVE-2022-3598" type="cve" title="CVE-2022-3598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3599" id="CVE-2022-3599" type="cve" title="CVE-2022-3599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3626" id="CVE-2022-3626" type="cve" title="CVE-2022-3626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3627" id="CVE-2022-3627" type="cve" title="CVE-2022-3627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3970" id="CVE-2022-3970" type="cve" title="CVE-2022-3970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4645" id="CVE-2022-4645" type="cve" title="CVE-2022-4645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30774" id="CVE-2023-30774" type="cve" title="CVE-2023-30774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30775" id="CVE-2023-30775" type="cve" title="CVE-2023-30775"/>
      <reference href="https://bugzilla.redhat.com/2142734" id="2142734" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142736" id="2142736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142738" id="2142738" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142740" id="2142740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142741" id="2142741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142742" id="2142742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2148918" id="2148918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2176220" id="2176220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187139" id="2187139" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187141" id="2187141" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2340.html" id="ALSA-2023:2340" type="self" title="ALSA-2023:2340"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libtiff" version="4.4.0" release="7.el9" epoch="0" arch="s390x" src="libtiff-4.4.0-7.el9.src.rpm">
          <filename>libtiff-4.4.0-7.el9.s390x.rpm</filename>
          <sum type="sha256">19a9588547a812a42d91731b9073e6904369d44ad47a99ae236de73a8caf09ec</sum>
        </package>
        <package name="libtiff-devel" version="4.4.0" release="7.el9" epoch="0" arch="s390x" src="libtiff-4.4.0-7.el9.src.rpm">
          <filename>libtiff-devel-4.4.0-7.el9.s390x.rpm</filename>
          <sum type="sha256">e7974857a21e3399a29aa3678f4322edd951c2353d162234b764f19375c48317</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2357</id>
    <title>Moderate: git-lfs security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 06:02:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>git-lfs security and bug fix update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)
* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)
* golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2357" id="RHSA-2023:2357" type="rhsa" title="RHSA-2023:2357"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1705" id="CVE-2022-1705" type="cve" title="CVE-2022-1705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27664" id="CVE-2022-27664" type="cve" title="CVE-2022-27664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2880" id="CVE-2022-2880" type="cve" title="CVE-2022-2880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30630" id="CVE-2022-30630" type="cve" title="CVE-2022-30630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30632" id="CVE-2022-30632" type="cve" title="CVE-2022-30632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30635" id="CVE-2022-30635" type="cve" title="CVE-2022-30635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32148" id="CVE-2022-32148" type="cve" title="CVE-2022-32148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32189" id="CVE-2022-32189" type="cve" title="CVE-2022-32189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41715" id="CVE-2022-41715" type="cve" title="CVE-2022-41715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41717" id="CVE-2022-41717" type="cve" title="CVE-2022-41717"/>
      <reference href="https://bugzilla.redhat.com/2107371" id="2107371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107374" id="2107374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107383" id="2107383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107386" id="2107386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107388" id="2107388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2113814" id="2113814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2124669" id="2124669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132868" id="2132868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132872" id="2132872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161274" id="2161274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2357.html" id="ALSA-2023:2357" type="self" title="ALSA-2023:2357"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="git-lfs" version="3.2.0" release="1.el9" epoch="0" arch="s390x" src="git-lfs-3.2.0-1.el9.src.rpm">
          <filename>git-lfs-3.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">ec6eb30dfbf59001df5542c184a72b2f474cc289cd3041e6e5f4df108ac01a35</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2366</id>
    <title>Moderate: emacs security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 05:53:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>emacs security and bug fix update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: ctags local command execution vulnerability (CVE-2022-45939)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2366" id="RHSA-2023:2366" type="rhsa" title="RHSA-2023:2366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45939" id="CVE-2022-45939" type="cve" title="CVE-2022-45939"/>
      <reference href="https://bugzilla.redhat.com/2149380" id="2149380" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2366.html" id="ALSA-2023:2366" type="self" title="ALSA-2023:2366"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="emacs" version="27.2" release="8.el9" epoch="1" arch="s390x" src="emacs-27.2-8.el9.src.rpm">
          <filename>emacs-27.2-8.el9.s390x.rpm</filename>
          <sum type="sha256">25b62ec99701a81d412d9b0e81ba50c41e3dd8db31828f80bd4883e67c3daf56</sum>
        </package>
        <package name="emacs-common" version="27.2" release="8.el9" epoch="1" arch="s390x" src="emacs-27.2-8.el9.src.rpm">
          <filename>emacs-common-27.2-8.el9.s390x.rpm</filename>
          <sum type="sha256">3722a0ae0f88cc747d9efea21d349970162358865ba1f6fbe7c3dff8868cf8d7</sum>
        </package>
        <package name="emacs-filesystem" version="27.2" release="8.el9" epoch="1" arch="noarch" src="emacs-27.2-8.el9.src.rpm">
          <filename>emacs-filesystem-27.2-8.el9.noarch.rpm</filename>
          <sum type="sha256">893b4d4e28600b5cc8312f686562525d4c14326e49988ca6d551d4b02b5abd9e</sum>
        </package>
        <package name="emacs-nox" version="27.2" release="8.el9" epoch="1" arch="s390x" src="emacs-27.2-8.el9.src.rpm">
          <filename>emacs-nox-27.2-8.el9.s390x.rpm</filename>
          <sum type="sha256">b4f12fc80320af6cc5a5bacf754748de1737748a94a0595f0d259a76c10ab7df</sum>
        </package>
        <package name="emacs-lucid" version="27.2" release="8.el9" epoch="1" arch="s390x" src="emacs-27.2-8.el9.src.rpm">
          <filename>emacs-lucid-27.2-8.el9.s390x.rpm</filename>
          <sum type="sha256">f54635e0aa4fe4210ac4869f9d281007839ef436f79152dabb36862d4f4fdd74</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2367</id>
    <title>Moderate: containernetworking-plugins security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 05:41:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>containernetworking-plugins security and bug fix update</summary>
    <description>The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. 

Security Fix(es):

* golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2367" id="RHSA-2023:2367" type="rhsa" title="RHSA-2023:2367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30629" id="CVE-2022-30629" type="cve" title="CVE-2022-30629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41717" id="CVE-2022-41717" type="cve" title="CVE-2022-41717"/>
      <reference href="https://bugzilla.redhat.com/2092793" id="2092793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161274" id="2161274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2367.html" id="ALSA-2023:2367" type="self" title="ALSA-2023:2367"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="containernetworking-plugins" version="1.2.0" release="1.el9" epoch="1" arch="s390x" src="containernetworking-plugins-1.2.0-1.el9.src.rpm">
          <filename>containernetworking-plugins-1.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">371920f2903d6d063d5a338ae7432138d375febf19e658210707d257225f4ea6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2370</id>
    <title>Moderate: unbound security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 05:10:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

Security Fix(es):

* unbound: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack) (CVE-2022-3204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2370" id="RHSA-2023:2370" type="rhsa" title="RHSA-2023:2370"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3204" id="CVE-2022-3204" type="cve" title="CVE-2022-3204"/>
      <reference href="https://bugzilla.redhat.com/2128947" id="2128947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2370.html" id="ALSA-2023:2370" type="self" title="ALSA-2023:2370"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="unbound" version="1.16.2" release="3.el9" epoch="0" arch="s390x" src="unbound-1.16.2-3.el9.src.rpm">
          <filename>unbound-1.16.2-3.el9.s390x.rpm</filename>
          <sum type="sha256">a4afa7bdc842a411ba3ffec6f965e516f41f9d1648c77f76d4fe629843785fa5</sum>
        </package>
        <package name="unbound-libs" version="1.16.2" release="3.el9" epoch="0" arch="s390x" src="unbound-1.16.2-3.el9.src.rpm">
          <filename>unbound-libs-1.16.2-3.el9.s390x.rpm</filename>
          <sum type="sha256">a5a73a02675f10767dea9380497c97f2d83860485e7ffe9083c418d64b734dc6</sum>
        </package>
        <package name="python3-unbound" version="1.16.2" release="3.el9" epoch="0" arch="s390x" src="unbound-1.16.2-3.el9.src.rpm">
          <filename>python3-unbound-1.16.2-3.el9.s390x.rpm</filename>
          <sum type="sha256">cfb667ec8457d401bef3fc5e4c63d59bbb0eeb7fb843fd593f5fab5c7778a71c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2373</id>
    <title>Moderate: wireshark security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 04:46:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wireshark security and bug fix update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

* wireshark: f5ethtrailer Infinite loop in legacy style dissector (CVE-2022-3190)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2373" id="RHSA-2023:2373" type="rhsa" title="RHSA-2023:2373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3190" id="CVE-2022-3190" type="cve" title="CVE-2022-3190"/>
      <reference href="https://bugzilla.redhat.com/2152061" id="2152061" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2373.html" id="ALSA-2023:2373" type="self" title="ALSA-2023:2373"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="wireshark-cli" version="3.4.10" release="4.el9" epoch="1" arch="s390x" src="wireshark-3.4.10-4.el9.src.rpm">
          <filename>wireshark-cli-3.4.10-4.el9.s390x.rpm</filename>
          <sum type="sha256">6f3b9c440a9b824ac8711db58cf0a555023aa1735f6e73f98075355b8140b32e</sum>
        </package>
        <package name="wireshark" version="3.4.10" release="4.el9" epoch="1" arch="s390x" src="wireshark-3.4.10-4.el9.src.rpm">
          <filename>wireshark-3.4.10-4.el9.s390x.rpm</filename>
          <sum type="sha256">982519e9147624c34790f4a9e3fdd5392382b535ace2ea8cf3056ae9a46fa16a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2378</id>
    <title>Moderate: postgresql-jdbc security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 04:35:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql-jdbc security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.

Security Fix(es):

* postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions (CVE-2022-41946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2378" id="RHSA-2023:2378" type="rhsa" title="RHSA-2023:2378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41946" id="CVE-2022-41946" type="cve" title="CVE-2022-41946"/>
      <reference href="https://bugzilla.redhat.com/2153399" id="2153399" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2378.html" id="ALSA-2023:2378" type="self" title="ALSA-2023:2378"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="postgresql-jdbc" version="42.2.27" release="1.el9" epoch="0" arch="noarch" src="postgresql-jdbc-42.2.27-1.el9.src.rpm">
          <filename>postgresql-jdbc-42.2.27-1.el9.noarch.rpm</filename>
          <sum type="sha256">2913b9e4de7328484fbecee27fcabdfcb6a2632f4ba90270862c4a09fbd9fadf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2417</id>
    <title>Moderate: php:8.1 security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 04:24:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:8.1 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (8.1.14).

Security Fix(es):

* XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)
* php: standard insecure cookie could be treated as a '__Host-' or '__Secure-' cookie by PHP applications (CVE-2022-31629)
* php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)
* php: PDO::quote() may return unquoted string due to an integer overflow (CVE-2022-31631)
* php: phar: infinite loop when decompressing quine gzip file (CVE-2022-31628)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2417" id="RHSA-2023:2417" type="rhsa" title="RHSA-2023:2417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31628" id="CVE-2022-31628" type="cve" title="CVE-2022-31628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31629" id="CVE-2022-31629" type="cve" title="CVE-2022-31629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31630" id="CVE-2022-31630" type="cve" title="CVE-2022-31630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31631" id="CVE-2022-31631" type="cve" title="CVE-2022-31631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37454" id="CVE-2022-37454" type="cve" title="CVE-2022-37454"/>
      <reference href="https://bugzilla.redhat.com/2133687" id="2133687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133688" id="2133688" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2139280" id="2139280" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140200" id="2140200" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2158791" id="2158791" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2417.html" id="ALSA-2023:2417" type="self" title="ALSA-2023:2417"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <module name="php" stream="8.1" version="9020020230413133537" context="8cf767d6" arch="s390x"/>
        <package name="php-dba" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-dba-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">0d6dfee06518a43731cf4a2c53f2c28a86a38e92a0f6df7148d61635c2fcc801</sum>
        </package>
        <package name="php-xml" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-xml-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">10005ae86ef546615b68cb41db3cceb3cf2fe404ec84565d7b7704bad9a7b247</sum>
        </package>
        <package name="php-gd" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-gd-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">11ec7c4eafb9578abcb0662bd8393cc0647ff10a335ec3c962dd0d725f71a2e5</sum>
        </package>
        <package name="php-odbc" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-odbc-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">1bdd7c10d6306f6a9b971c11abd23f2f1581859ed5578de8d6e7781e0fab9498</sum>
        </package>
        <package name="php-fpm" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-fpm-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">23c98b1d2bbbf019892b2f4283b4542f645401f4880f70f92a769b8f3e7280b3</sum>
        </package>
        <package name="php-process" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-process-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">242c6ceaf8caeeab6455ed44cb070980167c29f659b8bff1d963f9b7ee92c939</sum>
        </package>
        <package name="php-opcache" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-opcache-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">2c18950ab62e0fad10d5ef2414f44bb3754e76d59c8341311ce34bfad02b49de</sum>
        </package>
        <package name="php-ffi" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-ffi-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">3797cc40f4a2faa6fd5429899edb1bfeded4ec5070c9808b89ff2feb215ed2c5</sum>
        </package>
        <package name="php-common" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-common-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">38db02ea65544f5a5d731f7e9fd20825d8f2b15cf4a3ddf8477395c962dac542</sum>
        </package>
        <package name="php-enchant" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-enchant-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">5433a25f74c9d1ed022075e73d59a6c04fadc0e6e0ec8f221734a79a467f1646</sum>
        </package>
        <package name="php-cli" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-cli-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">5acef4325faab0854c2c957653998388229ce1b1a95daff519e3ab1180dcece4</sum>
        </package>
        <package name="php-bcmath" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-bcmath-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">656c704d34bce3b6fbd368e08f22777c138cde91e6c2c49fd05c1ab6ab30327f</sum>
        </package>
        <package name="php-pecl-zip" version="1.20.1" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">6c89933d8e8153ed39764877e9c07501f556ba5057a9695bfefcfc75649f5734</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.21" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">74c41c08148fce005bb18c75bcfafc1e739cc84b6cac297b5ef955172eff0b69</sum>
        </package>
        <package name="php-intl" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-intl-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">7d197274367baf39115aa107eaffc5e34cbff30cfbec55b1778515007d035e28</sum>
        </package>
        <package name="php-gmp" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-gmp-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">81fb6faea2aa124040171a1f084752240f83a9405ac91541d818bc9e4e87b9f9</sum>
        </package>
        <package name="php-embedded" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-embedded-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">8d4180d6617f9c23121880f0de7ade3f290fb3e44f1fa404867ceb1c47d5cf8c</sum>
        </package>
        <package name="php-mysqlnd" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-mysqlnd-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">a51a86edc6e163529ef68417baaf609a0b92c61321368e420468bda1a9eaea78</sum>
        </package>
        <package name="php-ldap" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-ldap-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">af636e807053ec053c6647b7532f3fc19b0a06ac0c2e40b53d509701857095e8</sum>
        </package>
        <package name="php-devel" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-devel-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">b0435c59ac5ed8846cc216b3f626b6716fa08707fac589d180d80b3ec2d5fc20</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.21" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">bd0093fac304470cea776e43f28256fbfa317c192bb6bd8762cc1ec00db6f9e1</sum>
        </package>
        <package name="php-pdo" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-pdo-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">be55e13bf49b23432cbe06b3d089fd8e99b36ce1ca15dd395005de03c36dca24</sum>
        </package>
        <package name="php-soap" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-soap-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">bee7b513b4c88b99ce2e2092495c4042fbdeb0c39752f5b27f801b23fc25e570</sum>
        </package>
        <package name="php" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">c2c200996b726f74991aa4dc175b4c70f69b8b4ddd7fde644740f5590300e95a</sum>
        </package>
        <package name="php-dbg" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-dbg-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">ca894bb565bc5ad38a056f7c92341b941d39ba98c41ecb21a156755f0dde887c</sum>
        </package>
        <package name="php-pgsql" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-pgsql-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">d062aac978cb812888b0b8380d1faa05cd86aa72b9cd3508d96412b2d2f84e5e</sum>
        </package>
        <package name="php-mbstring" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-mbstring-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">d79dad5b2d622f2c79e56378022da0cdb9a5e380795cb3ad0cc76e6d42737249</sum>
        </package>
        <package name="apcu-panel" version="5.1.21" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>apcu-panel-5.1.21-1.module_el9.1.0+15+94ba28e4.noarch.rpm</filename>
          <sum type="sha256">e27a86b0afd898fe4401096cadb01c89fd2b39150e0cbfb4ebd82bc9822a3cbf</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.1.4" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">e97fdc0e54c4a5d2084a375f0ff31f551c9dc8c1f4c2012f2e453b1a031a1328</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="4.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-4.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-rrd-2.0.3-4.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">fa41ac765cb61c3ac39608e29ace6064489a59257504df4cac926a261c7d392b</sum>
        </package>
        <package name="php-snmp" version="8.1.14" release="1.module_el9.2.0+24+ca6bd7c2" epoch="0" arch="s390x" src="php-8.1.14-1.module_el9.2.0+24+ca6bd7c2.src.rpm">
          <filename>php-snmp-8.1.14-1.module_el9.2.0+24+ca6bd7c2.s390x.rpm</filename>
          <sum type="sha256">fc95fa6c8b29e432db90d80ef9f0e6e3863d939c5f58286cc15ef895621076dc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2444</id>
    <title>Moderate: net-snmp security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 04:11:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>net-snmp security and bug fix update</summary>
    <description>The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser.

Security Fix(es):

* net-snmp: NULL Pointer Exception when handling ipDefaultTTL (CVE-2022-44792)
* net-snmp: NULL Pointer Exception when handling pv6IpForwarding (CVE-2022-44793)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2444" id="RHSA-2023:2444" type="rhsa" title="RHSA-2023:2444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-44792" id="CVE-2022-44792" type="cve" title="CVE-2022-44792"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-44793" id="CVE-2022-44793" type="cve" title="CVE-2022-44793"/>
      <reference href="https://bugzilla.redhat.com/2141897" id="2141897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2141898" id="2141898" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2444.html" id="ALSA-2023:2444" type="self" title="ALSA-2023:2444"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="net-snmp-devel" version="5.9.1" release="9.el9" epoch="1" arch="s390x" src="net-snmp-5.9.1-9.el9.src.rpm">
          <filename>net-snmp-devel-5.9.1-9.el9.s390x.rpm</filename>
          <sum type="sha256">07ad9697f6f9734496c3175b49ea9f84c846e187c4faa9aa6ad9a1fcb7d7775a</sum>
        </package>
        <package name="net-snmp" version="5.9.1" release="9.el9" epoch="1" arch="s390x" src="net-snmp-5.9.1-9.el9.src.rpm">
          <filename>net-snmp-5.9.1-9.el9.s390x.rpm</filename>
          <sum type="sha256">14ab540b9bd22f01913acfb35fb4b555db79b69718943f711cabcc5e0013e29a</sum>
        </package>
        <package name="net-snmp-libs" version="5.9.1" release="9.el9" epoch="1" arch="s390x" src="net-snmp-5.9.1-9.el9.src.rpm">
          <filename>net-snmp-libs-5.9.1-9.el9.s390x.rpm</filename>
          <sum type="sha256">4be72f246a0d7164d0d8b3b43c4c5c080bb34cc60632af18a5e242f4b13532ec</sum>
        </package>
        <package name="net-snmp-perl" version="5.9.1" release="9.el9" epoch="1" arch="s390x" src="net-snmp-5.9.1-9.el9.src.rpm">
          <filename>net-snmp-perl-5.9.1-9.el9.s390x.rpm</filename>
          <sum type="sha256">4e4f83a7e298b0d58478c8718f52562e2ada8170bbc48921d37984982801f5c0</sum>
        </package>
        <package name="python3-net-snmp" version="5.9.1" release="9.el9" epoch="1" arch="s390x" src="net-snmp-5.9.1-9.el9.src.rpm">
          <filename>python3-net-snmp-5.9.1-9.el9.s390x.rpm</filename>
          <sum type="sha256">880a5b11dfc8b89b0b7bde30d276cfbcbfef9136b5e20ea953073eeff6c4724f</sum>
        </package>
        <package name="net-snmp-agent-libs" version="5.9.1" release="9.el9" epoch="1" arch="s390x" src="net-snmp-5.9.1-9.el9.src.rpm">
          <filename>net-snmp-agent-libs-5.9.1-9.el9.s390x.rpm</filename>
          <sum type="sha256">abc2f6d5ff687ae3a565bade078179a98dce27ba1e7709490f52dafa5c83c769</sum>
        </package>
        <package name="net-snmp-utils" version="5.9.1" release="9.el9" epoch="1" arch="s390x" src="net-snmp-5.9.1-9.el9.src.rpm">
          <filename>net-snmp-utils-5.9.1-9.el9.s390x.rpm</filename>
          <sum type="sha256">fb695e7669e21d6eeb7d0f7d84f2a4f1042eec955868d4ab3e387dfd038916f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2453</id>
    <title>Moderate: libtpms security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 04:02:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtpms security update</summary>
    <description>The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines.

Security Fix(es):

* tpm: TCG TPM2.0 implementations vulnerable to memory corruption (CVE-2023-1017)
* tpm2: TCG TPM2.0 implementations vulnerable to memory corruption (CVE-2023-1018)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2453" id="RHSA-2023:2453" type="rhsa" title="RHSA-2023:2453"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1017" id="CVE-2023-1017" type="cve" title="CVE-2023-1017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1018" id="CVE-2023-1018" type="cve" title="CVE-2023-1018"/>
      <reference href="https://bugzilla.redhat.com/2149416" id="2149416" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2149420" id="2149420" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2453.html" id="ALSA-2023:2453" type="self" title="ALSA-2023:2453"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libtpms" version="0.9.1" release="3.20211126git1ff6fe1f43.el9_2" epoch="0" arch="s390x" src="libtpms-0.9.1-3.20211126git1ff6fe1f43.el9_2.src.rpm">
          <filename>libtpms-0.9.1-3.20211126git1ff6fe1f43.el9_2.s390x.rpm</filename>
          <sum type="sha256">00a9952a31efe56483c28606b8048d838e7dd6e46cf7beeb3c5fb9b7622358d8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2458</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 03:34:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896)
* net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)
* cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341)
* malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655)
* possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462)
* KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789)
* use-after-free in free_pipe_info() could lead to privilege escalation (CVE-2022-1882)
* KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196)
* netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663)
* race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028)
* out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c (CVE-2022-3435)
* race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522)
* memory leak in ipv6_renew_options() (CVE-2022-3524)
* data races around icsk-&gt;icsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566)
* data races around sk-&gt;sk_prot (CVE-2022-3567)
* memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619)
* denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623)
* use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625)
* USB-accessible buffer overflow in brcmfmac (CVE-2022-3628)
* use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c (CVE-2022-3640)
* Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707)
* mptcp: NULL pointer dereference in subflow traversal at disconnect time (CVE-2022-4128)
* l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129)
* igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141)
* lockdown bypass using IMA (CVE-2022-21505)
* double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c (CVE-2022-28388)
* network backend may cause Linux netfront to use freed SKBs (XSA-405) (CVE-2022-33743)
* unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188)
* TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning (CVE-2022-39189)
* u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674)
* use-after-free related to leaf anon_vma double reuse (CVE-2022-42703)
* use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720)
* BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721)
* Denial of service in beacon protection for P2P-device (CVE-2022-42722)
* memory corruption in usbmon driver (CVE-2022-43750)
* NULL pointer dereference in traffic control subsystem (CVE-2022-47929)
* NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394)
* use-after-free due to race condition in qdisc_graft() (CVE-2023-0590)
* use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195)
* denial of service in tipc_conn_close (CVE-2023-1382)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2458" id="RHSA-2023:2458" type="rhsa" title="RHSA-2023:2458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-26341" id="CVE-2021-26341" type="cve" title="CVE-2021-26341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33655" id="CVE-2021-33655" type="cve" title="CVE-2021-33655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1462" id="CVE-2022-1462" type="cve" title="CVE-2022-1462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1789" id="CVE-2022-1789" type="cve" title="CVE-2022-1789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1882" id="CVE-2022-1882" type="cve" title="CVE-2022-1882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-20141" id="CVE-2022-20141" type="cve" title="CVE-2022-20141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21505" id="CVE-2022-21505" type="cve" title="CVE-2022-21505"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2196" id="CVE-2022-2196" type="cve" title="CVE-2022-2196"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2663" id="CVE-2022-2663" type="cve" title="CVE-2022-2663"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28388" id="CVE-2022-28388" type="cve" title="CVE-2022-28388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3028" id="CVE-2022-3028" type="cve" title="CVE-2022-3028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33743" id="CVE-2022-33743" type="cve" title="CVE-2022-33743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3435" id="CVE-2022-3435" type="cve" title="CVE-2022-3435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3522" id="CVE-2022-3522" type="cve" title="CVE-2022-3522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3524" id="CVE-2022-3524" type="cve" title="CVE-2022-3524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3566" id="CVE-2022-3566" type="cve" title="CVE-2022-3566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3567" id="CVE-2022-3567" type="cve" title="CVE-2022-3567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3619" id="CVE-2022-3619" type="cve" title="CVE-2022-3619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3623" id="CVE-2022-3623" type="cve" title="CVE-2022-3623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3625" id="CVE-2022-3625" type="cve" title="CVE-2022-3625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3628" id="CVE-2022-3628" type="cve" title="CVE-2022-3628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3640" id="CVE-2022-3640" type="cve" title="CVE-2022-3640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3707" id="CVE-2022-3707" type="cve" title="CVE-2022-3707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39188" id="CVE-2022-39188" type="cve" title="CVE-2022-39188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39189" id="CVE-2022-39189" type="cve" title="CVE-2022-39189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4128" id="CVE-2022-4128" type="cve" title="CVE-2022-4128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4129" id="CVE-2022-4129" type="cve" title="CVE-2022-4129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41674" id="CVE-2022-41674" type="cve" title="CVE-2022-41674"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42703" id="CVE-2022-42703" type="cve" title="CVE-2022-42703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42720" id="CVE-2022-42720" type="cve" title="CVE-2022-42720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42721" id="CVE-2022-42721" type="cve" title="CVE-2022-42721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42722" id="CVE-2022-42722" type="cve" title="CVE-2022-42722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42896" id="CVE-2022-42896" type="cve" title="CVE-2022-42896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43750" id="CVE-2022-43750" type="cve" title="CVE-2022-43750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47929" id="CVE-2022-47929" type="cve" title="CVE-2022-47929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0394" id="CVE-2023-0394" type="cve" title="CVE-2023-0394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0461" id="CVE-2023-0461" type="cve" title="CVE-2023-0461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0590" id="CVE-2023-0590" type="cve" title="CVE-2023-0590"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1195" id="CVE-2023-1195" type="cve" title="CVE-2023-1195"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1382" id="CVE-2023-1382" type="cve" title="CVE-2023-1382"/>
      <reference href="https://bugzilla.redhat.com/2061703" id="2061703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073091" id="2073091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078466" id="2078466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2089701" id="2089701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090723" id="2090723" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106830" id="2106830" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107924" id="2107924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108691" id="2108691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114937" id="2114937" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122228" id="2122228" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123056" id="2123056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2124788" id="2124788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130141" id="2130141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133483" id="2133483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133490" id="2133490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134377" id="2134377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134380" id="2134380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134451" id="2134451" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134506" id="2134506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134517" id="2134517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134528" id="2134528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2137979" id="2137979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2139610" id="2139610" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143893" id="2143893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143943" id="2143943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144720" id="2144720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2147364" id="2147364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150947" id="2150947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150960" id="2150960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150979" id="2150979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151270" id="2151270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2154171" id="2154171" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2154235" id="2154235" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160023" id="2160023" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162120" id="2162120" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165721" id="2165721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165741" id="2165741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168246" id="2168246" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2176192" id="2176192" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2177371" id="2177371" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2458.html" id="ALSA-2023:2458" type="self" title="ALSA-2023:2458"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="kernel-devel" version="5.14.0" release="284.11.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.11.1.el9_2.src.rpm">
          <filename>kernel-devel-5.14.0-284.11.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">0d453b0059c909c5105242e13a3dc1ef32f3a684db821fba0f2ff2eb94feaee6</sum>
        </package>
        <package name="perf" version="5.14.0" release="284.11.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.11.1.el9_2.src.rpm">
          <filename>perf-5.14.0-284.11.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">258d0d0025740f9225bcfec8fc073925980a7cd6f5fbd9c4b68459678959cd20</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="284.11.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.11.1.el9_2.src.rpm">
          <filename>kernel-devel-matched-5.14.0-284.11.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">51d4850674e5c632e03a000aaa41f76debcd1178a5b743da84b64bc4d08ec8ca</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="284.11.1.el9_2" epoch="0" arch="noarch" src="kernel-5.14.0-284.11.1.el9_2.src.rpm">
          <filename>kernel-doc-5.14.0-284.11.1.el9_2.noarch.rpm</filename>
          <sum type="sha256">6d66749bc7a2add74a128f8d67e457498ff1eb5e5d6c0a36a3f8138444c5e354</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="284.11.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.11.1.el9_2.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-284.11.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7cfe8ebe8cd76d4d1d730c3d807ae0dc6b36edf8d00e67621e9a2590c852f782</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="284.11.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.11.1.el9_2.src.rpm">
          <filename>kernel-debug-devel-5.14.0-284.11.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">846d41e5d899bd10f1d1fd82f079a81e96880409b354113f84318b1650c2ab37</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="284.11.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.11.1.el9_2.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-284.11.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">a50d2c38bca47eeb7fd5b0696493e95a03ddec50459b229be7c097f18deb8aa5</sum>
        </package>
        <package name="rtla" version="5.14.0" release="284.11.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.11.1.el9_2.src.rpm">
          <filename>rtla-5.14.0-284.11.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">c4f20d4a193445ca440171837e21fe4cc0109db37fa3bb7e70c2b8746f7336d1</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="284.11.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.11.1.el9_2.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-284.11.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">ea001166f081e4494da4d390c3b9ffaa372488595cf4f137de1fa165a2a4d58f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2478</id>
    <title>Low: curl security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 02:58:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: Incorrect handling of control code characters in cookies (CVE-2022-35252)
* curl: Use-after-free triggered by an HTTP proxy deny response (CVE-2022-43552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2478" id="RHSA-2023:2478" type="rhsa" title="RHSA-2023:2478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35252" id="CVE-2022-35252" type="cve" title="CVE-2022-35252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43552" id="CVE-2022-43552" type="cve" title="CVE-2022-43552"/>
      <reference href="https://bugzilla.redhat.com/2120718" id="2120718" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152652" id="2152652" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2478.html" id="ALSA-2023:2478" type="self" title="ALSA-2023:2478"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libcurl-devel" version="7.76.1" release="23.el9" epoch="0" arch="s390x" src="curl-7.76.1-23.el9.src.rpm">
          <filename>libcurl-devel-7.76.1-23.el9.s390x.rpm</filename>
          <sum type="sha256">6e6ff640f1c717655050fdd3d2e25a22fd5c9e3e8b83705dea58a4b4c3275b86</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2519</id>
    <title>Low: samba security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 13:40:38"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.17.5). (BZ#2131993)

Security Fix(es):

* samba: GnuTLS gnutls_rnd() can fail and give predictable random values (CVE-2022-1615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2519" id="RHSA-2023:2519" type="rhsa" title="RHSA-2023:2519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1615" id="CVE-2022-1615" type="cve" title="CVE-2022-1615"/>
      <reference href="https://bugzilla.redhat.com/2122649" id="2122649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2519.html" id="ALSA-2023:2519" type="self" title="ALSA-2023:2519"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="samba-krb5-printing" version="4.17.5" release="102.el9" epoch="0" arch="s390x" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-krb5-printing-4.17.5-102.el9.s390x.rpm</filename>
          <sum type="sha256">0053731aac2a9a0ddb00d42a18e3971c95bd6bc3d95ca5bb2b616996be764f92</sum>
        </package>
        <package name="samba-client" version="4.17.5" release="102.el9" epoch="0" arch="s390x" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-client-4.17.5-102.el9.s390x.rpm</filename>
          <sum type="sha256">58da512872cd66c5a10c85bdd063172de2d29ba4cd37c2b134da3b073b56c141</sum>
        </package>
        <package name="samba-vfs-iouring" version="4.17.5" release="102.el9" epoch="0" arch="s390x" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-vfs-iouring-4.17.5-102.el9.s390x.rpm</filename>
          <sum type="sha256">6f2eb3e7750db9fb3842dfe7923bb6463e2586fe4c6c0861ffa72fb6b0c6d6c6</sum>
        </package>
        <package name="samba-winbind-clients" version="4.17.5" release="102.el9" epoch="0" arch="s390x" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-winbind-clients-4.17.5-102.el9.s390x.rpm</filename>
          <sum type="sha256">898efd9f777ccbb4ebdc5a4c0776968a6d6bd997bc752a368c531be21ecd5224</sum>
        </package>
        <package name="samba-winbind-krb5-locator" version="4.17.5" release="102.el9" epoch="0" arch="s390x" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-winbind-krb5-locator-4.17.5-102.el9.s390x.rpm</filename>
          <sum type="sha256">f04ad60e10c1e064a67cd1058fb0ac3aa1278ff30631c6d7bdd1263b73e6e7e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2523</id>
    <title>Low: openssl security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 01:58:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openssl security and bug fix update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: Using a Custom Cipher with NID_undef may lead to NULL encryption (CVE-2022-3358)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2523" id="RHSA-2023:2523" type="rhsa" title="RHSA-2023:2523"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3358" id="CVE-2022-3358" type="cve" title="CVE-2022-3358"/>
      <reference href="https://bugzilla.redhat.com/2134740" id="2134740" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2523.html" id="ALSA-2023:2523" type="self" title="ALSA-2023:2523"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="openssl-devel" version="3.0.7" release="6.el9_2" epoch="1" arch="s390x" src="openssl-3.0.7-6.el9_2.src.rpm">
          <filename>openssl-devel-3.0.7-6.el9_2.s390x.rpm</filename>
          <sum type="sha256">020451d3c93f9f38d1d4bc2e9377735ccaf1aa595cdf52d59cdd0f2087135849</sum>
        </package>
        <package name="openssl-perl" version="3.0.7" release="6.el9_2" epoch="1" arch="s390x" src="openssl-3.0.7-6.el9_2.src.rpm">
          <filename>openssl-perl-3.0.7-6.el9_2.s390x.rpm</filename>
          <sum type="sha256">6a5c3f1bac862e449c785df99fbeb3284d2b96d8da848fad3694518b646fbc5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2532</id>
    <title>Low: libarchive security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 01:18:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.

Security Fix(es):

* libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2532" id="RHSA-2023:2532" type="rhsa" title="RHSA-2023:2532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36227" id="CVE-2022-36227" type="cve" title="CVE-2022-36227"/>
      <reference href="https://bugzilla.redhat.com/2144972" id="2144972" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2532.html" id="ALSA-2023:2532" type="self" title="ALSA-2023:2532"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="bsdtar" version="3.5.3" release="4.el9" epoch="0" arch="s390x" src="libarchive-3.5.3-4.el9.src.rpm">
          <filename>bsdtar-3.5.3-4.el9.s390x.rpm</filename>
          <sum type="sha256">6ed7da2e3bbac80e5dbc40abbff9a65f3adf1170236d820112ee933fde975d4e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2570</id>
    <title>Moderate: krb5 security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 00:45:28"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>krb5 security, bug fix, and enhancement update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

The following packages have been upgraded to a later upstream version: krb5 (1.20.1). (BZ#2016312)

Security Fix(es):

* Kerberos: delegation constrain bypass in S4U2Proxy (CVE-2020-17049)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2570" id="RHSA-2023:2570" type="rhsa" title="RHSA-2023:2570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-17049" id="CVE-2020-17049" type="cve" title="CVE-2020-17049"/>
      <reference href="https://bugzilla.redhat.com/2025721" id="2025721" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2570.html" id="ALSA-2023:2570" type="self" title="ALSA-2023:2570"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="krb5-devel" version="1.20.1" release="8.el9" epoch="0" arch="s390x" src="krb5-1.20.1-8.el9.src.rpm">
          <filename>krb5-devel-1.20.1-8.el9.s390x.rpm</filename>
          <sum type="sha256">074acb93a69fee1144b61e71432c54710cde44a4c1fdf025dec23d6043e6e386</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2582</id>
    <title>Low: lua security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 23:51:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>lua security update</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: heap buffer overread (CVE-2022-28805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2582" id="RHSA-2023:2582" type="rhsa" title="RHSA-2023:2582"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28805" id="CVE-2022-28805" type="cve" title="CVE-2022-28805"/>
      <reference href="https://bugzilla.redhat.com/2073884" id="2073884" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2582.html" id="ALSA-2023:2582" type="self" title="ALSA-2023:2582"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="lua" version="5.4.4" release="3.el9" epoch="0" arch="s390x" src="lua-5.4.4-3.el9.src.rpm">
          <filename>lua-5.4.4-3.el9.s390x.rpm</filename>
          <sum type="sha256">4386e203b3d90489d5f41278a3176494d5d2a8bc3fea80373d9b153e2de8c4e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2621</id>
    <title>Important: mysql security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 23:14:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177731, BZ#2177732)

Security Fix(es):

* mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594)
* mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611)
* mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632)
* mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410)
* mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883)
* mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887)
* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917)
* mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2621" id="RHSA-2023:2621" type="rhsa" title="RHSA-2023:2621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21594" id="CVE-2022-21594" type="cve" title="CVE-2022-21594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21599" id="CVE-2022-21599" type="cve" title="CVE-2022-21599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21604" id="CVE-2022-21604" type="cve" title="CVE-2022-21604"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21608" id="CVE-2022-21608" type="cve" title="CVE-2022-21608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21611" id="CVE-2022-21611" type="cve" title="CVE-2022-21611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21617" id="CVE-2022-21617" type="cve" title="CVE-2022-21617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21625" id="CVE-2022-21625" type="cve" title="CVE-2022-21625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21632" id="CVE-2022-21632" type="cve" title="CVE-2022-21632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21633" id="CVE-2022-21633" type="cve" title="CVE-2022-21633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21637" id="CVE-2022-21637" type="cve" title="CVE-2022-21637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21640" id="CVE-2022-21640" type="cve" title="CVE-2022-21640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39400" id="CVE-2022-39400" type="cve" title="CVE-2022-39400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39408" id="CVE-2022-39408" type="cve" title="CVE-2022-39408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39410" id="CVE-2022-39410" type="cve" title="CVE-2022-39410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21836" id="CVE-2023-21836" type="cve" title="CVE-2023-21836"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21863" id="CVE-2023-21863" type="cve" title="CVE-2023-21863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21864" id="CVE-2023-21864" type="cve" title="CVE-2023-21864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21865" id="CVE-2023-21865" type="cve" title="CVE-2023-21865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21867" id="CVE-2023-21867" type="cve" title="CVE-2023-21867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21868" id="CVE-2023-21868" type="cve" title="CVE-2023-21868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21869" id="CVE-2023-21869" type="cve" title="CVE-2023-21869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21870" id="CVE-2023-21870" type="cve" title="CVE-2023-21870"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21871" id="CVE-2023-21871" type="cve" title="CVE-2023-21871"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21873" id="CVE-2023-21873" type="cve" title="CVE-2023-21873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21874" id="CVE-2023-21874" type="cve" title="CVE-2023-21874"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21875" id="CVE-2023-21875" type="cve" title="CVE-2023-21875"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21876" id="CVE-2023-21876" type="cve" title="CVE-2023-21876"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21877" id="CVE-2023-21877" type="cve" title="CVE-2023-21877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21878" id="CVE-2023-21878" type="cve" title="CVE-2023-21878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21879" id="CVE-2023-21879" type="cve" title="CVE-2023-21879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21880" id="CVE-2023-21880" type="cve" title="CVE-2023-21880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21881" id="CVE-2023-21881" type="cve" title="CVE-2023-21881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21882" id="CVE-2023-21882" type="cve" title="CVE-2023-21882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21883" id="CVE-2023-21883" type="cve" title="CVE-2023-21883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21887" id="CVE-2023-21887" type="cve" title="CVE-2023-21887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21912" id="CVE-2023-21912" type="cve" title="CVE-2023-21912"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21917" id="CVE-2023-21917" type="cve" title="CVE-2023-21917"/>
      <reference href="https://bugzilla.redhat.com/2142861" id="2142861" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142863" id="2142863" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142865" id="2142865" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142868" id="2142868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142869" id="2142869" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142870" id="2142870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142871" id="2142871" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142872" id="2142872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142873" id="2142873" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142875" id="2142875" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142877" id="2142877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142879" id="2142879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142880" id="2142880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142881" id="2142881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162268" id="2162268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162270" id="2162270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162271" id="2162271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162272" id="2162272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162274" id="2162274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162275" id="2162275" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162276" id="2162276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162277" id="2162277" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162278" id="2162278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162280" id="2162280" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162281" id="2162281" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162282" id="2162282" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162283" id="2162283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162284" id="2162284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162285" id="2162285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162286" id="2162286" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162287" id="2162287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162288" id="2162288" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162289" id="2162289" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162290" id="2162290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162291" id="2162291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188110" id="2188110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188112" id="2188112" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2621.html" id="ALSA-2023:2621" type="self" title="ALSA-2023:2621"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="mysql-server" version="8.0.32" release="1.el9_2" epoch="0" arch="s390x" src="mysql-8.0.32-1.el9_2.src.rpm">
          <filename>mysql-server-8.0.32-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">24e0ef7336867d9923f7652b61658991f7d52ec6ee8e54a82640136c25239db3</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.32" release="1.el9_2" epoch="0" arch="s390x" src="mysql-8.0.32-1.el9_2.src.rpm">
          <filename>mysql-errmsg-8.0.32-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">56455736741baf7acec535b328a6a8ad6071217716a6888a367054766765d9ca</sum>
        </package>
        <package name="mysql" version="8.0.32" release="1.el9_2" epoch="0" arch="s390x" src="mysql-8.0.32-1.el9_2.src.rpm">
          <filename>mysql-8.0.32-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">e970646980978d5d1fd7f5b3e965288477bfe4440400d38b84048c28e716eb6b</sum>
        </package>
        <package name="mysql-common" version="8.0.32" release="1.el9_2" epoch="0" arch="s390x" src="mysql-8.0.32-1.el9_2.src.rpm">
          <filename>mysql-common-8.0.32-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">f8ae9c156bd94b8853e91ab370cbf25503148afe3ce1bf749397956e7034fc52</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2626</id>
    <title>Important: emacs security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 22:55:28"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>emacs security update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: Regression of CVE-2023-28617 fixes in the AlmaLinux (CVE-2023-2491)
* emacs: command execution via shell metacharacters (CVE-2022-48337)
* emacs: local command injection in ruby-mode.el (CVE-2022-48338)
* emacs: command injection vulnerability in htmlfontify.el (CVE-2022-48339)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2626" id="RHSA-2023:2626" type="rhsa" title="RHSA-2023:2626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48337" id="CVE-2022-48337" type="cve" title="CVE-2022-48337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48338" id="CVE-2022-48338" type="cve" title="CVE-2022-48338"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48339" id="CVE-2022-48339" type="cve" title="CVE-2022-48339"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2491" id="CVE-2023-2491" type="cve" title="CVE-2023-2491"/>
      <reference href="https://bugzilla.redhat.com/2171987" id="2171987" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2171988" id="2171988" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2171989" id="2171989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2192873" id="2192873" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2626.html" id="ALSA-2023:2626" type="self" title="ALSA-2023:2626"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="emacs-common" version="27.2" release="8.el9_2.1" epoch="1" arch="s390x" src="emacs-27.2-8.el9_2.1.src.rpm">
          <filename>emacs-common-27.2-8.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">212d0071afb609893e40f079a6a3b7d128c11dc60cf0bba6a20c9d13e6526e97</sum>
        </package>
        <package name="emacs" version="27.2" release="8.el9_2.1" epoch="1" arch="s390x" src="emacs-27.2-8.el9_2.1.src.rpm">
          <filename>emacs-27.2-8.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">364c005d2a58bb63e5a80ee0e49974faedac7744a79487b4acb6e22170be766b</sum>
        </package>
        <package name="emacs-lucid" version="27.2" release="8.el9_2.1" epoch="1" arch="s390x" src="emacs-27.2-8.el9_2.1.src.rpm">
          <filename>emacs-lucid-27.2-8.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">773dd3b121bfd50e8b3709deff93f461eaf8a1bda7a97154a08970329f5474aa</sum>
        </package>
        <package name="emacs-nox" version="27.2" release="8.el9_2.1" epoch="1" arch="s390x" src="emacs-27.2-8.el9_2.1.src.rpm">
          <filename>emacs-nox-27.2-8.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">80aaac85431d37f1dd8db60de2d97ad0817a3b67eaf3da35f14a018eb468766e</sum>
        </package>
        <package name="emacs-filesystem" version="27.2" release="8.el9_2.1" epoch="1" arch="noarch" src="emacs-27.2-8.el9_2.1.src.rpm">
          <filename>emacs-filesystem-27.2-8.el9_2.1.noarch.rpm</filename>
          <sum type="sha256">8132dbe410df05ce2933a36657fa82d2e5165d3d9e32b343d6ab41a08a1025bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2633</id>
    <title>Moderate: libreswan security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 22:45:10"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreswan security update</summary>
    <description>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: remote DoS via crafted TS payload with an incorrect selector length (CVE-2023-23009)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2633" id="RHSA-2023:2633" type="rhsa" title="RHSA-2023:2633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23009" id="CVE-2023-23009" type="cve" title="CVE-2023-23009"/>
      <reference href="https://bugzilla.redhat.com/2173610" id="2173610" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2633.html" id="ALSA-2023:2633" type="self" title="ALSA-2023:2633"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libreswan" version="4.9" release="2.el9_2" epoch="0" arch="s390x" src="libreswan-4.9-2.el9_2.src.rpm">
          <filename>libreswan-4.9-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">79ada99f92482bd6ad7a9ef5325af2361d92a4be65b8373e82165dd1dffc63f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2645</id>
    <title>Moderate: openssh security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 22:18:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: the functions order_hostkeyalgs() and list_hostkey_types() leads to double-free vulnerability (CVE-2023-25136)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2645" id="RHSA-2023:2645" type="rhsa" title="RHSA-2023:2645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25136" id="CVE-2023-25136" type="cve" title="CVE-2023-25136"/>
      <reference href="https://bugzilla.redhat.com/2167636" id="2167636" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2645.html" id="ALSA-2023:2645" type="self" title="ALSA-2023:2645"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="pam_ssh_agent_auth" version="0.10.4" release="5.29.el9_2" epoch="0" arch="s390x" src="openssh-8.7p1-29.el9_2.src.rpm">
          <filename>pam_ssh_agent_auth-0.10.4-5.29.el9_2.s390x.rpm</filename>
          <sum type="sha256">4004e98e49aa53a83f884bb9b8711cb371e808289bb752c92929b945d513a984</sum>
        </package>
        <package name="openssh-askpass" version="8.7p1" release="29.el9_2" epoch="0" arch="s390x" src="openssh-8.7p1-29.el9_2.src.rpm">
          <filename>openssh-askpass-8.7p1-29.el9_2.s390x.rpm</filename>
          <sum type="sha256">9cae5e29760b400424102654aa8957ea047b2f7ad45bc7c28dd4f164abe1724c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2650</id>
    <title>Moderate: curl security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 21:46:40"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: FTP too eager connection reuse (CVE-2023-27535)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2650" id="RHSA-2023:2650" type="rhsa" title="RHSA-2023:2650"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27535" id="CVE-2023-27535" type="cve" title="CVE-2023-27535"/>
      <reference href="https://bugzilla.redhat.com/2179073" id="2179073" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2650.html" id="ALSA-2023:2650" type="self" title="ALSA-2023:2650"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libcurl-devel" version="7.76.1" release="23.el9_2.1" epoch="0" arch="s390x" src="curl-7.76.1-23.el9_2.1.src.rpm">
          <filename>libcurl-devel-7.76.1-23.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">59d0beaac7fa2edc4a3a380742b170e5e92b1c2bbcd3c2def4c76cf5b8bd19c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2653</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 21:21:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* WebKitGTK: Regression of CVE-2023-28205 fixes in the AlmaLinux (CVE-2023-2203)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2653" id="RHSA-2023:2653" type="rhsa" title="RHSA-2023:2653"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2203" id="CVE-2023-2203" type="cve" title="CVE-2023-2203"/>
      <reference href="https://bugzilla.redhat.com/2188543" id="2188543" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2653.html" id="ALSA-2023:2653" type="self" title="ALSA-2023:2653"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="webkit2gtk3-devel" version="2.38.5" release="1.el9_2.1" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9_2.1.src.rpm">
          <filename>webkit2gtk3-devel-2.38.5-1.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">2176ff19fb553bcad96556856e08378f8b8327720d0f1e185d287c45d615ef84</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.38.5" release="1.el9_2.1" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9_2.1.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.38.5-1.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">68b824662e528cf750538b76965ba5ccf62b71d92f99445de7097766a56fde24</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.38.5" release="1.el9_2.1" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9_2.1.src.rpm">
          <filename>webkit2gtk3-jsc-2.38.5-1.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">6f8f03289c7393c697d7d79bc683ef56957d592606c229643c587b661334aeaa</sum>
        </package>
        <package name="webkit2gtk3" version="2.38.5" release="1.el9_2.1" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9_2.1.src.rpm">
          <filename>webkit2gtk3-2.38.5-1.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">b3261ec4ba5add9f71a6f28e219c93dfe7ce31e4a6c5a17a7d0beb3cb5195fd5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2654</id>
    <title>Moderate: nodejs:18 security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 21:13:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:18 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (18.14.2).

Security Fix(es):

* glob-parent: Regular Expression Denial of Service (CVE-2021-35065)
* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)
* http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)
* Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)
* Node.js: OpenSSL error handling issues in nodejs crypto library (CVE-2023-23919)
* Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)
* Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)
* Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2654" id="RHSA-2023:2654" type="rhsa" title="RHSA-2023:2654"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35065" id="CVE-2021-35065" type="cve" title="CVE-2021-35065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25881" id="CVE-2022-25881" type="cve" title="CVE-2022-25881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4904" id="CVE-2022-4904" type="cve" title="CVE-2022-4904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23918" id="CVE-2023-23918" type="cve" title="CVE-2023-23918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23919" id="CVE-2023-23919" type="cve" title="CVE-2023-23919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23920" id="CVE-2023-23920" type="cve" title="CVE-2023-23920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23936" id="CVE-2023-23936" type="cve" title="CVE-2023-23936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24807" id="CVE-2023-24807" type="cve" title="CVE-2023-24807"/>
      <reference href="https://bugzilla.redhat.com/2156324" id="2156324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165824" id="2165824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168631" id="2168631" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2171935" id="2171935" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172170" id="2172170" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172190" id="2172190" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172204" id="2172204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172217" id="2172217" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2654.html" id="ALSA-2023:2654" type="self" title="ALSA-2023:2654"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <module name="nodejs" stream="18" version="9020020230511122142" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-devel" version="18.14.2" release="2.module_el9.2.0+29+de583a0b" epoch="1" arch="s390x" src="nodejs-18.14.2-2.module_el9.2.0+29+de583a0b.src.rpm">
          <filename>nodejs-devel-18.14.2-2.module_el9.2.0+29+de583a0b.s390x.rpm</filename>
          <sum type="sha256">03b2d93513e39ff56fc6845eb19a953235dbcf9fd659ad13f41d39ed07673b4d</sum>
        </package>
        <package name="npm" version="9.5.0" release="1.18.14.2.2.module_el9.2.0+29+de583a0b" epoch="1" arch="s390x" src="nodejs-18.14.2-2.module_el9.2.0+29+de583a0b.src.rpm">
          <filename>npm-9.5.0-1.18.14.2.2.module_el9.2.0+29+de583a0b.s390x.rpm</filename>
          <sum type="sha256">11f86254f5ecd9731dabd6d024c21741a8840ce9e6253e1f696f64cdb6ef42a9</sum>
        </package>
        <package name="nodejs-docs" version="18.14.2" release="2.module_el9.2.0+29+de583a0b" epoch="1" arch="noarch" src="nodejs-18.14.2-2.module_el9.2.0+29+de583a0b.src.rpm">
          <filename>nodejs-docs-18.14.2-2.module_el9.2.0+29+de583a0b.noarch.rpm</filename>
          <sum type="sha256">2b9c75be404b8541ff176ec0b10e2290663b50aeadcd3991b4826604a03689e6</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.14.2" release="2.module_el9.2.0+29+de583a0b" epoch="1" arch="s390x" src="nodejs-18.14.2-2.module_el9.2.0+29+de583a0b.src.rpm">
          <filename>nodejs-full-i18n-18.14.2-2.module_el9.2.0+29+de583a0b.s390x.rpm</filename>
          <sum type="sha256">6357078b22b34d83ec9da0517c708ffb71a56be3ce6728ad829dc929bc641f42</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0</sum>
        </package>
        <package name="nodejs" version="18.14.2" release="2.module_el9.2.0+29+de583a0b" epoch="1" arch="s390x" src="nodejs-18.14.2-2.module_el9.2.0+29+de583a0b.src.rpm">
          <filename>nodejs-18.14.2-2.module_el9.2.0+29+de583a0b.s390x.rpm</filename>
          <sum type="sha256">e83e7a665e956ace7739f7af29583c00b6cee8067c23b02968b679c509943ff6</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="2.module_el9.2.0+29+de583a0b" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-2.module_el9.2.0+29+de583a0b.src.rpm">
          <filename>nodejs-nodemon-2.0.20-2.module_el9.2.0+29+de583a0b.noarch.rpm</filename>
          <sum type="sha256">f50193ade11d258bdd6c8782db590f72eaeb21799f8df9703e96ffd60644688d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2655</id>
    <title>Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 21:02:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs and nodejs-nodemon security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (16.19.1), nodejs-nodemon (2.0.20).

Security Fix(es):

* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)
* http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)
* Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)
* Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)
* Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)
* Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2655" id="RHSA-2023:2655" type="rhsa" title="RHSA-2023:2655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25881" id="CVE-2022-25881" type="cve" title="CVE-2022-25881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4904" id="CVE-2022-4904" type="cve" title="CVE-2022-4904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23918" id="CVE-2023-23918" type="cve" title="CVE-2023-23918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23920" id="CVE-2023-23920" type="cve" title="CVE-2023-23920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23936" id="CVE-2023-23936" type="cve" title="CVE-2023-23936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24807" id="CVE-2023-24807" type="cve" title="CVE-2023-24807"/>
      <reference href="https://bugzilla.redhat.com/2165824" id="2165824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168631" id="2168631" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2171935" id="2171935" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172190" id="2172190" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172204" id="2172204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172217" id="2172217" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2655.html" id="ALSA-2023:2655" type="self" title="ALSA-2023:2655"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="nodejs" version="16.19.1" release="1.el9_2" epoch="1" arch="s390x" src="nodejs-16.19.1-1.el9_2.src.rpm">
          <filename>nodejs-16.19.1-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">1f7b5f8af84ff09c90527d7e00a0b98263d0faee186a9e5eb55db70975145055</sum>
        </package>
        <package name="npm" version="8.19.3" release="1.16.19.1.1.el9_2" epoch="1" arch="s390x" src="nodejs-16.19.1-1.el9_2.src.rpm">
          <filename>npm-8.19.3-1.16.19.1.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">2bf77f9131b6c2c4679c84f3e6251579ebe37b89a0dc844a6fa6fda6d9eb77d9</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.19.1" release="1.el9_2" epoch="1" arch="s390x" src="nodejs-16.19.1-1.el9_2.src.rpm">
          <filename>nodejs-full-i18n-16.19.1-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">6fdfab75ad45a2a894052d4c4b96c02d1a987cec99bf6c17df71bbcd19c70252</sum>
        </package>
        <package name="nodejs-libs" version="16.19.1" release="1.el9_2" epoch="1" arch="s390x" src="nodejs-16.19.1-1.el9_2.src.rpm">
          <filename>nodejs-libs-16.19.1-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">8667e92de9ab4bd457a72cf80ec7e205928992ee0a352213b423b455976700a0</sum>
        </package>
        <package name="nodejs-docs" version="16.19.1" release="1.el9_2" epoch="1" arch="noarch" src="nodejs-16.19.1-1.el9_2.src.rpm">
          <filename>nodejs-docs-16.19.1-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">f11bb41fc5bd941d6b4ceaabcbd5a55df759beac7e34945b8cd3a3f52838fe29</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3143</id>
    <title>Important: firefox security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:31"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.11.0 ESR.

Security Fix(es):

* Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)
* Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)
* Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)
* Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)
* Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)
* Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)
* Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3143" id="RHSA-2023:3143" type="rhsa" title="RHSA-2023:3143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32205" id="CVE-2023-32205" type="cve" title="CVE-2023-32205"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32206" id="CVE-2023-32206" type="cve" title="CVE-2023-32206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32207" id="CVE-2023-32207" type="cve" title="CVE-2023-32207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32211" id="CVE-2023-32211" type="cve" title="CVE-2023-32211"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32212" id="CVE-2023-32212" type="cve" title="CVE-2023-32212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32213" id="CVE-2023-32213" type="cve" title="CVE-2023-32213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32215" id="CVE-2023-32215" type="cve" title="CVE-2023-32215"/>
      <reference href="https://bugzilla.redhat.com/2196736" id="2196736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196737" id="2196737" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196738" id="2196738" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196740" id="2196740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196741" id="2196741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196742" id="2196742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196753" id="2196753" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3143.html" id="ALSA-2023:3143" type="self" title="ALSA-2023:3143"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="firefox" version="102.11.0" release="2.el9_2.alma" epoch="0" arch="s390x" src="firefox-102.11.0-2.el9_2.alma.src.rpm">
          <filename>firefox-102.11.0-2.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">10aa3a96657333c7f960b10bbb61223cb1fae3ecc331288f30a48750e8260345</sum>
        </package>
        <package name="firefox-x11" version="102.11.0" release="2.el9_2.alma" epoch="0" arch="s390x" src="firefox-102.11.0-2.el9_2.alma.src.rpm">
          <filename>firefox-x11-102.11.0-2.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">5080a2801b2ba3f4f93fd0d8342549c7041d128800da6423c8ce41bd6a566547</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3147</id>
    <title>Important: apr-util security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:02:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>apr-util security update</summary>
    <description>The Apache Portable Runtime (APR) is a portability library used by the
Apache HTTP Server and other projects. apr-util is a library which provides
additional utility interfaces for APR; including support for XML parsing,
LDAP, database interfaces, URI parsing, and more.

Security Fix(es):

* apr-util: out-of-bounds writes in the apr_base64 (CVE-2022-25147)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3147" id="RHSA-2023:3147" type="rhsa" title="RHSA-2023:3147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25147" id="CVE-2022-25147" type="cve" title="CVE-2022-25147"/>
      <reference href="https://bugzilla.redhat.com/2169652" id="2169652" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3147.html" id="ALSA-2023:3147" type="self" title="ALSA-2023:3147"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="apr-util" version="1.6.1" release="20.el9_2.1" epoch="0" arch="s390x" src="apr-util-1.6.1-20.el9_2.1.src.rpm">
          <filename>apr-util-1.6.1-20.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">3bf90d3689515f927f308e513b5a1a865874f3d47621f72983b561c2652c15c5</sum>
        </package>
        <package name="apr-util-bdb" version="1.6.1" release="20.el9_2.1" epoch="0" arch="s390x" src="apr-util-1.6.1-20.el9_2.1.src.rpm">
          <filename>apr-util-bdb-1.6.1-20.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">61e593a414429c4829c63889ba997090962418cc8846e1c95d0bdbbd6674418f</sum>
        </package>
        <package name="apr-util-mysql" version="1.6.1" release="20.el9_2.1" epoch="0" arch="s390x" src="apr-util-1.6.1-20.el9_2.1.src.rpm">
          <filename>apr-util-mysql-1.6.1-20.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">6ae686a6013fa07d9d1db6f184942cc5ba74f08ce670010699d7cf2d214ab273</sum>
        </package>
        <package name="apr-util-devel" version="1.6.1" release="20.el9_2.1" epoch="0" arch="s390x" src="apr-util-1.6.1-20.el9_2.1.src.rpm">
          <filename>apr-util-devel-1.6.1-20.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">8f8db25b6ac2e84ae5d20aead8dde221972ef8b3a5c547381b107110a613e785</sum>
        </package>
        <package name="apr-util-ldap" version="1.6.1" release="20.el9_2.1" epoch="0" arch="s390x" src="apr-util-1.6.1-20.el9_2.1.src.rpm">
          <filename>apr-util-ldap-1.6.1-20.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">ad11a92e99b25098ae36172d96b8f0e7b298f0e18dfcc53ae603198442d6ecad</sum>
        </package>
        <package name="apr-util-sqlite" version="1.6.1" release="20.el9_2.1" epoch="0" arch="s390x" src="apr-util-1.6.1-20.el9_2.1.src.rpm">
          <filename>apr-util-sqlite-1.6.1-20.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">d66b69636f6fa6b626e25df7dbc6eac07029b82c5eff72ea8c271a144f8778ad</sum>
        </package>
        <package name="apr-util-pgsql" version="1.6.1" release="20.el9_2.1" epoch="0" arch="s390x" src="apr-util-1.6.1-20.el9_2.1.src.rpm">
          <filename>apr-util-pgsql-1.6.1-20.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">e6e389bff5fa5a67a24b0e99415bb6740d339172298eabb31f4ff774e0a8a272</sum>
        </package>
        <package name="apr-util-odbc" version="1.6.1" release="20.el9_2.1" epoch="0" arch="s390x" src="apr-util-1.6.1-20.el9_2.1.src.rpm">
          <filename>apr-util-odbc-1.6.1-20.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">efab2338dfa817abbc927cf08fdd4d73db580e3510e70e27bf9c42d8e8361ddf</sum>
        </package>
        <package name="apr-util-openssl" version="1.6.1" release="20.el9_2.1" epoch="0" arch="s390x" src="apr-util-1.6.1-20.el9_2.1.src.rpm">
          <filename>apr-util-openssl-1.6.1-20.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">f907e97215ad30ec7f3783d4f40ed94e601b2c364b0774d341e858ea5ffb27e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3148</id>
    <title>Important: libreswan security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libreswan security update</summary>
    <description>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: Regression of CVE-2023-30570 fixes in the AlmaLinux (CVE-2023-2295)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3148" id="RHSA-2023:3148" type="rhsa" title="RHSA-2023:3148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2295" id="CVE-2023-2295" type="cve" title="CVE-2023-2295"/>
      <reference href="https://bugzilla.redhat.com/2189777" id="2189777" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3148.html" id="ALSA-2023:3148" type="self" title="ALSA-2023:3148"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libreswan" version="4.9" release="4.el9_2" epoch="0" arch="s390x" src="libreswan-4.9-4.el9_2.src.rpm">
          <filename>libreswan-4.9-4.el9_2.s390x.rpm</filename>
          <sum type="sha256">9a8ffca77532c19993941385c8dfe1a2bd544d99953c8115b6a0234ccbb1de4f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3150</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.11.0.

Security Fix(es):

* Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)
* Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)
* Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)
* Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)
* Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)
* Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)
* Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3150" id="RHSA-2023:3150" type="rhsa" title="RHSA-2023:3150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32205" id="CVE-2023-32205" type="cve" title="CVE-2023-32205"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32206" id="CVE-2023-32206" type="cve" title="CVE-2023-32206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32207" id="CVE-2023-32207" type="cve" title="CVE-2023-32207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32211" id="CVE-2023-32211" type="cve" title="CVE-2023-32211"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32212" id="CVE-2023-32212" type="cve" title="CVE-2023-32212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32213" id="CVE-2023-32213" type="cve" title="CVE-2023-32213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32215" id="CVE-2023-32215" type="cve" title="CVE-2023-32215"/>
      <reference href="https://bugzilla.redhat.com/2196736" id="2196736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196737" id="2196737" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196738" id="2196738" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196740" id="2196740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196741" id="2196741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196742" id="2196742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196753" id="2196753" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3150.html" id="ALSA-2023:3150" type="self" title="ALSA-2023:3150"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="thunderbird" version="102.11.0" release="1.el9_2.alma" epoch="0" arch="s390x" src="thunderbird-102.11.0-1.el9_2.alma.src.rpm">
          <filename>thunderbird-102.11.0-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">be316b6d5d07d7d44e118584113ffba6ae0fcaa0676b3895623d045fa2d02ce8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3245</id>
    <title>Important: git security update</title>
    <issued date="2023-05-22 00:00:00"/>
    <updated date="2023-05-23 09:20:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git security update</summary>
    <description>Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.

Security Fix(es):

* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)
* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)
* git: data exfiltration with maliciously crafted repository (CVE-2023-22490)
* git: git apply: a path outside the working tree can be overwritten with crafted input (CVE-2023-23946)
* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3245" id="RHSA-2023:3245" type="rhsa" title="RHSA-2023:3245"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22490" id="CVE-2023-22490" type="cve" title="CVE-2023-22490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23946" id="CVE-2023-23946" type="cve" title="CVE-2023-23946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25652" id="CVE-2023-25652" type="cve" title="CVE-2023-25652"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25815" id="CVE-2023-25815" type="cve" title="CVE-2023-25815"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29007" id="CVE-2023-29007" type="cve" title="CVE-2023-29007"/>
      <reference href="https://bugzilla.redhat.com/2168160" id="2168160" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168161" id="2168161" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188333" id="2188333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188337" id="2188337" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188338" id="2188338" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3245.html" id="ALSA-2023:3245" type="self" title="ALSA-2023:3245"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="gitk" version="2.39.3" release="1.el9_2" epoch="0" arch="noarch" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>gitk-2.39.3-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">04a2388d3e9ffb30522f40ace6f0a951d5a7c576dc9eb97225a20e1aa4e04bba</sum>
        </package>
        <package name="git-svn" version="2.39.3" release="1.el9_2" epoch="0" arch="noarch" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>git-svn-2.39.3-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">0636562f42e814d92392db782ba76cfe9c1390d452d16d989a351a09a0d63b33</sum>
        </package>
        <package name="git-credential-libsecret" version="2.39.3" release="1.el9_2" epoch="0" arch="s390x" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>git-credential-libsecret-2.39.3-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">0d3c4ab16742c0d8f04e6f37a1fbe14678c3c7231406d67fb4ba1b314799dc05</sum>
        </package>
        <package name="git-core-doc" version="2.39.3" release="1.el9_2" epoch="0" arch="noarch" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>git-core-doc-2.39.3-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">163f5c8d6e84b4be3f209c33183e0a11de041adfc4b3b14a5d57bcbe0a4999b4</sum>
        </package>
        <package name="git-all" version="2.39.3" release="1.el9_2" epoch="0" arch="noarch" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>git-all-2.39.3-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">3e1dbc5f1874088b71b915fae08f416a113b12439c096cdeb0725da8e8bb5bf3</sum>
        </package>
        <package name="git-core" version="2.39.3" release="1.el9_2" epoch="0" arch="s390x" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>git-core-2.39.3-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">58ceed640a77626df7cf0286077913ae04f5243cf7f3a7bccb258f0647126ac1</sum>
        </package>
        <package name="git-daemon" version="2.39.3" release="1.el9_2" epoch="0" arch="s390x" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>git-daemon-2.39.3-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">865af6eadd8668af99e4fd5fcb4246873f2f63d2f94d4d646de83b4069ed9e85</sum>
        </package>
        <package name="git-instaweb" version="2.39.3" release="1.el9_2" epoch="0" arch="noarch" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>git-instaweb-2.39.3-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">905ff58172d1fd914ae9bfa839b21d0fa622ace54e5d9318e007f48605bdfc0f</sum>
        </package>
        <package name="gitweb" version="2.39.3" release="1.el9_2" epoch="0" arch="noarch" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>gitweb-2.39.3-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">a4131b18978fa1c3ae539342fb16889a1189fd4f66e1210dafec949a3808fbb8</sum>
        </package>
        <package name="git-email" version="2.39.3" release="1.el9_2" epoch="0" arch="noarch" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>git-email-2.39.3-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">b2adac3046b74cb33b1ff0fd2dde28421f58088c9d0d35d861ea0785a61dacd5</sum>
        </package>
        <package name="perl-Git" version="2.39.3" release="1.el9_2" epoch="0" arch="noarch" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>perl-Git-2.39.3-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">bfebb49bf3fb5a4fd336c3447944475c29edc7a16f24ff3b781909cb83d0d952</sum>
        </package>
        <package name="git" version="2.39.3" release="1.el9_2" epoch="0" arch="s390x" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>git-2.39.3-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">c3b35de509ec790d07740b07a8bc6888e4f8e571a829dff7b590aee7f1d38cfb</sum>
        </package>
        <package name="perl-Git-SVN" version="2.39.3" release="1.el9_2" epoch="0" arch="noarch" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>perl-Git-SVN-2.39.3-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">c72e222bbb014814f18e10de524d317e82589fa7e6680080cd21ae03036ee5d4</sum>
        </package>
        <package name="git-gui" version="2.39.3" release="1.el9_2" epoch="0" arch="noarch" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>git-gui-2.39.3-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">d329b8f22f182b3b06ee32639fb3345bef1d82435f89e58c5c35a90a2a239a1c</sum>
        </package>
        <package name="git-subtree" version="2.39.3" release="1.el9_2" epoch="0" arch="s390x" src="git-2.39.3-1.el9_2.src.rpm">
          <filename>git-subtree-2.39.3-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">e6ee5c94e6688aa112af70dac761668befd1c081027e0da406c6bf323894f9d2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3318</id>
    <title>Important: go-toolset and golang security update</title>
    <issued date="2023-05-25 00:00:00"/>
    <updated date="2023-05-25 12:49:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset and golang security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

The golang packages provide the Go programming language compiler.

Security Fix(es):

* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3318" id="RHSA-2023:3318" type="rhsa" title="RHSA-2023:3318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24540" id="CVE-2023-24540" type="cve" title="CVE-2023-24540"/>
      <reference href="https://bugzilla.redhat.com/2196027" id="2196027" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3318.html" id="ALSA-2023:3318" type="self" title="ALSA-2023:3318"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="golang-tests" version="1.19.9" release="2.el9_2" epoch="0" arch="noarch" src="golang-1.19.9-2.el9_2.src.rpm">
          <filename>golang-tests-1.19.9-2.el9_2.noarch.rpm</filename>
          <sum type="sha256">3e7a3d789c3a201595d49dd61196170be4b9b2bec6598550984e221e517f6b13</sum>
        </package>
        <package name="golang-src" version="1.19.9" release="2.el9_2" epoch="0" arch="noarch" src="golang-1.19.9-2.el9_2.src.rpm">
          <filename>golang-src-1.19.9-2.el9_2.noarch.rpm</filename>
          <sum type="sha256">7a755e7bf01e8d100983fd3a21695878f2ade5268c1bce6fcfcbaf25265be3a7</sum>
        </package>
        <package name="golang-docs" version="1.19.9" release="2.el9_2" epoch="0" arch="noarch" src="golang-1.19.9-2.el9_2.src.rpm">
          <filename>golang-docs-1.19.9-2.el9_2.noarch.rpm</filename>
          <sum type="sha256">928cd427edc001871d6a1c7be4e1ea058d43c44d4ae45de88ce0c6179ab590cb</sum>
        </package>
        <package name="golang" version="1.19.9" release="2.el9_2" epoch="0" arch="s390x" src="golang-1.19.9-2.el9_2.src.rpm">
          <filename>golang-1.19.9-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">a4872804ed646d0df3af4065ddd1043ab919c49c2476f4f1313316053ac82104</sum>
        </package>
        <package name="go-toolset" version="1.19.9" release="1.el9_2" epoch="0" arch="s390x" src="go-toolset-1.19.9-1.el9_2.src.rpm">
          <filename>go-toolset-1.19.9-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">ac322266933eea7379ca1582c1b288803736599905577644e5da27d8489d5566</sum>
        </package>
        <package name="golang-misc" version="1.19.9" release="2.el9_2" epoch="0" arch="noarch" src="golang-1.19.9-2.el9_2.src.rpm">
          <filename>golang-misc-1.19.9-2.el9_2.noarch.rpm</filename>
          <sum type="sha256">b2a1acbb405b126bb4db37df44985d8056d79aedbc92cdc592dfbb6bfa2f9664</sum>
        </package>
        <package name="golang-bin" version="1.19.9" release="2.el9_2" epoch="0" arch="s390x" src="golang-1.19.9-2.el9_2.src.rpm">
          <filename>golang-bin-1.19.9-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">c3f26a63516952309eef3ffb63460133e7be14b861d2cbff43133843609f98ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3423</id>
    <title>Important: cups-filters security update</title>
    <issued date="2023-06-05 00:00:00"/>
    <updated date="2023-06-06 05:52:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups-filters security update</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3423" id="RHSA-2023:3423" type="rhsa" title="RHSA-2023:3423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24805" id="CVE-2023-24805" type="cve" title="CVE-2023-24805"/>
      <reference href="https://bugzilla.redhat.com/2203051" id="2203051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3423.html" id="ALSA-2023:3423" type="self" title="ALSA-2023:3423"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="cups-filters" version="1.28.7" release="11.el9_2.1" epoch="0" arch="s390x" src="cups-filters-1.28.7-11.el9_2.1.src.rpm">
          <filename>cups-filters-1.28.7-11.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">5d7c931be494bfaceb9b6b9f051a5a1f6ecc9f9dadf258db9f5b1853e9e7d724</sum>
        </package>
        <package name="cups-filters-libs" version="1.28.7" release="11.el9_2.1" epoch="0" arch="s390x" src="cups-filters-1.28.7-11.el9_2.1.src.rpm">
          <filename>cups-filters-libs-1.28.7-11.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">976406c6a918a25b89f5040b368d2f68b03e7f05df39b6e675bd69afea7f12ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3432</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-06-05 00:00:00"/>
    <updated date="2023-06-06 06:15:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: a use-after-free when processing maliciously crafted web content (CVE-2023-32373)
* webkitgtk: an out-of-bounds read when processing malicious content (CVE-2023-28204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3432" id="RHSA-2023:3432" type="rhsa" title="RHSA-2023:3432"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28204" id="CVE-2023-28204" type="cve" title="CVE-2023-28204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32373" id="CVE-2023-32373" type="cve" title="CVE-2023-32373"/>
      <reference href="https://bugzilla.redhat.com/2209208" id="2209208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209214" id="2209214" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3432.html" id="ALSA-2023:3432" type="self" title="ALSA-2023:3432"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="webkit2gtk3-jsc-devel" version="2.38.5" release="1.el9_2.2" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9_2.2.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.38.5-1.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">999c5ef212f384adf2abc805f54beb2fb28341dddeb9bbd7d2a010b17d653f68</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.38.5" release="1.el9_2.2" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9_2.2.src.rpm">
          <filename>webkit2gtk3-jsc-2.38.5-1.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">9dd369a16f495e6efae1fc67eedc6d86b49149e5acda02afba9b75066170d5c7</sum>
        </package>
        <package name="webkit2gtk3" version="2.38.5" release="1.el9_2.2" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9_2.2.src.rpm">
          <filename>webkit2gtk3-2.38.5-1.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">9ff131957ac593c780ce591f1bbe8588df4ae3a2fb62d064abea6c99beae7254</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.38.5" release="1.el9_2.2" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9_2.2.src.rpm">
          <filename>webkit2gtk3-devel-2.38.5-1.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">d055fdcf5dff012e26da8632a0ca302646fe369d124fbd5b02eabe68ce6bad05</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3559</id>
    <title>Important: c-ares security update</title>
    <issued date="2023-06-13 00:00:00"/>
    <updated date="2023-06-14 07:21:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>c-ares security update</summary>
    <description>The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

* c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3559" id="RHSA-2023:3559" type="rhsa" title="RHSA-2023:3559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32067" id="CVE-2023-32067" type="cve" title="CVE-2023-32067"/>
      <reference href="https://bugzilla.redhat.com/2209502" id="2209502" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3559.html" id="ALSA-2023:3559" type="self" title="ALSA-2023:3559"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="c-ares-devel" version="1.17.1" release="5.el9_2.1" epoch="0" arch="s390x" src="c-ares-1.17.1-5.el9_2.1.src.rpm">
          <filename>c-ares-devel-1.17.1-5.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">db6b83824bfdab391ce7b7a790a6e9451bc19c5c7ddd83d1fc74d1d4cfedb28d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3577</id>
    <title>Important: nodejs:18 security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 19:30:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:18 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)
* c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)
* c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)
* c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3577" id="RHSA-2023:3577" type="rhsa" title="RHSA-2023:3577"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31124" id="CVE-2023-31124" type="cve" title="CVE-2023-31124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31130" id="CVE-2023-31130" type="cve" title="CVE-2023-31130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31147" id="CVE-2023-31147" type="cve" title="CVE-2023-31147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32067" id="CVE-2023-32067" type="cve" title="CVE-2023-32067"/>
      <reference href="https://bugzilla.redhat.com/2209494" id="2209494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209497" id="2209497" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209501" id="2209501" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209502" id="2209502" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3577.html" id="ALSA-2023:3577" type="self" title="ALSA-2023:3577"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <module name="nodejs" stream="18" version="9020020230623091417" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-docs" version="18.14.2" release="3.module_el9.2.0+30+e3312493" epoch="1" arch="noarch" src="nodejs-18.14.2-3.module_el9.2.0+30+e3312493.src.rpm">
          <filename>nodejs-docs-18.14.2-3.module_el9.2.0+30+e3312493.noarch.rpm</filename>
          <sum type="sha256">2ad3268cdabd44f1fe5271f5aa2641b5e7eac4649848a4529d5aeaf5cf9a98fa</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8</sum>
        </package>
        <package name="nodejs-devel" version="18.14.2" release="3.module_el9.2.0+30+e3312493" epoch="1" arch="s390x" src="nodejs-18.14.2-3.module_el9.2.0+30+e3312493.src.rpm">
          <filename>nodejs-devel-18.14.2-3.module_el9.2.0+30+e3312493.s390x.rpm</filename>
          <sum type="sha256">86d3bacce28dd86426bdbeff03e3e25f002c2fe6602434485b59d672bb21e584</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0</sum>
        </package>
        <package name="npm" version="9.5.0" release="1.18.14.2.3.module_el9.2.0+30+e3312493" epoch="1" arch="s390x" src="nodejs-18.14.2-3.module_el9.2.0+30+e3312493.src.rpm">
          <filename>npm-9.5.0-1.18.14.2.3.module_el9.2.0+30+e3312493.s390x.rpm</filename>
          <sum type="sha256">d77452600e17c684c7c68636b98b28003de2bfab034cd9645b655a0cbccc0b1d</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.14.2" release="3.module_el9.2.0+30+e3312493" epoch="1" arch="s390x" src="nodejs-18.14.2-3.module_el9.2.0+30+e3312493.src.rpm">
          <filename>nodejs-full-i18n-18.14.2-3.module_el9.2.0+30+e3312493.s390x.rpm</filename>
          <sum type="sha256">e62d7f4b3d1d13fb4cab6de469b63d63a7a4fbaf333f049acabcac2e47320401</sum>
        </package>
        <package name="nodejs" version="18.14.2" release="3.module_el9.2.0+30+e3312493" epoch="1" arch="s390x" src="nodejs-18.14.2-3.module_el9.2.0+30+e3312493.src.rpm">
          <filename>nodejs-18.14.2-3.module_el9.2.0+30+e3312493.s390x.rpm</filename>
          <sum type="sha256">ea9f0070c3d8ead4392669802409a1e02f5ec26341c4715f6714338330ab8b91</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="2.module_el9.2.0+29+de583a0b" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-2.module_el9.2.0+29+de583a0b.src.rpm">
          <filename>nodejs-nodemon-2.0.20-2.module_el9.2.0+29+de583a0b.noarch.rpm</filename>
          <sum type="sha256">f50193ade11d258bdd6c8782db590f72eaeb21799f8df9703e96ffd60644688d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3581</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 19:17:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.118 and .NET Runtime 6.0.18.

The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.118). (BZ#2212379)

Security Fix(es):

* dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)
* dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337)
* dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128)
* dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3581" id="RHSA-2023:3581" type="rhsa" title="RHSA-2023:3581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24936" id="CVE-2023-24936" type="cve" title="CVE-2023-24936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29331" id="CVE-2023-29331" type="cve" title="CVE-2023-29331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29337" id="CVE-2023-29337" type="cve" title="CVE-2023-29337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33128" id="CVE-2023-33128" type="cve" title="CVE-2023-33128"/>
      <reference href="https://bugzilla.redhat.com/2192438" id="2192438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212617" id="2212617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212618" id="2212618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213703" id="2213703" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3581.html" id="ALSA-2023:3581" type="self" title="ALSA-2023:3581"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="aspnetcore-runtime-6.0" version="6.0.18" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el9_2.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.18-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">27f54bb6411d5c3d6f3f33c6ebfc1b9ac66170b60610a228012092bb03184a71</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.18" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el9_2.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.18-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">31c3fa0fa319d0e712730a0c65b385a7a7d567ce8cddab93795460954e9a2574</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.18" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el9_2.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.18-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">48f47fbc560b2a74aacffc59feb5f392d9711d0cb5982d5a5c5b9f49481eb5ac</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.118" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.118-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">55998a594a017588f7f5bb7a62ddb7ee024fdde7e6cfc4450569bf043533cde3</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.18" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el9_2.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.18-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">72705b904fa2629e38f5481f64e6b9a2a399f290776e17b88616788fad748150</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.18" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el9_2.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.18-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">d42e84aeced5f0a139f75731ce38758779545a0e5a6bb4df1b4b64bbd710a10a</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.18" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el9_2.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.18-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">d69660dadaa31e657469419f024b88c5b3ab710492e8ecc1c7bf2523f29e2806</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.118" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el9_2.src.rpm">
          <filename>dotnet-templates-6.0-6.0.118-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">fe54577e9c4266ebdd49140a718f3f84e62228d67c8819c6a0fa31f30ca60f57</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3585</id>
    <title>Important: python3.11 security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 19:05:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3585" id="RHSA-2023:3585" type="rhsa" title="RHSA-2023:3585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3585.html" id="ALSA-2023:3585" type="self" title="ALSA-2023:3585"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="python3.11" version="3.11.2" release="2.el9_2.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.1.src.rpm">
          <filename>python3.11-3.11.2-2.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">29e1bb94d3aed5937e6815412008182bb2b9bba9327933a7298b705427f2e4b0</sum>
        </package>
        <package name="python3.11-devel" version="3.11.2" release="2.el9_2.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.1.src.rpm">
          <filename>python3.11-devel-3.11.2-2.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">2d6341ca71949ef9369090077cf31487ec315fc232203521278811df0f867e48</sum>
        </package>
        <package name="python3.11-libs" version="3.11.2" release="2.el9_2.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.1.src.rpm">
          <filename>python3.11-libs-3.11.2-2.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">624767a87969ab754fa72c866c36e943e3f58c05a7f6fdd65a93d35eab489c7c</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.2" release="2.el9_2.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.1.src.rpm">
          <filename>python3.11-tkinter-3.11.2-2.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">91f67ea2df1b1e7f6339203c00596809c8fd44dfffae8e95732fb5d96cb04700</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3586</id>
    <title>Important: nodejs security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 18:57:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)
* c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)
* c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)
* c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3586" id="RHSA-2023:3586" type="rhsa" title="RHSA-2023:3586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31124" id="CVE-2023-31124" type="cve" title="CVE-2023-31124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31130" id="CVE-2023-31130" type="cve" title="CVE-2023-31130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31147" id="CVE-2023-31147" type="cve" title="CVE-2023-31147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32067" id="CVE-2023-32067" type="cve" title="CVE-2023-32067"/>
      <reference href="https://bugzilla.redhat.com/2209494" id="2209494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209497" id="2209497" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209501" id="2209501" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209502" id="2209502" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3586.html" id="ALSA-2023:3586" type="self" title="ALSA-2023:3586"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="nodejs-full-i18n" version="16.19.1" release="2.el9_2" epoch="1" arch="s390x" src="nodejs-16.19.1-2.el9_2.src.rpm">
          <filename>nodejs-full-i18n-16.19.1-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">2b178ec4de209bd9ebf53331ff8845cf8aa715b8be66419ef894ab3fdd92b9a6</sum>
        </package>
        <package name="nodejs" version="16.19.1" release="2.el9_2" epoch="1" arch="s390x" src="nodejs-16.19.1-2.el9_2.src.rpm">
          <filename>nodejs-16.19.1-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">56bc51d14fa00767c90db67ec8c0e35912794eb88e1af537c2e1419c04a86eab</sum>
        </package>
        <package name="npm" version="8.19.3" release="1.16.19.1.2.el9_2" epoch="1" arch="s390x" src="nodejs-16.19.1-2.el9_2.src.rpm">
          <filename>npm-8.19.3-1.16.19.1.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">d16899bb2806c6a49977c8c657fd299e0950f05775a1cc462405773d94152c1f</sum>
        </package>
        <package name="nodejs-docs" version="16.19.1" release="2.el9_2" epoch="1" arch="noarch" src="nodejs-16.19.1-2.el9_2.src.rpm">
          <filename>nodejs-docs-16.19.1-2.el9_2.noarch.rpm</filename>
          <sum type="sha256">d1f77d444195b730f9ffb538a9426aba8ee41a9d5fb373cc4db872046e2cf19b</sum>
        </package>
        <package name="nodejs-libs" version="16.19.1" release="2.el9_2" epoch="1" arch="s390x" src="nodejs-16.19.1-2.el9_2.src.rpm">
          <filename>nodejs-libs-16.19.1-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">d9fb010815c92ba9104095c5092c28a6bc28bd3bcb2a4316642d10305ed07ce5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3587</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-21 23:59:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.12.0.

Security Fix(es):

* Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)
* Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3587" id="RHSA-2023:3587" type="rhsa" title="RHSA-2023:3587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34414" id="CVE-2023-34414" type="cve" title="CVE-2023-34414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34416" id="CVE-2023-34416" type="cve" title="CVE-2023-34416"/>
      <reference href="https://bugzilla.redhat.com/2212841" id="2212841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212842" id="2212842" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3587.html" id="ALSA-2023:3587" type="self" title="ALSA-2023:3587"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="thunderbird" version="102.12.0" release="1.el9_2.alma" epoch="0" arch="s390x" src="thunderbird-102.12.0-1.el9_2.alma.src.rpm">
          <filename>thunderbird-102.12.0-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">f6355d6eaf70448b6476f8db90a478621c91dcfbddca5bc74d804d18e302cf48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3589</id>
    <title>Important: firefox security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-21 23:53:31"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.12.0 ESR.

Security Fix(es):

* Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)
* Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3589" id="RHSA-2023:3589" type="rhsa" title="RHSA-2023:3589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34414" id="CVE-2023-34414" type="cve" title="CVE-2023-34414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34416" id="CVE-2023-34416" type="cve" title="CVE-2023-34416"/>
      <reference href="https://bugzilla.redhat.com/2212841" id="2212841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212842" id="2212842" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3589.html" id="ALSA-2023:3589" type="self" title="ALSA-2023:3589"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="firefox-x11" version="102.12.0" release="1.el9_2.alma" epoch="0" arch="s390x" src="firefox-102.12.0-1.el9_2.alma.src.rpm">
          <filename>firefox-x11-102.12.0-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">0cc2eac161da7a83d5f2cb57874d5937a8bb009f13235323471d604a3079172a</sum>
        </package>
        <package name="firefox" version="102.12.0" release="1.el9_2.alma" epoch="0" arch="s390x" src="firefox-102.12.0-1.el9_2.alma.src.rpm">
          <filename>firefox-102.12.0-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">3f3db3e7ce21040c5900fd7ba2a6d58c46e82e73d07366f1559d2d1a11db7990</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3592</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 18:38:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.107 and .NET Runtime 7.0.7.

The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.107). (BZ#2211877)

Security Fix(es):

* dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)
* dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337)
* dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument (CVE-2023-32032)
* dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128)
* dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3592" id="RHSA-2023:3592" type="rhsa" title="RHSA-2023:3592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24936" id="CVE-2023-24936" type="cve" title="CVE-2023-24936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29331" id="CVE-2023-29331" type="cve" title="CVE-2023-29331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29337" id="CVE-2023-29337" type="cve" title="CVE-2023-29337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32032" id="CVE-2023-32032" type="cve" title="CVE-2023-32032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33128" id="CVE-2023-33128" type="cve" title="CVE-2023-33128"/>
      <reference href="https://bugzilla.redhat.com/2192438" id="2192438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212615" id="2212615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212617" id="2212617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212618" id="2212618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213703" id="2213703" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3592.html" id="ALSA-2023:3592" type="self" title="ALSA-2023:3592"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="netstandard-targeting-pack-2.1" version="7.0.107" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el9_2.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.107-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">0d00bb7a2525aaa8aaf17fd477dd4be72a3ed537e15d4bbc4c4f1a5d53f187af</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.7" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el9_2.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.7-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">1c037a5de139efb59aa95de7558f083202076984115cb5ee31a8214f96f53e64</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.7" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el9_2.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.7-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">29dc47f9b1294daa347c442ff6248c5229d960ac1e51baeaf4d5bf57bbf858a9</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.107" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el9_2.src.rpm">
          <filename>dotnet-templates-7.0-7.0.107-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">47e3e7cae8b071ce4af511520d1aca7e39e0d3514dd05e4df7dcb8802a3c6366</sum>
        </package>
        <package name="dotnet-host" version="7.0.7" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el9_2.src.rpm">
          <filename>dotnet-host-7.0.7-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7063f78a7bbe5414edfa298252f53dec1f104e06a332472ace43571f52df238a</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.7" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el9_2.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.7-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">82e92cab1b1ac56ca2426ac6785f9575e9557cf665fa8ef3d506415b3588a7b7</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.7" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el9_2.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.7-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">9252c141c705682436eca6d42dd0fc28bfab2ed7c33a19a9b785e66a3cdb146b</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.7" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el9_2.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.7-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">a923285af64caf246587a420143130bb32bcd5daade38412bfa66e3a3938fb05</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.107" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.107-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">be8354514ed8843d7964bfc2efa273d91a1e5921fe92d5113b9d7ba5e5d42840</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.7" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el9_2.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.7-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">c9f30c6a73e99e11bffe63023b2bf0bd85c3dbde04809722ebc344d24c83a1f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3595</id>
    <title>Important: python3.9 security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 18:37:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3595" id="RHSA-2023:3595" type="rhsa" title="RHSA-2023:3595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3595.html" id="ALSA-2023:3595" type="self" title="ALSA-2023:3595"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="python3-devel" version="3.9.16" release="1.el9_2.1" epoch="0" arch="s390x" src="python3.9-3.9.16-1.el9_2.1.src.rpm">
          <filename>python3-devel-3.9.16-1.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">73133830fec152cdf7e02bee79f0b65ee889b6ea6f5e06fba402805ebfaa44bc</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.16" release="1.el9_2.1" epoch="0" arch="noarch" src="python3.9-3.9.16-1.el9_2.1.src.rpm">
          <filename>python-unversioned-command-3.9.16-1.el9_2.1.noarch.rpm</filename>
          <sum type="sha256">b345ad21c1a737673f51b09aaa1c7d2dd0b1cd3e180136b26e7caa6af3ec09bd</sum>
        </package>
        <package name="python3-tkinter" version="3.9.16" release="1.el9_2.1" epoch="0" arch="s390x" src="python3.9-3.9.16-1.el9_2.1.src.rpm">
          <filename>python3-tkinter-3.9.16-1.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">edb5b585d685620a4c52a0363c4765f3c41164cb537ed60aff2890c41a7d81b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3661</id>
    <title>Important: texlive security update</title>
    <issued date="2023-06-19 00:00:00"/>
    <updated date="2023-06-23 18:28:19"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>texlive security update</summary>
    <description>The texlive packages contain TeXLive, an implementation of TeX for Linux or UNIX systems.

Security Fix(es):

* texlive: arbitrary code execution allows document complied with older version (CVE-2023-32700)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3661" id="RHSA-2023:3661" type="rhsa" title="RHSA-2023:3661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32700" id="CVE-2023-32700" type="cve" title="CVE-2023-32700"/>
      <reference href="https://bugzilla.redhat.com/2208943" id="2208943" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3661.html" id="ALSA-2023:3661" type="self" title="ALSA-2023:3661"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="texlive-cm-lgc" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-cm-lgc-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">008921f02911ae9af1e3e15b1e71f820a8804fd5283e3e88c3d43614fff8ce14</sum>
        </package>
        <package name="texlive-tex-ini-files" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-tex-ini-files-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">00fc988886f10012b6c4f8fcd423299bee6a435b26a6b70c160b945cb10a6471</sum>
        </package>
        <package name="texlive-texlive.infra" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-texlive.infra-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">01a73233df2c026e50e5426fd296698f3982876002579101a57024022d1ff696</sum>
        </package>
        <package name="texlive-soul" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-soul-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">03a3edf75b3636a312ade056ecb65ad93016c8a35c5e6444c74d934fe25e6bae</sum>
        </package>
        <package name="texlive-colortbl" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-colortbl-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">03d5faf7a25adcdf1ea22cc42e813df4538f8eeb2fc8a052027163de93ad38d4</sum>
        </package>
        <package name="texlive-textpos" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-textpos-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">046a2d05382b3024f3df344ac50434c702ed545c184a31b191b61eba9553e993</sum>
        </package>
        <package name="texlive-marvosym" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-marvosym-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">0492773bbb18fa758233e291b6d98862457b86df8e381e50ad226e8a16bfa967</sum>
        </package>
        <package name="texlive-tex-gyre-math" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-tex-gyre-math-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">0567fb9dee7f89aaf638e8365af6d1e5faa421fb2b79fac09cb855381047b29f</sum>
        </package>
        <package name="texlive-jadetex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-jadetex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">060f0b98b563da426bd438ac2c416ef7bb364249473b16b8272b7d83eea60369</sum>
        </package>
        <package name="texlive-fancyhdr" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fancyhdr-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">0612e316410c4d8b8232198f8c12b54873c0c8482594c1181d7bbf9821bd2f95</sum>
        </package>
        <package name="texlive-mathspec" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-mathspec-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">0634d60991669f85ede8af34330a550b5a59511bcaa51f244ddf698e7cc3fc7e</sum>
        </package>
        <package name="texlive-koma-script" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-koma-script-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">06624788aea8c593d0987affdef8e30437dcd88ce1272049527e55195b7f82d2</sum>
        </package>
        <package name="texlive-ulem" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ulem-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">067e68b0c210c22dd2cff18ad0791ed435ad2a04613dfffdd452aedf8bb97d5f</sum>
        </package>
        <package name="texlive-sectsty" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-sectsty-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">094a9f82895ecb203a6bafedc54fe0fe51891bcc4f696bae19dfd4de9226aa19</sum>
        </package>
        <package name="texlive-mptopdf" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-mptopdf-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">0a1c738bea991a6de4cf7dfa08fe8ff5f19c057c0fcd0f73ce9419d8d1747ce5</sum>
        </package>
        <package name="texlive-infwarerr" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-infwarerr-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">0b0d16b3370ac2df00563cb4ddce9044f80e57e2c2fffeca5e7799e93c3cdaa8</sum>
        </package>
        <package name="texlive-helvetic" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-helvetic-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">0b81e1accbf64549b458c4b0af086553f81b902b9a79ada1e10ebfa1cdd195e1</sum>
        </package>
        <package name="texlive-svn-prov" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-svn-prov-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">0c8d424cf06a55e8f94a96a708c356713104efef028d278cebe419d4832e0caf</sum>
        </package>
        <package name="texlive-pst-coil" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-coil-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">0ca71d388d4881090a9bd537830cefb44cb31e2d1533b5ad32caa7399fc84020</sum>
        </package>
        <package name="texlive-threeparttable" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-threeparttable-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">0d863bdad37c6fa4bfef7eaf7265dc917eb60e47fda5ea48ffc7a7898a404f45</sum>
        </package>
        <package name="texlive-tabulary" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-tabulary-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">0ea34ea8845dc4ca8515e41c6ba85db816ef885db66a1c61221230343ffa8141</sum>
        </package>
        <package name="texlive-fixlatvian" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fixlatvian-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">10879ecf7470319206be3ca1ed4d9beb400ad706147665dae95d5831b0363af5</sum>
        </package>
        <package name="texlive-footmisc" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-footmisc-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">109db5afd8e3f00cc4ecbb916a24c94793775aba9a9733af381c372c2f37d778</sum>
        </package>
        <package name="texlive-import" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-import-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">110f10f96f4d13cb81c69688fb9a3d5d01d0d31bc1420be895a121bcb2315e3e</sum>
        </package>
        <package name="texlive-titling" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-titling-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">113720ce4e40ab881fb9e9bf6b017988cb22e583a93150a7e3dfb9174a7a7f2e</sum>
        </package>
        <package name="texlive-hologo" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-hologo-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">11c9645d8aa4a754af8312d929367df722013ead3c2f889f4be09cfe7cbc146a</sum>
        </package>
        <package name="texlive-needspace" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-needspace-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">11fbe12bd907aba101d2bd9ba46d03c6b525b50cbf6fab9739637468e8fe007f</sum>
        </package>
        <package name="texlive-mflogo-font" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-mflogo-font-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">123b7917b2bda6ddf2cddb18a293973ecbb559554bbeb8d05ab09ffa1544388b</sum>
        </package>
        <package name="texlive-hyph-utf8" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-hyph-utf8-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">14c3fbbd66ad91ff2fe14595edda7d48733de591190d09c7e671699da2b42d73</sum>
        </package>
        <package name="texlive-knuth-local" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-knuth-local-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">1646b3dddacaecb9311361ebac9bfefa79c04d2b9184487cece2ae5b4151b8e3</sum>
        </package>
        <package name="texlive-bibtex" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-bibtex-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">17215093321851ae1635578a6faaa26b00364172f4a5d2939c735e7832686219</sum>
        </package>
        <package name="texlive-txfonts" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-txfonts-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">17d873f3457788674c3c4ae3cb039d72c7c435641c3a8f2dc8dfc57f77ae47d5</sum>
        </package>
        <package name="texlive-ragged2e" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ragged2e-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">17de9bc1afa0ce3b5b3b6cdf68a6a9e1728025d892dbd2bcb35e1c0facbcd9f9</sum>
        </package>
        <package name="texlive-hobsub" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-hobsub-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">18036b80304f61f165e4817017e4b223f1316033d1e9389e355d5ec2b24decc5</sum>
        </package>
        <package name="texlive-showexpl" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-showexpl-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">18ec49ccb66c07d97ed14331a337017565ebc26bf76effd1af35bc5cff7916fc</sum>
        </package>
        <package name="texlive-xifthen" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xifthen-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">19493a2fa91bf9e5b95b4407b155a691f59d7b141c5043186abc97288443d58c</sum>
        </package>
        <package name="texlive-latex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-latex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">196f9af392b84b70f4461877495d1208ac4894d484f64e0f1f288ecc830f9c9a</sum>
        </package>
        <package name="texlive-linegoal" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-linegoal-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">197fb4010fb2aacfe7f554a341991292173aca07ad8b5582d8eee1eea0e4e6a9</sum>
        </package>
        <package name="texlive-context" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-context-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">19ca382d209bc5200b479ea44c820cfc0b3d79a0d228f8715f24432cd57f61cf</sum>
        </package>
        <package name="texlive-appendix" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-appendix-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">1be77cfba81b5e6b446f6bda4ff6c01861e557c8939734b7f9ebaa8445d98194</sum>
        </package>
        <package name="texlive-eqparbox" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-eqparbox-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">1c5e152323d4318172765efcadbdac6f1de62d9c819be6e62c45f8cb20526b97</sum>
        </package>
        <package name="texlive-realscripts" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-realscripts-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">1c93892d7f44a8471bea3f29f14ae565a67028a9119e41ad3ccb329eee32f1e9</sum>
        </package>
        <package name="texlive-tocloft" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-tocloft-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">1d4656936cccb45349aaf140cc1a83b5ce6c724c4369744d162faa127ea709d4</sum>
        </package>
        <package name="texlive-collection-latexrecommended" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-collection-latexrecommended-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">1e7107b24cf5b765859dd8882a3c7a6d30e68af24bd24b291b394e076fcfff50</sum>
        </package>
        <package name="texlive-l3backend" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-l3backend-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">1e8a72df7774e93029ce20d8a2a1e04769e17bed47871f841b1416e172c3bf0f</sum>
        </package>
        <package name="texlive-amsfonts" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-amsfonts-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">1f1cac2f6c6082dfbd86cab59c9cc3a436803ae1a7093eac3a945fc8c63cfb5e</sum>
        </package>
        <package name="texlive-pst-slpe" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-slpe-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">1fea8e8408d26580d97402b2bded9b3c469e99cc73506077586d707c1b9a9e5d</sum>
        </package>
        <package name="texlive-modes" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-modes-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">202049a49b9a5adfc102587d2f06557a2fe202335179370440f189222980d969</sum>
        </package>
        <package name="texlive-philokalia" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-philokalia-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">20470a3ad072629e868f7ba008a7186f6178ee586ad63d18a25e3d5e98de4fae</sum>
        </package>
        <package name="texlive-ms" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ms-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">2080ab2eaff13b1a85e633ed4861eb1b1921dffca830e63177ce2c977731d948</sum>
        </package>
        <package name="texlive-notoccite" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-notoccite-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">21c20102cad39c458aef1820eb47f649cf1d036b4558266b8dc2991b44137753</sum>
        </package>
        <package name="texlive-texlive-docindex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-texlive-docindex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">223c3e99fc171bd681cb4898347aee3f66d6cb19000fa3c7293017ed49a6b967</sum>
        </package>
        <package name="texlive-dvipdfmx" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-dvipdfmx-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">25e9b81a73c759dce19728f33ddfd5a0d4987350dada6e4369a807dfd934a2a4</sum>
        </package>
        <package name="texlive-mathtools" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-mathtools-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">2764db8e807c79d5ec522d042e2e1522cb2bc9e6313260545d3d8480b34cce48</sum>
        </package>
        <package name="texlive-anysize" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-anysize-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">28e15ddb2d6b107890cc55837fe1e51d778f70a73536fae69e6cd53acb78f4fc</sum>
        </package>
        <package name="texlive-classpack" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-classpack-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">2a6b9a64fad829f027a2b184ee4d45dba5790b7e5c6ea9cb78a5ba96353d6726</sum>
        </package>
        <package name="texlive-hanging" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-hanging-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">2bd4dc1fac394e2368590cece7fa2f72d2928d6a617d32dc0de8f8fe472e0f71</sum>
        </package>
        <package name="texlive-xmltexconfig" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xmltexconfig-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">2beba6a7d20f6e9eb2927f241f57e254c9ffc4c9c58f286bf294fdb70b7da2de</sum>
        </package>
        <package name="texlive-mflogo" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-mflogo-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">2fb476082c8bcc4d204be2ff40120135ee5fdb561ec8af06dc28e3947146ca51</sum>
        </package>
        <package name="texlive-upquote" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-upquote-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">308f6cc918fdd672be8425f1eeb04329256421349796bac2223f72c89b5be821</sum>
        </package>
        <package name="texlive-kastrup" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-kastrup-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">322627e28ebcb579afaba7114197f739990511b3e1b0e40e8e1bfc6e40191438</sum>
        </package>
        <package name="texlive-hyphenex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-hyphenex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3229fda674fb7c28b1fff40d9d83eaf82ea46e64a202e66352e6c4239fd4079e</sum>
        </package>
        <package name="texlive-extsizes" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-extsizes-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">32af1364245ddc53379a8557a535255b24a7d53cb101647327bb40a2efdc7dff</sum>
        </package>
        <package name="texlive-kvdefinekeys" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-kvdefinekeys-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">32ba8b042adc2c5aae8db7895ea73e40e32ce6b36ec8622ef8defb981f271e06</sum>
        </package>
        <package name="texlive-booktabs" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-booktabs-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">333724d19fb37357bcdbc2d4c2303bcee56701feda7621ef1080df3f2ca1ec41</sum>
        </package>
        <package name="texlive-amsmath" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-amsmath-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">33c29ea6140c64140c25d0f4a7a64949d6e8cc9961b6c58dcf5bb57d54b8d231</sum>
        </package>
        <package name="texlive-fontware" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fontware-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">33ead4efc32689359186a7012a174f2e37cc459223f065eaaa04ec20553cb05a</sum>
        </package>
        <package name="texlive-xetexfontinfo" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xetexfontinfo-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">33ee2fff66793f20005154903f976cee8136da5028db0aff2e1170cbf568da51</sum>
        </package>
        <package name="texlive-times" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-times-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">345c6df0ef4bbe06ceddb85f45a8ad9ea214888253093456d1a4f88139a5df55</sum>
        </package>
        <package name="texlive-texlive-en" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-texlive-en-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3461aa9d3f587e18d0ef51ecd8e54ed7f791845c557971f8de9ab46dbaef67e4</sum>
        </package>
        <package name="texlive-datetime" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-datetime-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3487709006d59de93155775f9e76c5c7c4684514d1c80bf7e8b0d2a753e8f2b9</sum>
        </package>
        <package name="texlive-atveryend" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-atveryend-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3742f2da7231306a33c1bc88bb28494cc4bf00e0c0fbd509a223d35472ab1b71</sum>
        </package>
        <package name="texlive-bigfoot" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-bigfoot-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">38343aef3e24d8ca3c914a32387b99f50d322bc682ac64b86d69336e9ebbb9b3</sum>
        </package>
        <package name="texlive-parallel" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-parallel-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3892188e08f2d8d6c52ec661e9f4199c23a1772383d87b84d7ed23e0af707084</sum>
        </package>
        <package name="texlive-powerdot" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-powerdot-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">39ad6a25e381c314e82bb9b8e247df8d148d7f5906b93407d54366e5bf38982c</sum>
        </package>
        <package name="texlive-euler" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-euler-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3a2d69c650be8d742536a180be6040a3605ea7f4bf6d1b906b051514a86f2868</sum>
        </package>
        <package name="texlive-pst-arrow" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-arrow-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3a632816b03c0f41b7ac81cd96a0f1bf0be2b2fba5b58d0d45333a4a13201851</sum>
        </package>
        <package name="texlive-fontawesome" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fontawesome-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3a7334e01d3ffd8daff9692de4e2bdedfffd083d025922e49bf303fe16b94b0f</sum>
        </package>
        <package name="texlive-gettitlestring" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-gettitlestring-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3afecdb04dd50162478c3ae50e157c9f1795675ef4b5ad70f3f294e77ff2e97a</sum>
        </package>
        <package name="texlive-pxfonts" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pxfonts-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3c0241bc76ad75d6cd7777fec8ce9ab8490fc598c0e407183f6af9133920f441</sum>
        </package>
        <package name="texlive-fp" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fp-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3c61538c8deb28baa38b64a9f5d4d438b0d92431ec371c28f2ec6641bc3622ed</sum>
        </package>
        <package name="texlive-etex-pkg" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-etex-pkg-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3ccb993408be681662a5bf34073f5ba2b7395a258109418b0d98320510715108</sum>
        </package>
        <package name="texlive-metalogo" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-metalogo-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3cf9bada2f5fa3bc9c26d267528fabf2de20c6eca82a0cff3dde49db37a8470b</sum>
        </package>
        <package name="texlive-passivetex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-passivetex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3d4cfef8ac600efcd7e611d6f3db9c36adea2bb7eb8d388050c7876b2cd49a25</sum>
        </package>
        <package name="texlive-texlive-scripts" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-texlive-scripts-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3e73627f0afc2b248d6f41d280e59505f0bb44f5f3f64efc1aa92c17e7d1b273</sum>
        </package>
        <package name="texlive-latexbug" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-latexbug-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3f24bb761fd759608e95427b9758062cded75a144f98c3cadea9ab4a84404f8f</sum>
        </package>
        <package name="texlive-thumbpdf" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-thumbpdf-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">3fcd84ae018de793ac8a7cd7532e6214b106d073a76ebfea89c52bddfb4d5061</sum>
        </package>
        <package name="texlive-fancyvrb" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fancyvrb-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">4013749eab8fe6ca518f04ce1366a899ffd219b0ac3b564b09a30f462d907e49</sum>
        </package>
        <package name="texlive-xesearch" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xesearch-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">409228515606416ac35b940b8a472d9375c729cc5f5102cd7389a5029679c73f</sum>
        </package>
        <package name="texlive-multirow" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-multirow-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">426ea9ab52b220f8b862bdb8ffeb2cd116bea0ee226714869cbb07e2cb6742e9</sum>
        </package>
        <package name="texlive-luatex" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-luatex-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">4288f948517ac0df3fc539dc5ad23a38d6295bfc4375c9004c65fe1b15f12f4a</sum>
        </package>
        <package name="texlive-xetex-itrans" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xetex-itrans-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">42c014b8a51e28c4734a9c0e79e6a510b4912ccfd2d99f3f9f792bff0586a30c</sum>
        </package>
        <package name="texlive-mathpazo" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-mathpazo-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">437a9d7674ada1f0e38a6f2319a32412eca74969dd1c1a25812d68045d609e72</sum>
        </package>
        <package name="texlive-manfnt-font" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-manfnt-font-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">43979684d22ad31c66044aecf815acab4b92dc855dc55a340e5bda809f3de164</sum>
        </package>
        <package name="texlive-ifplatform" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ifplatform-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">44c463dd227818c330265d3722154b069e98e2670bcaebd56db9ba619b156cb8</sum>
        </package>
        <package name="texlive-collection-htmlxml" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-collection-htmlxml-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">450a7b6d8b84be559a161bb425bf974fd1c4a5849324ce79692fac30fd5e138a</sum>
        </package>
        <package name="texlive-pdfcolmk" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pdfcolmk-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">45ebb20c5ee28836e9696c39b78e59c1e8fd654b15032c487c89fdb723222f24</sum>
        </package>
        <package name="texlive-babel-english" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-babel-english-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">46c1f631860d6e31e5781bd53faa9e965c4c690c1d66a45b9884aca634490486</sum>
        </package>
        <package name="texlive-filehook" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-filehook-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">478c938c6ee80bd4bb22121f5c3107cf795da81dac49e44c2cedbf47c1340d51</sum>
        </package>
        <package name="texlive-tex" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-tex-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">47e4d84090a3992e67e5a6a2b69267e9505f5954db4832bdeeae735ea193aa8e</sum>
        </package>
        <package name="texlive-sansmathaccent" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-sansmathaccent-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">4922852eee4206323d9e1677e053922c6e957631ad1c6aea78bed78a2b45f77a</sum>
        </package>
        <package name="texlive-dvips" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-dvips-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">49772dc9b24ab569d372a101cd69bc2568193abf823725feb57436f88ef65250</sum>
        </package>
        <package name="texlive-pdfescape" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pdfescape-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">49fdf71de0a25c06e2b2083d7d4dc9ea621a1afd908da548bd109c855400eb91</sum>
        </package>
        <package name="texlive-bookman" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-bookman-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">4b2bcfaa3fc2a82a080c746b54318dd9cbebba4c046a52c125ee2bb4d6b907dc</sum>
        </package>
        <package name="texlive-pst-eps" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-eps-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">4b433714fcb92bb0a0d52356fa5e2d4a962d93f4924f7a19ad15d28f03ab95ac</sum>
        </package>
        <package name="texlive-alphalph" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-alphalph-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">4d2980a193d6303a58c37925f0f985f4e5f9f3cae2efb4dd45d5444e46dfdd32</sum>
        </package>
        <package name="texlive-metapost" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-metapost-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">4d29efaf88c5b672993181fd6b2f3336378c4738b3fe56b4a216cc8b1b1e4387</sum>
        </package>
        <package name="texlive-cns" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-cns-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">4d8621c03a38e0d2bf3fea3a746df7f7ff0388f50faf2df0d94eb2d386cf9744</sum>
        </package>
        <package name="texlive-enctex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-enctex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">4da17d9c3c479dc15401f330cc11691c20ae1ae8067b1b33167103e1d21e4cc9</sum>
        </package>
        <package name="texlive-pdftexcmds" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pdftexcmds-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">4e617977eeeb6de3846fa85b2b9f27718675dea3d86773ce10a317a415f12c2b</sum>
        </package>
        <package name="texlive-xeindex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xeindex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">4ecf3ea38c01f71ec9c4013bb7247be91b71307d71b45c4c48f17ba062cfbcc1</sum>
        </package>
        <package name="texlive-babel" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-babel-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">4ecfc0943c9f98b279bd8b85b2a9a86ac2210c09b7adbbceb5ca5dc950e10787</sum>
        </package>
        <package name="texlive-luaotfload" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-luaotfload-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">4fec9f7771af59d7393aca167c5646d588d88f0f56bd69240919fad990aac9a4</sum>
        </package>
        <package name="texlive-xetex-pstricks" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xetex-pstricks-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">513843974eedf0da4c9b0beaec914f5ccbb8e6e83c04c970c475b143dc4efb38</sum>
        </package>
        <package name="texlive-norasi-c90" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-norasi-c90-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">515e9172605fcd8501aa60c880cc0904531358c1615a60c4905eec2c4e7f174a</sum>
        </package>
        <package name="texlive-currfile" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-currfile-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">520021ada3555f6aecae8d205627758bf0d72bee817ca5a9f0bcd3f6571f9a47</sum>
        </package>
        <package name="texlive-graphics" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-graphics-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">54f176e46b1941a8762bdcdbe6e857a9012478f283eeabe96689c457287a18d9</sum>
        </package>
        <package name="texlive-epstopdf" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-epstopdf-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">5501f17087bd7ba8ee0941d02832b0d286613c4ae7fd103a973d1c1fbbfb62f5</sum>
        </package>
        <package name="texlive-fancybox" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fancybox-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">55f4a84250f0aca1ea46c322e4c869f4af971aa9038aa78fdf6f01ee23bf7393</sum>
        </package>
        <package name="texlive-enumitem" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-enumitem-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">56fc23f41fad306c075914ad459bbdec1234db4143fa66a26e511d68385b98a9</sum>
        </package>
        <package name="texlive-l3kernel" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-l3kernel-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">577006b173d9499f179ad705732e9800e4720d44bebb3a94cc9bada684007ec6</sum>
        </package>
        <package name="texlive-pgf" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pgf-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">5858cc5c0ceb9308e31366b824bfbb48e6ae07d40574fd3b9237d34e4a8f1c14</sum>
        </package>
        <package name="texlive-newfloat" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-newfloat-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">58cfe91d68ee63cc54f0697e461d8984df79d567d84303d1a0536c9c15a41782</sum>
        </package>
        <package name="texlive-pst-3d" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-3d-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">59eb1d0468f9d11103f11e591ac539f31eb57876bca1e98a68261b9dd83f5647</sum>
        </package>
        <package name="texlive-etoc" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-etoc-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">5a29000f8e87a62dcf05279904669712b8714e7b45ee456e9e0096c09e885ea5</sum>
        </package>
        <package name="texlive-zref" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-zref-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">5b1b4a550ad2af721868445780ba070871943d31a75e388b9ce910e5db29404d</sum>
        </package>
        <package name="texlive-utopia" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-utopia-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">5c31c37f4006a82ec0f3a6a7d9c360edf1a45ad2490e3267d73b34d31352cfac</sum>
        </package>
        <package name="texlive-l3packages" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-l3packages-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">5c7023c94eed5b8eb8ed000449b78000a8d4f3cb993227079b207325a663cc5c</sum>
        </package>
        <package name="texlive-ncntrsbk" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ncntrsbk-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">5d452cb0d73af0f10df7163ea9e4e70216492de3a5df809b819d2312560cf387</sum>
        </package>
        <package name="texlive-pst-node" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-node-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">5d53d99c7e1a90c6a54f6fe3dfba15135cf7bf12c21a88f1eb53dc225f4063aa</sum>
        </package>
        <package name="texlive-atbegshi" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-atbegshi-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">5dbc658240402850721abcb25584dd769849f6be884db760bf7f5deeb13d6e9a</sum>
        </package>
        <package name="texlive-fontwrap" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fontwrap-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">5eb59e04d191b222d7147cbd644cd15714dad7fd882f623f18bbee39d01c7e3d</sum>
        </package>
        <package name="texlive-charter" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-charter-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">5f217a569bc31f5bd4ce0edf2c2a632a303bd00e0701cd96d4479b1808635cea</sum>
        </package>
        <package name="texlive-latex-fonts" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-latex-fonts-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">5f4c56da3b4eb721a464cc8e7b6352ebf73c924fb486c490606e6f59c1ab6fa7</sum>
        </package>
        <package name="texlive-hyphenat" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-hyphenat-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">5fcb617c23652f08306ce0df82452bd1d6404d71384c356b4dcfc3df7150bf36</sum>
        </package>
        <package name="texlive-epsf" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-epsf-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">603923b09683e92a11914342dfedfc4a6bb471cf08cfc5a43984380070606016</sum>
        </package>
        <package name="texlive-caption" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-caption-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">603f6e8c0dc6f764331beb164fe4cbc586720368d30e9e5a960bb1dcda521d29</sum>
        </package>
        <package name="texlive-mparhack" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-mparhack-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">613b83634ed62e25ac9765736e8849c6f22585d4c392d02db96df41754b3a8a7</sum>
        </package>
        <package name="texlive-xetexconfig" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xetexconfig-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">6325bab9112091a826e469fd3133a153891666bb96b6d37140acedd08575d754</sum>
        </package>
        <package name="texlive-dvipng" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-dvipng-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">63663498cf9e2b78f9ed29be37d1594e2ee7c0a78c464666c36b7c163a80ecb6</sum>
        </package>
        <package name="texlive-euenc" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-euenc-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">64b72904dc1684e65ad2d8ae4a2d8db3b574ee5b6aa59fb7fc44ecdfd06c7926</sum>
        </package>
        <package name="texlive-ec" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ec-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">64f12a17b8d4fa54a127e8b443e433df5e365fde1ddaa8ef1c70f41ab2350d7b</sum>
        </package>
        <package name="texlive-attachfile" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-attachfile-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">64f470ee8d527eb379079acf8ec84b64d83774fe39fb049eefa3d0bf1daf2612</sum>
        </package>
        <package name="texlive-cm" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-cm-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">65fcf2af1ff703ee5c26318ea5468860abece0dc6073d0c73cf62d8cbf25eb72</sum>
        </package>
        <package name="texlive-setspace" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-setspace-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">6690b2013e92d4c1826efeac11726742db77bf48cb6d81664835d0820a91a742</sum>
        </package>
        <package name="texlive" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">68a0091a872ecaa0f6c2ee0b9f7e0a18fba3eb17d4e0540c3358336731567cff</sum>
        </package>
        <package name="texlive-pdfpages" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pdfpages-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">69441b376667d7dac36f67af174044e457abd66f9e9f8dd42110dae44229e842</sum>
        </package>
        <package name="texlive-footnotehyper" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-footnotehyper-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">69beee6de0d7b13b686597349f82ff09020bfecad207132b8d8649b7a1819c2b</sum>
        </package>
        <package name="texlive-tex4ht" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-tex4ht-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">6a04302cb689d0f62729b1623274ed4c64794ad9dca1c4fba6a5482ec2fb2ccd</sum>
        </package>
        <package name="texlive-texlive-common-doc" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-texlive-common-doc-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">6adde86808163cdaf50b62344a9a559e80dd5743dea15e824aed367a552fa5fe</sum>
        </package>
        <package name="texlive-mfware" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-mfware-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">6cac616ef5ccd64e811000cb87f9ae05303387d5a66264da002a7da97fd6be7a</sum>
        </package>
        <package name="texlive-psfrag" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-psfrag-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">6d9c59a17ee8b78ddf59f3e237786ebe6c1c58ea8f89cbe6dd975e26ce2c6566</sum>
        </package>
        <package name="texlive-eso-pic" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-eso-pic-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">6df327b010cd8bed7710a8dfdef31ccc512bf4c16690b26478f5691322718b43</sum>
        </package>
        <package name="texlive-psnfss" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-psnfss-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">6e0d5f4552e1e9d6c379e893e27f54035f46638370dcfcce3f28c27816ad1dbe</sum>
        </package>
        <package name="texlive-pst-blur" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-blur-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">6ee5eb1cedcddc5f86b916a6994015018459f86d19c5cd23070c8fedef527098</sum>
        </package>
        <package name="texlive-xmltex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xmltex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">714c93de6d245b6b778467c6818cab5b0315b4ef4c4ed659e9f54ec92430f717</sum>
        </package>
        <package name="texlive-graphics-def" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-graphics-def-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">71a9f77790ff8036bf832e8004642fa4a28a930f9cdfac4977058121d4e5fae9</sum>
        </package>
        <package name="texlive-fncychap" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fncychap-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">72589c06f68701a17f8aa7f98d38fbffadf50d34ddeb10569f34207541814e31</sum>
        </package>
        <package name="texlive-babelbib" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-babelbib-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">731f511e5e0b53baba885f7ae4ee81a798cf2c78de16bfbaa4715bbb27dac0b7</sum>
        </package>
        <package name="texlive-colorprofiles" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-colorprofiles-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">741099917df3d791c835b8aa577cf790a284719236600bc481078973b7c4d3c9</sum>
        </package>
        <package name="texlive-hyperref" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-hyperref-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">7460b2f316be03aee9166db5246a321a19c28f54cc43fd6ed7f183dde3ef5373</sum>
        </package>
        <package name="texlive-amscls" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-amscls-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">74656909703e4d20db2efd2796fd926b0cb1264051a62df2482fa20b13fe885f</sum>
        </package>
        <package name="texlive-wasy-type1" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-wasy-type1-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">74779b416a2d48646157a76aab532a59a4b25a4b66b5ee3dcb76f75da9bd0cd5</sum>
        </package>
        <package name="texlive-cm-super" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-cm-super-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">750a9d9fd4fcb79da1ad556ccab0d59b5c1a5fc1e02726fc1b79ca2b53b5b9ed</sum>
        </package>
        <package name="texlive-etex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-etex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">7642c5e37492fd77bef02443b6ad83e16db624ec41657d43987b54d071e42517</sum>
        </package>
        <package name="texlive-preprint" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-preprint-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">771dd71ff3eee8ec7f990da4743a3be0192a2c9d5a191826d3266844487e8d74</sum>
        </package>
        <package name="texlive-cite" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-cite-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">7835ab02b453fedffa3bf249211a86cf39695cb0f04c4c86d8f2f4368cce99c7</sum>
        </package>
        <package name="texlive-collection-basic" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-collection-basic-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">789a760c3e9c3e72da87be79bea330b43046ab7a6ac3176407257c952c323ca4</sum>
        </package>
        <package name="texlive-fpl" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fpl-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">78bf5d6294cb09ee1ffc9040fa12b41e16b1e0f41db6e830ec092b21e5893083</sum>
        </package>
        <package name="texlive-ucs" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ucs-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">79fdc28786365b1a0974d51cfcc71efba4813f985d71c181dd6a8d38a7d4fb2c</sum>
        </package>
        <package name="texlive-wasy" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-wasy-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">7a4b9c5e47bc8c4ae5bf0233e6d6366b9cc7cae81002b76721d0acffc590cf2f</sum>
        </package>
        <package name="texlive-latex2man" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-latex2man-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">7b5eff7f2b46735af10e75399298987185622544af8dd09d4c0fbf4753739d9f</sum>
        </package>
        <package name="texlive-catchfile" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-catchfile-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">7cfcc34741aa2518b791db150ef3c3bb01a3106025530917aa9b265c150998fb</sum>
        </package>
        <package name="texlive-pdflscape" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pdflscape-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">7d62cc4443bb94f42358f277ad402abeb9617058ca5ed7ed2ba52ee675f3092e</sum>
        </package>
        <package name="texlive-bookmark" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-bookmark-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">7d8706e69cac8f545a9e1dbb1672d1d56a98d0057dd1bed876bc305f05a48e8b</sum>
        </package>
        <package name="texlive-lm" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-lm-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">7e0f5a90fd4e77b263314769d2e1e7b65f035f0ad40615ce58d742d88563d893</sum>
        </package>
        <package name="texlive-dvisvgm" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-dvisvgm-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">7efeb66e6111f5be7d0dd7879b879d90e134b07d92136eef7b74975be9d22bfd</sum>
        </package>
        <package name="texlive-pst-grad" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-grad-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">7f0503dd551f7701ae4894f2d126df0e0b7491a06b489cc3bf25b0bdb0e9f887</sum>
        </package>
        <package name="texlive-kvoptions" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-kvoptions-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">7f0f8a6f55629f99c0b708d1b95ce8ac44f4f72304fdd826877bdba3fd685e2d</sum>
        </package>
        <package name="texlive-adjustbox" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-adjustbox-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">7f1c527815e9eccadee6af0d4b08693269bc48b39b5d06c3de024c80295ca690</sum>
        </package>
        <package name="texlive-unicode-data" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-unicode-data-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">7f534de52dd37f424545c340184ec70fe7ebc0ecdaa7587712af4f1fd2bb5769</sum>
        </package>
        <package name="texlive-luahbtex" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-luahbtex-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">80538a06ebe09b88ccbaa2e850d0822869b05efd6d472e91aa9d6a93e423120b</sum>
        </package>
        <package name="texlive-microtype" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-microtype-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">80578853876270fea627b7a942dc2cfe99e7816f6f2dc2388587489b2d70efe6</sum>
        </package>
        <package name="texlive-pst-tree" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-tree-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">806e5cbc1393811dd4a6c54f513be3853e4115a2aaa85fa3fe920ec22dfe8283</sum>
        </package>
        <package name="texlive-awesomebox" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-awesomebox-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">8131049d08bba3e87d06ba1ac19dcf96c273848521cb36b4de4ad428aa86f270</sum>
        </package>
        <package name="texlive-auxhook" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-auxhook-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">81f817b8af1bf9ea2cee69e7cb1c9d7c993b3716e9f90da6121f6c4d74498b36</sum>
        </package>
        <package name="texlive-paralist" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-paralist-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">82b6f9e0f085c2568a46f7ec37a432f28fe573f93f9bde83805e4fec6fba9617</sum>
        </package>
        <package name="texlive-wadalab" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-wadalab-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">83a3f9b83564a20ce0bf371fca89e88829edbe1f0ef90edf844ee146bddc5fa6</sum>
        </package>
        <package name="texlive-gsftopk" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-gsftopk-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">844601b0f34734be04c90ff2b52c9dd09698dd26cab893160084a25455da6eef</sum>
        </package>
        <package name="texlive-pst-tools" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-tools-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">8484e07c278107e5d26be4627235579a14cc15b5c62254305d723e02c52bab33</sum>
        </package>
        <package name="texlive-rerunfilecheck" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-rerunfilecheck-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">851f10c5ad9929f5598d7450e39916b25c76a8f901c02440d3fdee8ce7e2040f</sum>
        </package>
        <package name="texlive-ctablestack" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ctablestack-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">8554f4a1b503a079cd538946a4eedb667863bfdc2e395403212444f68889d0bb</sum>
        </package>
        <package name="texlive-breqn" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-breqn-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">8591debf7deec90e30f1ea87c553ffabfa992e2eb67afef86965dd6412b858f5</sum>
        </package>
        <package name="texlive-lib" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-lib-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">86910d4b341f891551760feb196f17a3acace18675f8b94a18ddc8fdd0063ab6</sum>
        </package>
        <package name="texlive-pst-text" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-text-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">871edd2fd438fab8220cbe0edcee53a7b992d89fa7ebb16a2b755af9919572c1</sum>
        </package>
        <package name="texlive-kvsetkeys" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-kvsetkeys-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">87f9f46129e95075f2cfbdab86ec038276c396d704f0530ce6f117dfe0e10725</sum>
        </package>
        <package name="texlive-stmaryrd" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-stmaryrd-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">887aa5d81bdca1c5678e9f644ab508f26322a2e2228b68ac500e49b34a105642</sum>
        </package>
        <package name="texlive-euro" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-euro-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">88bfb2ca880acc4110900162756c2c2a3437bb1c0ec98d8c427c4a370a95fd14</sum>
        </package>
        <package name="texlive-newunicodechar" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-newunicodechar-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">897a587b2b08cf1e8396515371382fce0102f8ff096a9cef6b244a9a7496ebcb</sum>
        </package>
        <package name="texlive-csquotes" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-csquotes-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">89828125ebd5515a18e7e025d62e300c21770a14a44f852a68590302ec2da6c6</sum>
        </package>
        <package name="texlive-beamer" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-beamer-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">8a197233efafe7e6f6552a6c437ec761cad658513626bf44d14d5baac7fd0323</sum>
        </package>
        <package name="texlive-sepnum" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-sepnum-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">8a99523bff266ed2ca76c1554ee6590b31c539242bd4177ec7f731caf8113d5b</sum>
        </package>
        <package name="texlive-etoolbox" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-etoolbox-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">8bbb1c68785314841cff04dcb7b2d9445b09572a58db24513303984017f3af4f</sum>
        </package>
        <package name="texlive-section" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-section-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">8d4185aa5ad2db94723fd6cc954757c06f848599c074ed3187d0672f250d6f56</sum>
        </package>
        <package name="texlive-rcs" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-rcs-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">90a1dceea6ffe76041ab21c03e462e5787e2cd659c333d1785dea4eb35199c9b</sum>
        </package>
        <package name="texlive-pspicture" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pspicture-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">90efce61114f6fe2dc4a77a90fd4862979820607d222f415d2ab013a84d30218</sum>
        </package>
        <package name="texlive-iftex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-iftex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">911ba8c3de0f185c04cce8e10f16072179b4fe3ca4277039d7963cb41813fb85</sum>
        </package>
        <package name="texlive-scheme-basic" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-scheme-basic-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">912dc2eae522ba2e001085eae361aa6f41b91bd2dbeb9068a3e6a8fcb5ae3f72</sum>
        </package>
        <package name="texlive-underscore" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-underscore-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">92577886accd0bf0cab6ee14668b073e310ddd374f6e47fed7e38733f555fc8c</sum>
        </package>
        <package name="texlive-letltxmacro" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-letltxmacro-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">95fe1d1b464a6f85a5e46476fe764af8f806b695f5fee33baebe8ecba35db58f</sum>
        </package>
        <package name="texlive-seminar" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-seminar-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">964b0082b32154a40f2b80b21c8f27ff2c66fd6ea209d4953b145eed0208cfa9</sum>
        </package>
        <package name="texlive-xdvi" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xdvi-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">9686d46797d0bfe07b5990e394ab2ded9296bf5e06c71634449957fd2450f154</sum>
        </package>
        <package name="texlive-filecontents" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-filecontents-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">972d72190fb35e1df049bd726064d2bca64cd951064df0cf7c3b7fe213f818fa</sum>
        </package>
        <package name="texlive-ctable" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ctable-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">983fb96ce687ed29586cbf3c1e62785a738eba8f5f1333bcba7609dfe73ae3e4</sum>
        </package>
        <package name="texlive-collection-fontsrecommended" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-collection-fontsrecommended-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">98ca4203709aa50c9f014b031ff880349338a767bf95720d7dcdb22b30a7ba5e</sum>
        </package>
        <package name="texlive-varwidth" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-varwidth-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">98d66378c704ec5359913c043df6897194c9d3056734059531d986a4368fd4cc</sum>
        </package>
        <package name="texlive-ucharclasses" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ucharclasses-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">992da7d1a90d7e82f983d8d103454574949c392975a5028283153be2d7ec527d</sum>
        </package>
        <package name="texlive-fix2col" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fix2col-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">9a6fa951ff3af7c043fa81a0545cb559c29d101ea85926657df24337b7a2f99b</sum>
        </package>
        <package name="texlive-cjk" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-cjk-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">9ab30f817b26993cfebc73ff9825127909cdd9590480d64fe725800cd2c8c855</sum>
        </package>
        <package name="texlive-lua-alt-getopt" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-lua-alt-getopt-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">9ba07e033f95d3b6f85a235672793f8f8541aa4ad52c1cb00bc3f50e39efd458</sum>
        </package>
        <package name="texlive-polyglossia" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-polyglossia-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">9bb9f67bf304f837bb456633c8f99fc65f067f4c17b826b249cc2771caf79dd8</sum>
        </package>
        <package name="texlive-pst-math" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-math-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">9c26e2c0ff332c803b3a23da122c442520a1a18c8cd5b4f932e530f6e62377e4</sum>
        </package>
        <package name="texlive-bibtopic" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-bibtopic-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">9c59bb26eb3efe1d1b1041a8ecb11eef954b1688699cabd7873626cc70f336e4</sum>
        </package>
        <package name="texlive-makecmds" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-makecmds-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">9c7b9c8f1c800866124fc3813f9e4be1d7e870e7e164e3cd8850592b843b4c5a</sum>
        </package>
        <package name="texlive-bigintcalc" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-bigintcalc-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">9e302d0bbaeb07d457fad543e62d2671be27e88edc3f392e4362e10a521a445c</sum>
        </package>
        <package name="texlive-ucharcat" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ucharcat-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">9f711bca193acea38c68a4778d93afa91ad111b4d402dc62268e9738dfb9d7f6</sum>
        </package>
        <package name="texlive-pstricks" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pstricks-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">9f73c2244fb93bed3644634fef708398270401530fdf3d77efaac325146821a2</sum>
        </package>
        <package name="texlive-luatex85" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-luatex85-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">9fc44057453c7fb58e24bfad43c77895e7ea9006b3c5c757f57e510a0d9fdc94</sum>
        </package>
        <package name="texlive-lwarp" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-lwarp-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a106523b2db8a0c042901e54bbf4a96dce59f95e7e21bdb197c86f8a2fde40ac</sum>
        </package>
        <package name="texlive-arabxetex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-arabxetex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a1ecc74e02ea7109e19865560ec4ca76502fca12117fbcd4884f987d23fecca8</sum>
        </package>
        <package name="texlive-minitoc" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-minitoc-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a1fa806c139115e902b1b44de9e355909568e4bc8d126162de1af0723a99f97f</sum>
        </package>
        <package name="texlive-epstopdf-pkg" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-epstopdf-pkg-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a24e57fae731378f93d64753b3c36866aa372476d87e779bb8652abc92ac8b78</sum>
        </package>
        <package name="texlive-changebar" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-changebar-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a2cfb2ce553d4e2c6b2193f31a4c9235b4032bb4cf1058fb0f0b3b2694b63eac</sum>
        </package>
        <package name="texlive-wasysym" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-wasysym-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a49f8ae49328b198e59bd5003af64546b389ff7f7cda22e25051ea4fe18375fb</sum>
        </package>
        <package name="texlive-xecyr" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xecyr-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a4e0f9ffaf19ecbc44c0929f1450fdf91f0bdb4ba3db2f97a39b64a6aa531f8e</sum>
        </package>
        <package name="texlive-collectbox" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-collectbox-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a6bdf36c3ddd831f5342d32c05089945f8c6ab7770558fcf810c0da594161329</sum>
        </package>
        <package name="texlive-pst-fill" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-fill-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a6cf9bed29efd30d5d34d24958192ed816f50d0a14cea00ba3de1c4349c1ca98</sum>
        </package>
        <package name="texlive-cmextra" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-cmextra-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a6f4eab2b49c3e688330e9cb4eacfb8559c20126847e590f76b2dfaf06cb7bcf</sum>
        </package>
        <package name="texlive-bidi" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-bidi-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a788236424bedca41af1f79f50eacdeb720e018b6aba2784877cf8e919325844</sum>
        </package>
        <package name="texlive-zapfding" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-zapfding-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a7c609b1584b777b0f75613b450f3a7462f6985f5f20d9ec3314767975718ea4</sum>
        </package>
        <package name="texlive-environ" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-environ-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a7f62d2d894f775a5050d19468597190d5f765f66e34aaa229c63df4cdbc575a</sum>
        </package>
        <package name="texlive-sauerj" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-sauerj-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a89166419f54dbcaab16a161de7050c7d89466e405c4ff9b7237817b8ecf4c53</sum>
        </package>
        <package name="texlive-xepersian" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xepersian-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a8f946f399b5644db2e63328e87f82ce57aa6a58851be40b44b567b50d38e991</sum>
        </package>
        <package name="texlive-metafont" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-metafont-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">a95ccbc95d9063206380cbd03205a2796c1cbbba41395d0074b4ac53530a45b3</sum>
        </package>
        <package name="texlive-jknapltx" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-jknapltx-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">a994628d620c87da2b8bbee98906f899a7ce2c58cb1ec6032317f23d64eafd69</sum>
        </package>
        <package name="texlive-xstring" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xstring-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">aa631a121627b7bf4ffea64fdbe7f224c861f47e30b49feb213e44659fba4cb2</sum>
        </package>
        <package name="texlive-beton" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-beton-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">ab7096cc1bc378dd0537da1e8362647ffc555c368766bdcd7ea54fc6fe4c217f</sum>
        </package>
        <package name="texlive-collection-xetex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-collection-xetex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">ac840419a8ddbe63dae9b43dee8d3d293e8e1d6c93df24cf5e4abbcce35241bf</sum>
        </package>
        <package name="texlive-rsfs" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-rsfs-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">acb118774e19d9dea067b1115dbd9ce0a5ddcfb96e3fb62df76185761823f271</sum>
        </package>
        <package name="texlive-tools" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-tools-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">ad2f73894fe407121a2fbd58ac630fb9c5a1cb52c22d640da0535d6b85e9d9a1</sum>
        </package>
        <package name="texlive-palatino" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-palatino-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">ad4de7669baf30cb0883f608c50d68c6f44b2fa3bbd1aae6445e06b2a370f79c</sum>
        </package>
        <package name="texlive-tex-gyre" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-tex-gyre-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">aeb82fc415c53d779ac0c463288c1a13188514d7df67f310235f75369a90f70d</sum>
        </package>
        <package name="texlive-xecjk" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xecjk-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">afbb55388c2cd8020994439bbe5ebf6a110dd3914c520941758e30ce58a2c023</sum>
        </package>
        <package name="texlive-ptext" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ptext-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">aff5b91bd6a9004e539625f282202b26d035ae11f5aec129243e445c35726f52</sum>
        </package>
        <package name="texlive-lineno" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-lineno-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b09ef9f8d4219daf980a0b896ba90e1cf6695395a8d9daa96d9a16ce719bb245</sum>
        </package>
        <package name="texlive-courier" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-courier-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b0bb37c1e8c12a2dd4ed2d96a6242c65a4f394a18bd4423d5b916224f378499f</sum>
        </package>
        <package name="texlive-symbol" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-symbol-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b0e271c87a04d086336ea0a7e5cca2c8037368005b009b2fdf61a073f2f88335</sum>
        </package>
        <package name="texlive-listings" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-listings-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b2644ed566d50fec703530a362015f7d7869da15c512288ad7ea2a1544f80f23</sum>
        </package>
        <package name="texlive-fancyref" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fancyref-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b26f6c98727089c7ca668a360e97bd413cf089bee8fd553ac25a443eff1ed0c3</sum>
        </package>
        <package name="texlive-garuda-c90" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-garuda-c90-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b3b86efea0c1174e5f7a18b16ca145b9ffd40e8fd96229372dfbf198f3aca71e</sum>
        </package>
        <package name="texlive-subfigure" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-subfigure-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b40477d68e6050e924b0840d09a8bd9e2a8bbe3a1c394f3891e39a2d9763f448</sum>
        </package>
        <package name="texlive-graphics-cfg" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-graphics-cfg-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b59e0486cc0ce66e731d3fd294e7b1e786c58c242e229cc43e36af43ca6bef97</sum>
        </package>
        <package name="texlive-xecolor" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xecolor-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b5c27b35703c9291e996b5683dd2a4338eb99347b08d851885642aee3ec8a4ed</sum>
        </package>
        <package name="texlive-avantgar" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-avantgar-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b62b3a35a8c10b1715fb2c3123b3cedf8592cfe3e519ead1dac55f30cd827bf7</sum>
        </package>
        <package name="texlive-tabu" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-tabu-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b677d412315657fb247e375e20c69c57780725d7a35e93f9c51f745267da6210</sum>
        </package>
        <package name="texlive-ifmtarg" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ifmtarg-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b694c187eda29017cae239a4e4d23a89db7ac6428e4c7b1b6f72f3c03ac4db14</sum>
        </package>
        <package name="texlive-sansmath" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-sansmath-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b8667fd2a14f5202781b73f2f4840a19deda45d4e1e8b2772467e1802b5847c8</sum>
        </package>
        <package name="texlive-qstest" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-qstest-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b8884bc438df961d5e145865234fd98342842d7c99491352ff4bab5854dd38e2</sum>
        </package>
        <package name="texlive-lastpage" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-lastpage-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b97476a605c9bcd297213aba0c8ed3d02b11216ba7b67b108467c844ba0958f0</sum>
        </package>
        <package name="texlive-crop" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-crop-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">b976c5a19fb610d5b4e4c49e92e9f1a75fc3be91c220e064847195ba6dff5e5f</sum>
        </package>
        <package name="texlive-ncctools" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ncctools-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">bbd87a80a14c639fbf28bbf460df5f6273b7122169f408c54a729e283283d335</sum>
        </package>
        <package name="texlive-t2" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-t2-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">bbefdc75c9f6abbcc85d9f5fa2bda8e3d2217c7de1b490b96b0e5814c1799db9</sum>
        </package>
        <package name="texlive-xetex-tibetan" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xetex-tibetan-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">bbfe844cd09eedcd69d59e3e7f5fb343b0b34f51e01dce076832525468afd6b7</sum>
        </package>
        <package name="texlive-url" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-url-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">bcc54c72132bb389bd4f135e4b0b23abfda2e8b149f8a820b8538bec930b6473</sum>
        </package>
        <package name="texlive-mnsymbol" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-mnsymbol-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">bcfff293f7d4cad2a8fc13c308cb068cdf363bd20f5b192d4133c9028f7297f7</sum>
        </package>
        <package name="texlive-zapfchan" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-zapfchan-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">bd9bffd17699364f1e28e7cede697a0ab90a3a586c97c4cf392372d823f4c3a2</sum>
        </package>
        <package name="texlive-multido" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-multido-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">bdf61fbc63647dcf6e6737d9adbc265d56548bbedd6204778428eb24a249e40c</sum>
        </package>
        <package name="texlive-kpathsea" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-kpathsea-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">bef0a3622ea5c7190a6f6920b129004b9402f3b5546a7fe89fea2bcc50bbe375</sum>
        </package>
        <package name="texlive-fmtcount" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fmtcount-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">bf7a1a348d8fa54b21b1cad20802091bb96368bf1bdc758e53a7423a489da8d0</sum>
        </package>
        <package name="texlive-refcount" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-refcount-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">bfaa7273a8823096c2d9d7c2d3f7154d17f71c16495fce30edb906bc61395b6d</sum>
        </package>
        <package name="texlive-updmap-map" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-updmap-map-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">bfdadd84881312ba74714d45c055e33c4a53ac6ca222b8335160fb9d9cea8e76</sum>
        </package>
        <package name="texlive-listofitems" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-listofitems-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">bfe7aa707d56fb24359309f115b3203b1e3bb838a8da1e29bcbe52db141fd296</sum>
        </package>
        <package name="texlive-attachfile2" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-attachfile2-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c0268a1ad17513e8c3175067c0ee96da7799f5c86288a5b9505ffe1d2f5d83fc</sum>
        </package>
        <package name="texlive-hyphen-base" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-hyphen-base-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c06d3bf95a1c09008b6486f489eeff6f5c73b97b830d5c5f66304410b1f7a2c2</sum>
        </package>
        <package name="texlive-grfext" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-grfext-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c09829cb06ec24536c06d6cf7305e386aba104c863d6e12dce0c8a1dfe6267ae</sum>
        </package>
        <package name="texlive-titlesec" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-titlesec-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c12aede70e68b6257c1b5cfab0081468b11dbcdef01e96d9f90ca19b16828827</sum>
        </package>
        <package name="texlive-obsolete" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-obsolete-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c27284da6e47df95bc66342c2f8f8bc94b420e16b5d57ea797897ca22080b461</sum>
        </package>
        <package name="texlive-stringenc" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-stringenc-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c2b631b43f25221f1cba632456ca9392024314c720b4bd332c18ac61ca9f3e1b</sum>
        </package>
        <package name="texlive-wrapfig" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-wrapfig-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c32bd089646dcaa7de384aac762340f1d64b78854ce62e1cd2c3d35a31223e62</sum>
        </package>
        <package name="texlive-mdwtools" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-mdwtools-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c33f5cc1ac5070774b78e97dd0bd03de11c599bda637af11658800ebf8de7613</sum>
        </package>
        <package name="texlive-xunicode" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xunicode-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c34b60b33a4991abd1a768f59e7cd855642b519ec4f26d6c746318508e0f239d</sum>
        </package>
        <package name="texlive-fontbook" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fontbook-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c35de19520c123444ea2479dcc45d850e4d8b9c202a6267f26f0422d23c7700f</sum>
        </package>
        <package name="texlive-xltxtra" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xltxtra-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c42d0af0182c90d6d7ed4cb8a7fc2f6c1d8822d767f45c7aedaa10a30af26929</sum>
        </package>
        <package name="texlive-finstrut" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-finstrut-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c44450af6c8aed9fd53f4333d42c36928448728f4b0e6485d1fb1cb19a31158b</sum>
        </package>
        <package name="texlive-overpic" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-overpic-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c449004aa992502d0611f2423710df0d9e60b47307482975a62266b9481d6037</sum>
        </package>
        <package name="texlive-base" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-base-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c542b40eb9a535d24c08fa882bbaf3ae8725d32e30d041de0db1f214e0bcd472</sum>
        </package>
        <package name="texlive-typehtml" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-typehtml-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c6301dd36d23b1f7469bbbc728ccd2e1aefad4ae716b94c3f4870ec15f60e620</sum>
        </package>
        <package name="texlive-lualibs" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-lualibs-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c6c19286a15dbfad4a0dc0d459e90268b2f891e5fc75c51c741cb8e31c923aae</sum>
        </package>
        <package name="texlive-lm-math" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-lm-math-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c6c1d3f189713fc86a318a1fa1fed33004d6b3ddf1d9f99e135a320e0bbf707e</sum>
        </package>
        <package name="texlive-intcalc" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-intcalc-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c6dc24e03fae6ccc0f22d4ca9077b41ca40f565c900ebac4dfa316225b1273fd</sum>
        </package>
        <package name="texlive-chngcntr" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-chngcntr-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c779dcd0f3c3bc08f3eeac43715a3703d08cfe48a64add27c65f39249481e20b</sum>
        </package>
        <package name="texlive-texlive-msg-translations" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-texlive-msg-translations-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c80b2730c3e3f5f4dc0487c0e9a156147ba83d800ac88b403735e4df8de552bf</sum>
        </package>
        <package name="texlive-mfnfss" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-mfnfss-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">c97519e981c15d85249a4665e6a78b6a17e3dd1ae98147afdf1c9160c59a6a7c</sum>
        </package>
        <package name="texlive-ltxmisc" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ltxmisc-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">cb3874aa5a69f6a9be02400c0cda7625fb2f36398da1885591ed4216ce904b09</sum>
        </package>
        <package name="texlive-trimspaces" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-trimspaces-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">cb5f02fabaed3db170dba517927aa2881abd922fcb62da2ba235a180175055be</sum>
        </package>
        <package name="texlive-lettrine" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-lettrine-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">cdfa4f74b9ef1ba60ed8f3f7e5bce6260344a67ec3b3d58a75fff5b8131d567c</sum>
        </package>
        <package name="texlive-textcase" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-textcase-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">ce2419851b408bfbeb3bde1ebb1ccf1ceafa9dfcfd4ff0de28185eaee1eddf1f</sum>
        </package>
        <package name="texlive-glyphlist" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-glyphlist-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">ce3f871d4baaf64376d7af0e86cb3586ed819e93704a3c6eab62511fd996c02b</sum>
        </package>
        <package name="texlive-algorithms" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-algorithms-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">cfdf19bca7b8957a07a5832d8b84c1274d31eb44ef566560218cc9caa1cd50cc</sum>
        </package>
        <package name="texlive-fonts-tlwg" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fonts-tlwg-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">d0389ce08381a30e5965d19e1d874809f7ee6e2c1f1f65699f961016fea9c185</sum>
        </package>
        <package name="texlive-pstricks-add" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pstricks-add-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">d0922a514d40b821bb8232c6ede6ec165f666ebb77da7cdbfa1fc65057eb408f</sum>
        </package>
        <package name="texlive-cmap" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-cmap-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">d0efb27781c39c88cd223c499166d348b20a9dfc94dec61d4f2eb2fe9e1d35e5</sum>
        </package>
        <package name="texlive-carlisle" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-carlisle-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">d11a49e6879d84f0f57e4226a19a9ab7d47288cef4d26f7677f4e24789cd3ed7</sum>
        </package>
        <package name="texlive-translator" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-translator-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">d1ea129391755cd0da6541c07177ad0adb2fb5d6507aa43e25df937f8598147f</sum>
        </package>
        <package name="texlive-hycolor" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-hycolor-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">d3d04210017bed54fa5d149033c57b725bc0301c163444c417568d2efdeca2bf</sum>
        </package>
        <package name="texlive-marginnote" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-marginnote-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">d45223237c87a5a123ca6aecbe6e1f35ea8909d8728a3996e0c977bcf9bcb593</sum>
        </package>
        <package name="texlive-ntgclass" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ntgclass-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">d54f4be5e972dc28e9717dd1d0394bd80ef35c43ea5c3ae4eff61c5d743c948d</sum>
        </package>
        <package name="texlive-framed" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-framed-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">d65edc8ca1f5b08153aeb6b27ee487751c33068085fea5dacbba97da7ee27c92</sum>
        </package>
        <package name="texlive-memoir" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-memoir-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">d7102774e3345e24563551c8a6c7efec3dbe95c4a8ae2c46329cebf261aff1e5</sum>
        </package>
        <package name="texlive-arphic" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-arphic-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">d78ebfd5ee7c1a0d20fc38c53adefe71dcdb36eb38558d2e5423921ab6f0df4c</sum>
        </package>
        <package name="texlive-geometry" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-geometry-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">d8f22570896f54b31e20a5ad3caba5b2ea7ffba140552cfd000ab79b6f64982c</sum>
        </package>
        <package name="texlive-xtab" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xtab-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">da3e07f92cee9ac0e8dbfb20ab635f3cded34f0826a3e8ff836aacf9507799cf</sum>
        </package>
        <package name="texlive-uniquecounter" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-uniquecounter-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">daf7293d6c22acd50f703dd777705899f6274c79602f10ed305998faf07bba0a</sum>
        </package>
        <package name="texlive-knuth-lib" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-knuth-lib-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">dbb0385b8055eb00eccf7cf2241759686b80b9d59319783429e2ee573600c2f4</sum>
        </package>
        <package name="texlive-l3experimental" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-l3experimental-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">dbf253a4904b0d83d897d1c3f1e73e07b886fafe052d338d91db9c2598ecc078</sum>
        </package>
        <package name="texlive-oberdiek" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-oberdiek-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">dcc87eab6f90275eefc0130366d1e29523652401e4f64afa6acf38a474e23f24</sum>
        </package>
        <package name="texlive-eurosym" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-eurosym-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">dd710f4bb041473f6bbe9d0e59c9de761a2239439ace5f82858bc384496153a7</sum>
        </package>
        <package name="texlive-kerkis" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-kerkis-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">df9ebecfd1b2c28317e5b3bc14af1c60cb8badf7684cb0f5d6a1f1122d2c5777</sum>
        </package>
        <package name="texlive-pst-plot" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pst-plot-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">e0c764a4cec89b35e2530b79c27a6d109ee7fae022a9731f86f19c650c653a8a</sum>
        </package>
        <package name="texlive-type1cm" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-type1cm-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">e336445d5603c258bfb0894d5d0cdd6336eb8946839bec73859a928d9281e977</sum>
        </package>
        <package name="texlive-collection-latex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-collection-latex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">e36099f43145c4a046416a1e234a7728315fa1d1132b3b60b361b2e754c3955e</sum>
        </package>
        <package name="texlive-ltxcmds" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ltxcmds-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">e4c4696c172b55275f30b7997dcbdbb41cc3ea47ba31a6626b39ee0a21a5e9d6</sum>
        </package>
        <package name="texlive-plain" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-plain-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">e4ef0dacc1c16718f0e949716e38f34f1d63d6d0862fa2b30efb079a7197555e</sum>
        </package>
        <package name="texlive-index" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-index-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">e5da1ebcb84ab8534dbe685584a475ad92fe5f2f86aa865655341ce5ab1a5a4d</sum>
        </package>
        <package name="texlive-pdftex" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pdftex-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">e6a1418aeead1b2f89d5ed08566a1ce37fb871b3acf6a73576d3d9849e38c4a7</sum>
        </package>
        <package name="texlive-pslatex" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-pslatex-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">e8fddce9dd4b3b9a6e72c0ec3adce6d7e37e65bb239d33316b90aabb4023306c</sum>
        </package>
        <package name="texlive-luatexbase" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-luatexbase-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">e9074700b3e683591de487127743305509acb35cf79d30f3f6a2cc8cdbb64e5f</sum>
        </package>
        <package name="texlive-xetex" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xetex-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">e9336e0f0e644647a8b182aefc924ce25821b50d526515f20a8db5b3bc0e00cd</sum>
        </package>
        <package name="texlive-stackengine" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-stackengine-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">e949aed20e5d9c05d81fa47dbbc1eda8df3bc271d63bd80d846e3905d7a2ce36</sum>
        </package>
        <package name="texlive-ae" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ae-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">ea833163e167c4cea689aca559ac17064ea92c8167c9b7913bf5f089954bbe8f</sum>
        </package>
        <package name="texlive-ltabptch" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ltabptch-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">ebc583c59d29704135136260c02498dbaf0b83cc591c3af691618ec9c1393e16</sum>
        </package>
        <package name="texlive-float" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-float-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">ec65454cf4fc6b26ebade1cc1a94a9a9b1423b6dcfcfb59dc371ac4e9cec8ebc</sum>
        </package>
        <package name="texlive-uhc" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-uhc-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">ec73292376909a7373fb1ac2c13d609c3b92e43dc7437c17602d5f72f82e191d</sum>
        </package>
        <package name="texlive-bitset" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-bitset-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">ec8e569c4901a722da5ff5091326c9653159ea194b5c53064a39a0ad064940da</sum>
        </package>
        <package name="texlive-natbib" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-natbib-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">ef9c0285c469a57abf4548a0a2017a0096a5e32031849a3e1cae96759600cc59</sum>
        </package>
        <package name="texlive-anyfontsize" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-anyfontsize-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f044450ae13b444e3f99daeb439cc05d65bf0e12ca13ee10fb5ab41af9693b90</sum>
        </package>
        <package name="texlive-texlive-scripts-extra" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-texlive-scripts-extra-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f195b14ed3269e1fdb0148709a1b0cd8c1fb46ca4e674cf251f26fe3a1267ed9</sum>
        </package>
        <package name="texlive-ifoddpage" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-ifoddpage-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f1de9c92edb72c2f88f497aa790afb7111c13dba3f9ff22826b410649add3014</sum>
        </package>
        <package name="texlive-etexcmds" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-etexcmds-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f26062b88a450d9048f38f81e161b0423a9d13bbd13b9d1be72dda8f213fcf8e</sum>
        </package>
        <package name="texlive-eepic" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-eepic-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f3c012ae9c2ea8bb36f5fcf4face7f9cc80e8fe9b8b0097a9cc84c1f3c695c3f</sum>
        </package>
        <package name="texlive-fontspec" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-fontspec-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f3c8e560ce0a31b0c7605316a9b197efab0c0b8236a3ba5649ea3196bdb0f2d0</sum>
        </package>
        <package name="texlive-unisugar" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-unisugar-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f42ea74dcae45f653912fc3126ce1c74b73708a3608d05cab0f6c519c6883011</sum>
        </package>
        <package name="texlive-xkeyval" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xkeyval-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f4acf2e8100cac4a0a492bece6ad5bc32236945778dbaa6a97668eba8fe2d9d9</sum>
        </package>
        <package name="texlive-makeindex" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-makeindex-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">f56f7d858bd36b30663f8220105d6c0ea8669e2d81ffe10d410b7cdc8850f632</sum>
        </package>
        <package name="texlive-was" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-was-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f66b5ecadcf835122bd6645dc46e0bed3f3092fc68e7d816b428c17cdf7512d5</sum>
        </package>
        <package name="texlive-dehyph" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-dehyph-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f7e6a9d6ea08fc3303ef724e38c5bc85952a3a62b70c5985b81d311b093e235d</sum>
        </package>
        <package name="texlive-unicode-math" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-unicode-math-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f8c4a798a071a20e0ec1ae444e38a759b05d63259ecad67a744bc6316c16abe7</sum>
        </package>
        <package name="texlive-lualatex-math" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-lualatex-math-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f8ee0b5fe1efb7db2d14e977873cbc80867a424f4f6c6599e97d140cdb766fb4</sum>
        </package>
        <package name="texlive-bera" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-bera-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f959c01b1f69379b26b65991df9b51cd003469169bd3b3d5df794cd2ddcb1ee9</sum>
        </package>
        <package name="texlive-breakurl" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-breakurl-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f9b33cc5bda81cee7df5ecdfd0d8aeaed1ae193bb9082d5b400d71824fc6dbea</sum>
        </package>
        <package name="texlive-xcolor" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-xcolor-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">f9e9bfdab36f0e31d5c9fffe7f4258b8d52226da55713c4f58b93e185d52a822</sum>
        </package>
        <package name="texlive-subfig" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-subfig-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">fade2d23c084ed47ac24275e60ec0ead00c5490b70a0a9a10005af44a4f06345</sum>
        </package>
        <package name="texlive-latexconfig" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-latexconfig-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">fadf87b47c9586c5f2c7202ca33a8174a74fd3970cb00018df65a97b80aea8f5</sum>
        </package>
        <package name="texlive-placeins" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-placeins-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">fb101b046207f755433af8976b7b2c6ea2d1723d0197a61853814552c3e93870</sum>
        </package>
        <package name="texlive-tipa" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-tipa-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">fb5314f416b0d1620f9be0ac9831b469f236850246d8b01c3a312b6938f4a224</sum>
        </package>
        <package name="texlive-grffile" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-grffile-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">fb7437751da0f1d9b18537fbf3b4964433173661ac6368f5b139dd9d88484234</sum>
        </package>
        <package name="texlive-capt-of" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-capt-of-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">fd6779eac52f70e0620d6e78c74713d3030107fefcc1c26aa1c9eec1faf2408b</sum>
        </package>
        <package name="texlive-changepage" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-changepage-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">fdd562d91c1cdd56193c886379dea47b650cb587c3b5b0b499fc7df317fa8d63</sum>
        </package>
        <package name="texlive-parskip" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-parskip-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">ff9649c004481c386f9d73f2a44d2176100414159752a25a0f92335b0622c38b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3711</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-06-23 15:36:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)
* libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0795)
* libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0796)
* libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0797)
* libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c (CVE-2023-0798)
* libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0799)
* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)
* libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801)
* libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)
* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)
* libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3711" id="RHSA-2023:3711" type="rhsa" title="RHSA-2023:3711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48281" id="CVE-2022-48281" type="cve" title="CVE-2022-48281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0795" id="CVE-2023-0795" type="cve" title="CVE-2023-0795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0796" id="CVE-2023-0796" type="cve" title="CVE-2023-0796"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0797" id="CVE-2023-0797" type="cve" title="CVE-2023-0797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0798" id="CVE-2023-0798" type="cve" title="CVE-2023-0798"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0799" id="CVE-2023-0799" type="cve" title="CVE-2023-0799"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0800" id="CVE-2023-0800" type="cve" title="CVE-2023-0800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0801" id="CVE-2023-0801" type="cve" title="CVE-2023-0801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0802" id="CVE-2023-0802" type="cve" title="CVE-2023-0802"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0803" id="CVE-2023-0803" type="cve" title="CVE-2023-0803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0804" id="CVE-2023-0804" type="cve" title="CVE-2023-0804"/>
      <reference href="https://bugzilla.redhat.com/2163606" id="2163606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170119" id="2170119" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170146" id="2170146" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170151" id="2170151" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170157" id="2170157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170162" id="2170162" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170167" id="2170167" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170172" id="2170172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170178" id="2170178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170187" id="2170187" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170192" id="2170192" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3711.html" id="ALSA-2023:3711" type="self" title="ALSA-2023:3711"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libtiff-devel" version="4.4.0" release="8.el9_2" epoch="0" arch="s390x" src="libtiff-4.4.0-8.el9_2.src.rpm">
          <filename>libtiff-devel-4.4.0-8.el9_2.s390x.rpm</filename>
          <sum type="sha256">a91120978a4281883bc7051850da777b94093ddeab7062aa54246c2095f62273</sum>
        </package>
        <package name="libtiff" version="4.4.0" release="8.el9_2" epoch="0" arch="s390x" src="libtiff-4.4.0-8.el9_2.src.rpm">
          <filename>libtiff-4.4.0-8.el9_2.s390x.rpm</filename>
          <sum type="sha256">eb0b491cb603deb7ccc0136c77d5b46e26c8c982a73be07d367e65d8b3bbe440</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3714</id>
    <title>Moderate: postgresql security update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-06-23 15:06:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)
* postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3714" id="RHSA-2023:3714" type="rhsa" title="RHSA-2023:3714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2454" id="CVE-2023-2454" type="cve" title="CVE-2023-2454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2455" id="CVE-2023-2455" type="cve" title="CVE-2023-2455"/>
      <reference href="https://bugzilla.redhat.com/2207568" id="2207568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207569" id="2207569" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3714.html" id="ALSA-2023:3714" type="self" title="ALSA-2023:3714"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="postgresql-server" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-server-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">194f5e25eb154a4e1da5ab118ea53dedfea88e287653ec2abe9f5bcf8efff89e</sum>
        </package>
        <package name="postgresql-pltcl" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-pltcl-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">31ea051f455305375e43a30291800285e415083cbc6c6ee935f2ac52b67c71ef</sum>
        </package>
        <package name="postgresql-upgrade" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-upgrade-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">69460d83199974f920e47bbafd94847de26ececcffd8544052cc9378add26909</sum>
        </package>
        <package name="postgresql-private-libs" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-private-libs-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7325c8ca65ed71608b18dcde0132b0dac273ee435121884ddf1e700855500915</sum>
        </package>
        <package name="postgresql" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">865a800c9b4ef7ed44ff0cbad0ed3499f0ef97cc133cc8cb8b9660fe6bc97056</sum>
        </package>
        <package name="postgresql-plperl" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-plperl-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">9227a7d0e3cd68576999f829fd5abfbe58d1358eb0a4d95a71ecce62807e6808</sum>
        </package>
        <package name="postgresql-plpython3" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-plpython3-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">b27f7138efda2e8386eb293986b47a74fad262ac2fbd6fb5f464d92f4c4d177e</sum>
        </package>
        <package name="postgresql-contrib" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-contrib-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">f72dba528e45d4e41a45dbecf4e118bb4a8e1fe1d48444fcdbf284879f654ac3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3715</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-06-23 14:54:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fix(es):

* libvirt: Memory leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3715" id="RHSA-2023:3715" type="rhsa" title="RHSA-2023:3715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2700" id="CVE-2023-2700" type="cve" title="CVE-2023-2700"/>
      <reference href="https://bugzilla.redhat.com/2203653" id="2203653" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3715.html" id="ALSA-2023:3715" type="self" title="ALSA-2023:3715"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libvirt-daemon-driver-storage-core" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">067b9b558fd0f95df5dd72a516589bc798c0cfe21809324f5be251d919e9c30f</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-interface-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">08ce3a34db5577462d60781e5c3f144f912da271a439d8d2eb630887437ddca7</sum>
        </package>
        <package name="libvirt-nss" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-nss-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">0c345f467e14bcab5bcc85a2514a00334ff43b4c1d1836bb6ec9984a97b85cec</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">1b64fcaa589e6e1e2f8e33019c64971086f326e8d0cfc7174a0d45f7ee29bbcf</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">1daca10273f82622478754725165225f8d12a7482661f56af2c497e2c41cc72b</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">23902d4794c0b8bc81c0c3846896688e641c6d8c42ae454e72f81bfe194a89d1</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-storage-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">34b18a8a21182dbba3783eae55f4cd1ee8f6e426ce5dd34c2d752ae66f64e14e</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-config-network-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">3c70243e3e918d68cb91d57fb309d754036562e5f287f26fed272f947201e203</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">3f100f69c457d36b247a30bc76f7d296c717ca03f48f0b234d9cabd15055d6f5</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">4644994e18a3bd4670a3f84ebc1f4bcbe6e40de576ed2859b4427cde178b23e2</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">4c7e23efe72981f43a02baa7460d4c4463c25f6303c1fe5abf7f979d5a0217ea</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">5f1cd6d5541dee496065c96b47c5cff755a275b85ddd7b4cc9a299ebe29f3494</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-kvm-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">66a6275a98b26e574609505a16187aaa02f9285837e78971a59a438f5ee8f45b</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">88a4329e226a2cc0591e9a2962d5e6d955a50c0098a195ff982eb06c04717207</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-network-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">8d7181e184d111a21a651cb9a17037e8b4f72c611794c568c69abfdeac5ea83c</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-qemu-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">b6d816515e91831f3817e4a6bd40ebab8b708667f7568b5d4fa09ffbe2583be7</sum>
        </package>
        <package name="libvirt-libs" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-libs-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">bd4245815a8ea0bb04eb666fd4f64da61b2e0aa36de339b79b972f23ca66d21e</sum>
        </package>
        <package name="libvirt-client" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-client-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">c9493eed0628b230694ac35a2b62437fa1cf0a59b62cb4a70cee31b48370c179</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-secret-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">ca1a6ed478460ad2d2037a3d22d11df4717fcae78478e43500bb34f038d7def8</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">d2045bb2c35cad9d55f2436b46c24e11ee55ebe293eb2a6a0f64526ab7bb4259</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">d54c7013fe92d9e953cb8d9897b6ee0ed4e45ae5d60ccc1d3236e13a47d860cb</sum>
        </package>
        <package name="libvirt-daemon" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-daemon-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">f247f0c17aae3939505aa4601e4eb7fdb21d77d5eca4edc7f93704e8a2ca4211</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3722</id>
    <title>Moderate: openssl security and bug fix update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-06-23 14:32:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security and bug fix update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: Possible DoS translating ASN.1 object identifiers (CVE-2023-2650)
* openssl: Denial of service by excessive resource usage in verifying X509 policy constraints (CVE-2023-0464)
* openssl: Invalid certificate policies in leaf certificates are silently ignored (CVE-2023-0465)
* openssl: Certificate policy check not enabled (CVE-2023-0466)
* openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM (CVE-2023-1255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, openssl KDFs should only allow selected hash algorithms (BZ#2175860)
* In FIPS mode, openssl should reject short KDF input or output keys or provide an indicator (BZ#2175864)
* In FIPS mode, openssl should provide an indicator for AES-GCM to query whether the IV was generated internally or provided externally (BZ#2175868)
* openssl FIPS mode self-test should zeroize `out` in `verify_integrity` in providers/fips/self_test.c (BZ#2175873)
* In FIPS mode, openssl should not support RSA encryption or decryption without padding (outside of RSASVE) or provide an indicator (BZ#2178029)
* In FIPS mode, openssl should reject EVP_PKEY_fromdata() for short DHX keys, or provide an indicator (BZ#2178030)
* In FIPS mode, openssl should not use the legacy ECDSA_do_sign(), RSA_public_encrypt(), RSA_private_decrypt() functions for pairwise consistency tests (BZ#2178034)
* In FIPS mode, openssl should enter error state when DH PCT fails (BZ#2178039)
* In FIPS mode, openssl should always run the PBKDF2 lower bounds checks or provide an indicator when the pkcs5 parameter is set to 1 (BZ#2178137)
* Support requiring EMS in TLS 1.2, default to it when in FIPS mode (BZ#2188046)
* OpenSSL rsa_verify_recover doesn't use the same key checks as rsa_verify in FIPS mode (BZ#2188052)
* AlmaLinux9.0 - sshd dumps core when ibmca engine is configured with default_algorithms = CIPHERS or ALL (openssl) (BZ#2211396)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3722" id="RHSA-2023:3722" type="rhsa" title="RHSA-2023:3722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0464" id="CVE-2023-0464" type="cve" title="CVE-2023-0464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0465" id="CVE-2023-0465" type="cve" title="CVE-2023-0465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0466" id="CVE-2023-0466" type="cve" title="CVE-2023-0466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1255" id="CVE-2023-1255" type="cve" title="CVE-2023-1255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2650" id="CVE-2023-2650" type="cve" title="CVE-2023-2650"/>
      <reference href="https://bugzilla.redhat.com/2181082" id="2181082" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2182561" id="2182561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2182565" id="2182565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188461" id="2188461" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207947" id="2207947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3722.html" id="ALSA-2023:3722" type="self" title="ALSA-2023:3722"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="openssl-perl" version="3.0.7" release="16.el9_2" epoch="1" arch="s390x" src="openssl-3.0.7-16.el9_2.src.rpm">
          <filename>openssl-perl-3.0.7-16.el9_2.s390x.rpm</filename>
          <sum type="sha256">1d2c647b0d5a65d437366038b0d4150064d2ef557e8277cff4bbf5036f6fd87d</sum>
        </package>
        <package name="openssl-devel" version="3.0.7" release="16.el9_2" epoch="1" arch="s390x" src="openssl-3.0.7-16.el9_2.src.rpm">
          <filename>openssl-devel-3.0.7-16.el9_2.s390x.rpm</filename>
          <sum type="sha256">2af63f0cae9d2ae67e645eea02efe82a7efeb20d083f60b0754e3c29da668cd4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3723</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-07-11 20:32:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events (CVE-2023-2235)
* kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation (CVE-2023-32233)
* Kernel: bluetooth: Unauthorized management command execution (CVE-2023-2002)
* kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124)
* kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194)
* kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference (CVE-2023-28466)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Intel QAT Update - (kernel changes) (BZ#2176846)
* RPL-P IOTG/RPL-S IOTG: cpu frequency issues (BZ#2178857)
* In FIPS mode, kernel does not transition into error state when RCT or APT health tests fail (BZ#2181727)
* Kernel BUG in iwlmvm wifi driver when used Mesh systems (BZ#2186723)
* Azure AlmaLinux 9 Backport upstream commit 93827a0a36396f2fd6368a54a020f420c8916e9b [KVM: VMX: Fix crash due to uninitialized current_vmcs] (BZ#2186822)
* AlmaLinux 9 blktests nvme/047 lead kernel NULL pointer (BZ#2187536)
* Single Node Openshift cluster becomes unreachable after running less than 2 hours (BZ#2187709)
* kernel[-rt]: task deadline_test:1778 blocked for more than 622 seconds (BZ#2188655)
* fix page end in filemap_get_read_batch (BZ#2189349)
* AlmaLinux 9.2 hwpoison: data loss when memory error occurs on hugetlb pagecache (BZ#2192348)
* wdat_wdt watchdog timeout triggered unexpectedly (BZ#2192585)
* ice: high CPU usage with GNSS or ptp4l (BZ#2203154)
* AlmaLinux 9 "smpboot: Scheduler frequency invariance went wobbly, disabling!" on nohz_full CPUs after long run (BZ#2203178)
* Dying percpu kworkers cause issues on isolated CPUs [almalinux-9] (BZ#2203229)
* FJ9.2 Bug: [REG] NFS infinite loop of COMMIT call and NFS4ERR_DELAY reply. (BZ#2203335)
* perf errors - "event syntax error: 'unc_p_delayed_c_state_abort_core5'" b'_ value too big for format, maximum is 255' (BZ#2207471)
* AlmaLinux 9: Invalid character detected by rpminspect in Documentation/translations/zh_CN/process/magic-number.rst (BZ#2208242)
* cifs: backport small patches to bring us close to 9.1 - backport commit aea02fc40a7f cifs: fix wrong unlock before return from cifs_tree_connect (BZ#2209045)
* AlmaLinux 9 x86_64, kdump 2nd kernel will randomly panic on "kvm-08-guest25.hv2" (BZ#2210614)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3723" id="RHSA-2023:3723" type="rhsa" title="RHSA-2023:3723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2002" id="CVE-2023-2002" type="cve" title="CVE-2023-2002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2124" id="CVE-2023-2124" type="cve" title="CVE-2023-2124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2194" id="CVE-2023-2194" type="cve" title="CVE-2023-2194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2235" id="CVE-2023-2235" type="cve" title="CVE-2023-2235"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28466" id="CVE-2023-28466" type="cve" title="CVE-2023-28466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32233" id="CVE-2023-32233" type="cve" title="CVE-2023-32233"/>
      <reference href="https://bugzilla.redhat.com/2179000" id="2179000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187308" id="2187308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187439" id="2187439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188396" id="2188396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2192589" id="2192589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196105" id="2196105" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3723.html" id="ALSA-2023:3723" type="self" title="ALSA-2023:3723"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="perf" version="5.14.0" release="284.18.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.18.1.el9_2.src.rpm">
          <filename>perf-5.14.0-284.18.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">0aff593e8aa2d1f7d6cce10a30633f89dc765843d18503516d0601046dde56a3</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="284.18.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.18.1.el9_2.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-284.18.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">26130ef4edf4471517dea7850da92209fe47951388189a8956445f46685fc759</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="284.18.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.18.1.el9_2.src.rpm">
          <filename>kernel-debug-devel-5.14.0-284.18.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">4593b6bb4a2d0aff49c8177a4fa6fa78092cb67d1d69e4275187d006785c6f86</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="284.18.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.18.1.el9_2.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-284.18.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">773909698d36f8058b3c567c43a56866aa82ad3eb172d5a8579006e558ae4681</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="284.18.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.18.1.el9_2.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-284.18.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">82cee5f53e30945da1150cee655751665845d0e1be312d1571870f5134f76bf4</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="284.18.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.18.1.el9_2.src.rpm">
          <filename>kernel-devel-5.14.0-284.18.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">b37b1b0017a7284a98c32cc721ca63093d6057c8df3a522efe87ed63f0191498</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="284.18.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.18.1.el9_2.src.rpm">
          <filename>kernel-devel-matched-5.14.0-284.18.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">b80539573b54a27a3822452f3d770228e3621531349413ba5b98764f0a75f3bc</sum>
        </package>
        <package name="rtla" version="5.14.0" release="284.18.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.18.1.el9_2.src.rpm">
          <filename>rtla-5.14.0-284.18.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">df1f40324a9ee035849aaee6ab5f5c41603967b223ac365266aa1f9254631e25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3923</id>
    <title>Critical: go-toolset and golang security update</title>
    <issued date="2023-06-29 00:00:00"/>
    <updated date="2023-06-29 20:59:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>go-toolset and golang security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

The golang packages provide the Go programming language compiler.

Security Fix(es):

* golang: cmd/go: go command may generate unexpected code at build time when using cgo (CVE-2023-29402)
* golang: cmd/go: go command may execute arbitrary code at build time when using cgo (CVE-2023-29404)
* golang: cmd/cgo: Arbitratry code execution triggered by linker flags (CVE-2023-29405)
* golang: runtime: unexpected behavior of setuid/setgid binaries (CVE-2023-29403)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3923" id="RHSA-2023:3923" type="rhsa" title="RHSA-2023:3923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29402" id="CVE-2023-29402" type="cve" title="CVE-2023-29402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29403" id="CVE-2023-29403" type="cve" title="CVE-2023-29403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29404" id="CVE-2023-29404" type="cve" title="CVE-2023-29404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29405" id="CVE-2023-29405" type="cve" title="CVE-2023-29405"/>
      <reference href="https://bugzilla.redhat.com/2216965" id="2216965" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2217562" id="2217562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2217565" id="2217565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2217569" id="2217569" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3923.html" id="ALSA-2023:3923" type="self" title="ALSA-2023:3923"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="golang-tests" version="1.19.10" release="1.el9_2" epoch="0" arch="noarch" src="golang-1.19.10-1.el9_2.src.rpm">
          <filename>golang-tests-1.19.10-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">30ab1bd4291b0272e257958461bb72023bef4257ecd6d4b5eb97a27bd8d6379e</sum>
        </package>
        <package name="go-toolset" version="1.19.10" release="1.el9_2" epoch="0" arch="s390x" src="go-toolset-1.19.10-1.el9_2.src.rpm">
          <filename>go-toolset-1.19.10-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">35b4ce8315d395edd5b54aa98dd962285930c3c08def06cf39296d2c4ca952e9</sum>
        </package>
        <package name="golang-docs" version="1.19.10" release="1.el9_2" epoch="0" arch="noarch" src="golang-1.19.10-1.el9_2.src.rpm">
          <filename>golang-docs-1.19.10-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">71dc9cc489e6edf78787a78b99884deaa694d1d3f821c446c375a4219a2b729c</sum>
        </package>
        <package name="golang-bin" version="1.19.10" release="1.el9_2" epoch="0" arch="s390x" src="golang-1.19.10-1.el9_2.src.rpm">
          <filename>golang-bin-1.19.10-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">ca020de30c6e101886aa981d2400f20acbda9941a0486577f9e7cd2a3d33ff68</sum>
        </package>
        <package name="golang-misc" version="1.19.10" release="1.el9_2" epoch="0" arch="noarch" src="golang-1.19.10-1.el9_2.src.rpm">
          <filename>golang-misc-1.19.10-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">ce25db99e39e7ce0e75d9c795762a5246ef955db97b3030fdda7c25aeecd0561</sum>
        </package>
        <package name="golang-src" version="1.19.10" release="1.el9_2" epoch="0" arch="noarch" src="golang-1.19.10-1.el9_2.src.rpm">
          <filename>golang-src-1.19.10-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">dddbe14e399987dedb35b95a495ec72088fba6d56b01d95ae75c7be4f4d899f8</sum>
        </package>
        <package name="golang" version="1.19.10" release="1.el9_2" epoch="0" arch="s390x" src="golang-1.19.10-1.el9_2.src.rpm">
          <filename>golang-1.19.10-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">efc62ab99c92b9b5306b574574cd10bad0a74d5c0e6966ce5814e5d6e63638e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4030</id>
    <title>Critical: grafana security update</title>
    <issued date="2023-07-12 00:00:00"/>
    <updated date="2023-07-12 14:06:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB. 

Security Fix(es):

* grafana: account takeover possible when using Azure AD OAuth (CVE-2023-3128)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4030" id="RHSA-2023:4030" type="rhsa" title="RHSA-2023:4030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3128" id="CVE-2023-3128" type="cve" title="CVE-2023-3128"/>
      <reference href="https://bugzilla.redhat.com/2213626" id="2213626" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4030.html" id="ALSA-2023:4030" type="self" title="ALSA-2023:4030"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="grafana" version="9.0.9" release="3.el9_2.alma" epoch="0" arch="s390x" src="grafana-9.0.9-3.el9_2.alma.src.rpm">
          <filename>grafana-9.0.9-3.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">bbd21492756d9835df22af3f096f8e62032c399573b109291e0e7373da2fe9ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4057</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-14 10:21:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet7.0 (SDK 7.0.109, Runtime 7.0.9). (BZ#2219634)

Security Fix(es):

* dotnet: race condition in Core SignInManager&lt;TUser&gt; PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4057" id="RHSA-2023:4057" type="rhsa" title="RHSA-2023:4057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33170" id="CVE-2023-33170" type="cve" title="CVE-2023-33170"/>
      <reference href="https://bugzilla.redhat.com/2221854" id="2221854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4057.html" id="ALSA-2023:4057" type="self" title="ALSA-2023:4057"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.9" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el9_2.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.9-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">30e244c6061c2d0a68707d9f049761195f1e1625260f1f16920724a5f6eb4642</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.109" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.109-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">40d8ac2bbf083a7709b926a87b14d921281e66ebd53c5adb826bf96cdc81680d</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.9" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el9_2.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.9-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">457e5bd1cafad9be5aa9f7b3cd06f582e6fdeb1c8332a15d75697832d5a03864</sum>
        </package>
        <package name="dotnet-host" version="7.0.9" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el9_2.src.rpm">
          <filename>dotnet-host-7.0.9-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">525feb5fc13829d4628fd56359051a540f3a74be9cc39c8fbfa0a85b5045274f</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.9" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el9_2.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.9-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">72375260341d5e96d2fcbdd2efda4fbd8a2df04b6f7b57f675dcf86a02ac3bb7</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.9" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el9_2.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.9-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">a2caf36197640fa8adb1114fd26c4b3b1383dcd734a5a53c12ed923b804346e9</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.109" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el9_2.src.rpm">
          <filename>dotnet-templates-7.0-7.0.109-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">ed36d4c6f5473b7e0f6e0797810fab75d53188eb49d7bb094bdd81e46309eca9</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="7.0.109" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el9_2.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.109-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">f37fe6b82c8171d1da65c7e84d3b14f74e53aa6200d21f9cfffcbf575a9af31a</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.9" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el9_2.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.9-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">f8c3c04dd0f1c0df258df04f2e7ab50ccc827562a6154272a7a5dba6e98e95ce</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.9" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el9_2.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.9-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">f91ab8d819da9134c90f42d33e3a0167722ac6021078e5b14c2227bf5d133e34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4060</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-13 21:20:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet6.0 (SDK 6.0.120, Runtime 6.0.20). (BZ#2219640)

Security Fix(es):

* dotnet: race condition in Core SignInManager&lt;TUser&gt; PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4060" id="RHSA-2023:4060" type="rhsa" title="RHSA-2023:4060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33170" id="CVE-2023-33170" type="cve" title="CVE-2023-33170"/>
      <reference href="https://bugzilla.redhat.com/2221854" id="2221854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4060.html" id="ALSA-2023:4060" type="self" title="ALSA-2023:4060"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="dotnet-sdk-6.0" version="6.0.120" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.120-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">282f382d3bbdb7f436fdebbce73136657189c248009f710b7d07196a51e31312</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.20" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el9_2.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.20-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">5e8c7d59f8f414518bbeb39182a1dfdb4f06dbd9c5127fc3fde9ceb119d28c11</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.20" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el9_2.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.20-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">60a510753fffe52ad21fd6acdb52af3894915578602dc205ae3590b516d68cd9</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.20" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el9_2.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.20-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">6159d75b8c037fe6ccb7d0f8f393be26e21134bb2077e80febd3fce7bf968e5e</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.20" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el9_2.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.20-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">6587a7450a0435b851decf9ad99fe58fbe00360ddc04ca5acd4efd189c7c659a</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.20" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el9_2.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.20-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">6d63ee7bfd273c18be1ff4446dc91d7cf5430c1613c40fd7193d01d01fa5b376</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.20" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el9_2.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.20-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">8a339b8fe26c67bccf8e19c2599684ca842a6c28c5c575a4980d2e06cd27b34e</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.120" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el9_2.src.rpm">
          <filename>dotnet-templates-6.0-6.0.120-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">f6cb136dac98cc678ffd53e7925c269ca9fca8f4b55091a0e466a0548411390d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4064</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-14 22:20:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.13.0.

Security Fix(es):

* Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-37202)
* Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 (CVE-2023-37211)
* Mozilla: Fullscreen notification obscured (CVE-2023-37207)
* Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4064" id="RHSA-2023:4064" type="rhsa" title="RHSA-2023:4064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37201" id="CVE-2023-37201" type="cve" title="CVE-2023-37201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37202" id="CVE-2023-37202" type="cve" title="CVE-2023-37202"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37207" id="CVE-2023-37207" type="cve" title="CVE-2023-37207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37208" id="CVE-2023-37208" type="cve" title="CVE-2023-37208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37211" id="CVE-2023-37211" type="cve" title="CVE-2023-37211"/>
      <reference href="https://bugzilla.redhat.com/2219747" id="2219747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219748" id="2219748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219749" id="2219749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219750" id="2219750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219751" id="2219751" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4064.html" id="ALSA-2023:4064" type="self" title="ALSA-2023:4064"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="thunderbird" version="102.13.0" release="2.el9_2.alma" epoch="0" arch="s390x" src="thunderbird-102.13.0-2.el9_2.alma.src.rpm">
          <filename>thunderbird-102.13.0-2.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">313c2cbd149ac89b99e382da31f087366f89fc160980f5965e77f523092b3dd9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4071</id>
    <title>Important: firefox security update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-14 22:13:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.13.0 ESR.

Security Fix(es):

* Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-37202)
* Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 (CVE-2023-37211)
* Mozilla: Fullscreen notification obscured (CVE-2023-37207)
* Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4071" id="RHSA-2023:4071" type="rhsa" title="RHSA-2023:4071"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37201" id="CVE-2023-37201" type="cve" title="CVE-2023-37201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37202" id="CVE-2023-37202" type="cve" title="CVE-2023-37202"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37207" id="CVE-2023-37207" type="cve" title="CVE-2023-37207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37208" id="CVE-2023-37208" type="cve" title="CVE-2023-37208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37211" id="CVE-2023-37211" type="cve" title="CVE-2023-37211"/>
      <reference href="https://bugzilla.redhat.com/2219747" id="2219747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219748" id="2219748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219749" id="2219749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219750" id="2219750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219751" id="2219751" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4071.html" id="ALSA-2023:4071" type="self" title="ALSA-2023:4071"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="firefox-x11" version="102.13.0" release="2.el9_2.alma" epoch="0" arch="s390x" src="firefox-102.13.0-2.el9_2.alma.src.rpm">
          <filename>firefox-x11-102.13.0-2.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">3ca59fdf4dc4cf2505ba8990fa8d2796c7c60b22da8a2e20fc81a7d4a8f0619f</sum>
        </package>
        <package name="firefox" version="102.13.0" release="2.el9_2.alma" epoch="0" arch="s390x" src="firefox-102.13.0-2.el9_2.alma.src.rpm">
          <filename>firefox-102.13.0-2.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">e9a863faaad3f99ff8325e9eedcfa4921bcc2ea4594b60fb7d793522f36020ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4099</id>
    <title>Important: bind security update</title>
    <issued date="2023-07-17 00:00:00"/>
    <updated date="2023-07-18 08:38:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4099" id="RHSA-2023:4099" type="rhsa" title="RHSA-2023:4099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2828" id="CVE-2023-2828" type="cve" title="CVE-2023-2828"/>
      <reference href="https://bugzilla.redhat.com/2216227" id="2216227" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4099.html" id="ALSA-2023:4099" type="self" title="ALSA-2023:4099"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="bind" version="9.16.23" release="11.el9_2.1" epoch="32" arch="s390x" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>bind-9.16.23-11.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">1867b3c2d4bb588afd803f3e31a65cf3bdb9b59dbd1543642303aa1832373e91</sum>
        </package>
        <package name="python3-bind" version="9.16.23" release="11.el9_2.1" epoch="32" arch="noarch" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>python3-bind-9.16.23-11.el9_2.1.noarch.rpm</filename>
          <sum type="sha256">3c62bdb3bc6fac3e5332f94bff3875dd89419e9849d8b1de13eea0f4ed4f1bdc</sum>
        </package>
        <package name="bind-utils" version="9.16.23" release="11.el9_2.1" epoch="32" arch="s390x" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>bind-utils-9.16.23-11.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">410cada0ea4fae31df19a6e5e43e68795b42ef9784c4e91231eb8295a5199ea8</sum>
        </package>
        <package name="bind-dnssec-utils" version="9.16.23" release="11.el9_2.1" epoch="32" arch="s390x" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>bind-dnssec-utils-9.16.23-11.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">44c69fafb23cb274eeea1a525800490ee5ad28dda783bdee5878f443ad9f541d</sum>
        </package>
        <package name="bind-license" version="9.16.23" release="11.el9_2.1" epoch="32" arch="noarch" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>bind-license-9.16.23-11.el9_2.1.noarch.rpm</filename>
          <sum type="sha256">6cc24f3f2bd69377e9a6976c76a03a16df5d3afb4e73571daf17fb098ba7cf6a</sum>
        </package>
        <package name="bind-dnssec-doc" version="9.16.23" release="11.el9_2.1" epoch="32" arch="noarch" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>bind-dnssec-doc-9.16.23-11.el9_2.1.noarch.rpm</filename>
          <sum type="sha256">9e8ab6697ea398f41342da502c9130cc4d73503f0922c0d3ed0a6aa39285ae73</sum>
        </package>
        <package name="bind-libs" version="9.16.23" release="11.el9_2.1" epoch="32" arch="s390x" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>bind-libs-9.16.23-11.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">dd8f638bc5bea2897534b4634b30cc548f55f844981fb4933cdd47da8a615300</sum>
        </package>
        <package name="bind-chroot" version="9.16.23" release="11.el9_2.1" epoch="32" arch="s390x" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>bind-chroot-9.16.23-11.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">fc11bae2841f08ac6ffdf2a2e92c8c783a7104e94c387124f81ab4360e29d0a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4158</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 17:32:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
* OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-07, 11.0.20) [almalinux-9] (BZ#2223100)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4158" id="RHSA-2023:4158" type="rhsa" title="RHSA-2023:4158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22006" id="CVE-2023-22006" type="cve" title="CVE-2023-22006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22036" id="CVE-2023-22036" type="cve" title="CVE-2023-22036"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22041" id="CVE-2023-22041" type="cve" title="CVE-2023-22041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221626" id="2221626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221634" id="2221634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2223207" id="2223207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4158.html" id="ALSA-2023:4158" type="self" title="ALSA-2023:4158"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="java-11-openjdk-headless" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">209a50e2b8ad4894460af0813aea4affa7202ad5c99e651d698f4506609cc32d</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">3e07e351d3d08ceaa222c02e8154b48266373cd483a9c85bf9c32b80a728132a</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">6806b35ed5dc15432384f57b6ebb865a7e3a355a539bb29c09a902fe061433cb</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-src-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">72f03c64ee4583fd28aed919124871bbfb21ccac86bf8cd06e5651e7350c9098</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">76f945c8e02275e30bcf2de88441369586ab4bc2d73241527e6b8dac66c3c739</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">7d4262568c30d422185b07eea5331ff3d0c2a029621ecbbde1e94931b2bb8d12</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">aea3851118a7c4b8ce5f8c5dd8174102f6dfcc4d04b28b599f2cd2144f2420a6</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">bc0a17fec1502e95b89ce0a9d3abb2a3e884269d166b493afaa9a4ea88e8e5b8</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">f6e8d9644b085c928dfb912ac74d11d25d67f340e225e95488b2ad6991bcdb32</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4177</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 17:20:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
* OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
* OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Installing the same java-17-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-17-openjdk-headless package. This prevented the use of the dynamic dump feature, as the checksum in the archive would be different on each system. This is resolved in this release by using the .jsa files generated during the initial build. (RHBZ#2221653)
* Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8) [almalinux-9] (BZ#2222852)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4177" id="RHSA-2023:4177" type="rhsa" title="RHSA-2023:4177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22006" id="CVE-2023-22006" type="cve" title="CVE-2023-22006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22036" id="CVE-2023-22036" type="cve" title="CVE-2023-22036"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22041" id="CVE-2023-22041" type="cve" title="CVE-2023-22041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22044" id="CVE-2023-22044" type="cve" title="CVE-2023-22044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221626" id="2221626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221634" id="2221634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221642" id="2221642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2223207" id="2223207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4177.html" id="ALSA-2023:4177" type="self" title="ALSA-2023:4177"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="java-17-openjdk-javadoc" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">05b51ef8ffec46b19bf6f030bca1f86d5cb5dc5e7a6e39ca93184ddab99eab7d</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">11142efd15ee89cf6aa113847d033cd2a486903001c915ada8253b6b66348a92</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">1ede67e22d29c46fdabb22b464a7b29bf51ca8bcba42d9f1386c71fef73e2475</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">30dd29e83f715ba055df52f58b6e4d9277428da20ca4ffa7a565523fd0c3adb7</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">7fa7db4a7231a0d6bc8eff37f89539547d6759c80096a291c92a8beeff7886ae</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">83e5b0de704b43a637c13a4297b3703287a51adf81dbfc4da19c3de197fc5b7f</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">afb9cfe8abfc703a22511b05b76c03c7c62e45afe8066593e3db321dab07f9a9</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">c68084001a2eaf611b11232410cfb6c277e22a94386007ab954ddba4ed5f4d24</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-src-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">cf2d95dd19a71df8fceebd378f024329f2f4a499d73acdb7280ac211aaf29b20</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4178</id>
    <title>Moderate: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 17:09:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-07, 8u382) [almalinux-9] (BZ#2220662)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4178" id="RHSA-2023:4178" type="rhsa" title="RHSA-2023:4178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4178.html" id="ALSA-2023:4178" type="self" title="ALSA-2023:4178"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="java-1.8.0-openjdk" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.382.b05-2.el9.s390x.rpm</filename>
          <sum type="sha256">08d92f3269851c36915fc6a1fa4f43f8d4440ced71d5cd782112de31f40fa0f4</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.382.b05-2.el9.s390x.rpm</filename>
          <sum type="sha256">12783203f8ae913c6da115cf6170cdace04d9172b7b85bedb8f4c8891c60f6c9</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.382.b05-2.el9.noarch.rpm</filename>
          <sum type="sha256">629b4e0b7e9dcdd7422347c79f5b1761e2c5e855465ad44af7692d12bb836326</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.382.b05-2.el9.s390x.rpm</filename>
          <sum type="sha256">7aa0b84d96f3ba63760a7e58716018350fe47e90c2a65055727d6b6f6ab002c2</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.382.b05-2.el9.s390x.rpm</filename>
          <sum type="sha256">d1f8eebeb2e950b10609f0b3bcc204a42a5429b0e961c189c5627b2099f34451</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.382.b05-2.el9.noarch.rpm</filename>
          <sum type="sha256">da780a2487f6f8cecd6c76fc7272e62d9f49158df6f8e23dd5b1d1ef9fc2774a</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.382.b05" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.382.b05-2.el9.s390x.rpm</filename>
          <sum type="sha256">fff2d2cdbee20bcdf43bbb316d0bc9e88c60f1ceb5cd257093cbe20ebfeed846</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4201</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-07-18 00:00:00"/>
    <updated date="2023-07-18 20:32:51"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-32435)
* webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2023-32439)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4201" id="RHSA-2023:4201" type="rhsa" title="RHSA-2023:4201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32435" id="CVE-2023-32435" type="cve" title="CVE-2023-32435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32439" id="CVE-2023-32439" type="cve" title="CVE-2023-32439"/>
      <reference href="https://bugzilla.redhat.com/2218626" id="2218626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218640" id="2218640" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4201.html" id="ALSA-2023:4201" type="self" title="ALSA-2023:4201"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="webkit2gtk3-jsc" version="2.38.5" release="1.el9_2.3" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9_2.3.src.rpm">
          <filename>webkit2gtk3-jsc-2.38.5-1.el9_2.3.s390x.rpm</filename>
          <sum type="sha256">58f6390a0132c6b4c5915e2df00c551c0dddb0f907ac33168d1bcef4002652f6</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.38.5" release="1.el9_2.3" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9_2.3.src.rpm">
          <filename>webkit2gtk3-devel-2.38.5-1.el9_2.3.s390x.rpm</filename>
          <sum type="sha256">62a80b6217e8a242ca87134db06bc19cdd82322513b0f6248565693549b2b5f0</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.38.5" release="1.el9_2.3" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9_2.3.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.38.5-1.el9_2.3.s390x.rpm</filename>
          <sum type="sha256">ede140df018e1a5952e07c623d26e0edc626af4edba8265012ece0b61345ad54</sum>
        </package>
        <package name="webkit2gtk3" version="2.38.5" release="1.el9_2.3" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el9_2.3.src.rpm">
          <filename>webkit2gtk3-2.38.5-1.el9_2.3.s390x.rpm</filename>
          <sum type="sha256">f237a91bcdd90fea25b68ff437c6ca9785cf5ee25314b3716942bbe99f5fe8e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4325</id>
    <title>Moderate: samba security and bug fix update</title>
    <issued date="2023-07-31 00:00:00"/>
    <updated date="2023-08-03 11:46:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security and bug fix update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: SMB2 packet signing is not enforced when "server signing = required" is set (CVE-2023-3347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* The trust relationship between this workstation and the primary domain failed (BZ#2223600)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4325" id="RHSA-2023:4325" type="rhsa" title="RHSA-2023:4325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3347" id="CVE-2023-3347" type="cve" title="CVE-2023-3347"/>
      <reference href="https://bugzilla.redhat.com/2222792" id="2222792" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4325.html" id="ALSA-2023:4325" type="self" title="ALSA-2023:4325"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="samba-client" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="s390x" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-client-4.17.5-103.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">991c75f56ac447639849ae61b4945da4ac9ab3b3f181226f8f9da5fe3e7d84d6</sum>
        </package>
        <package name="samba-vfs-iouring" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="s390x" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-vfs-iouring-4.17.5-103.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">ac45ece527d38e61f7442c002b1d90da365fa5615aba8e54420f1212fb9a3e72</sum>
        </package>
        <package name="samba-krb5-printing" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="s390x" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-krb5-printing-4.17.5-103.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">ce41e8d277393be78a14d0f4b6e77eefb5ec38d413a386b42a9e0d66a9a680c6</sum>
        </package>
        <package name="samba-winbind-clients" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="s390x" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-winbind-clients-4.17.5-103.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">d5e05c538f4b99a41fa03f57c034893992da0b318a157b0be64d713db1e2f8cb</sum>
        </package>
        <package name="samba-winbind-krb5-locator" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="s390x" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">dfd89f49b11c9ea1877b47f79878db79ed3bacfe98d171371b61741fd7c4c795</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4327</id>
    <title>Moderate: postgresql:15 security update</title>
    <issued date="2023-07-31 00:00:00"/>
    <updated date="2023-08-02 19:09:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)
* postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4327" id="RHSA-2023:4327" type="rhsa" title="RHSA-2023:4327"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2454" id="CVE-2023-2454" type="cve" title="CVE-2023-2454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2455" id="CVE-2023-2455" type="cve" title="CVE-2023-2455"/>
      <reference href="https://bugzilla.redhat.com/2207568" id="2207568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207569" id="2207569" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4327.html" id="ALSA-2023:4327" type="self" title="ALSA-2023:4327"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <module name="postgresql" stream="15" version="9020020230802162703" context="8cf767d6" arch="s390x"/>
        <package name="postgresql-pltcl" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-pltcl-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">04a3c5f81f1e807ca83e9c57116515783de93a31ab50b43e6510372cc6bd8ea7</sum>
        </package>
        <package name="postgresql-test" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-test-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">0a2b5dfcd2a801e35d732760da0d7ca24b742baa46f0b48e1d7cd05f9b7284a7</sum>
        </package>
        <package name="postgresql-static" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-static-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">24bda85a265036c1587cac8f84759bf74df293273a6c3f28d2dbe4835146780c</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-upgrade-devel-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">40373dabb70ce7b0a42291f5103923146e775646f3c3401acd085e3112b97f6a</sum>
        </package>
        <package name="postgresql-docs" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-docs-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">5fb2d3804a4eb9f790bfe81b056de9c39de1938dc59e48278e6b5d795a3e05bc</sum>
        </package>
        <package name="postgresql-contrib" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-contrib-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">6429e121c2f8c06746650ba1fba9e0360d2c969c603f411be8811910aced97e6</sum>
        </package>
        <package name="postgresql-private-devel" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-private-devel-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">7932984f3dfef0405e506de594b813ba52fd811446f5bd541f3648600d67bf56</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el9.2.0+22+09653793" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el9.2.0+22+09653793.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el9.2.0+22+09653793.s390x.rpm</filename>
          <sum type="sha256">8aa663b5c2ff175148a949b30c8b031b034134291fa2b86fad010de3264ce975</sum>
        </package>
        <package name="postgresql-plpython3" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-plpython3-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">8b3daae5d739aa2b82c8026a801aba1fa8cb84a0655aa7ca5f773c1f81848605</sum>
        </package>
        <package name="postgresql" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">9616ccb4df16fc5f5042057d98bfbbc46a59882e6f105162a7e2b19a02b2de82</sum>
        </package>
        <package name="postgresql-server" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-server-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">994f31322cfbd34bd4f37351b2a92c8e166ba29e90f2927535ca01c2cf37219f</sum>
        </package>
        <package name="postgresql-server-devel" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-server-devel-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">9eb4d79923c449cefa1cc5a88ecfefa097951044abeb546d5cffe5b496cd0cc6</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el9.2.0+22+09653793" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el9.2.0+22+09653793.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el9.2.0+22+09653793.s390x.rpm</filename>
          <sum type="sha256">aae4db5a7b2a459bedc06107e043df328af5aba310f7377482a759ca6f274258</sum>
        </package>
        <package name="postgresql-upgrade" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-upgrade-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">bbcefb3722a303d01cf3ceb97ea34557cb82800e73c86c92f823c1d8c65bfb40</sum>
        </package>
        <package name="postgresql-private-libs" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-private-libs-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">bd9033a244b7e5608987bca59e5bfa1a246b2c693bf35f3a5ae85c07ecec3c61</sum>
        </package>
        <package name="postgresql-plperl" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-plperl-15.3-1.module_el9.2.0+32+f3c125b5.s390x.rpm</filename>
          <sum type="sha256">c4e64a13de71baa45b8f7f35c9f84c0795de7bab7da1a8976e24573944f1f45b</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el9.2.0+22+09653793" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el9.2.0+22+09653793.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el9.2.0+22+09653793.s390x.rpm</filename>
          <sum type="sha256">ed411af5e135cda227ddf7b810e4e04e1e6d923ead9a5300a03d167542d996c9</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.3" release="1.module_el9.2.0+32+f3c125b5" epoch="0" arch="noarch" src="postgresql-15.3-1.module_el9.2.0+32+f3c125b5.src.rpm">
          <filename>postgresql-test-rpm-macros-15.3-1.module_el9.2.0+32+f3c125b5.noarch.rpm</filename>
          <sum type="sha256">f48cc577d80b43cbc2f817ed08da4cdadb58b7d207b0158ec7be5f3ee3ee21b6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4330</id>
    <title>Moderate: nodejs:18 security, bug fix, and enhancement update</title>
    <issued date="2023-07-31 00:00:00"/>
    <updated date="2023-08-02 16:41:31"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:18 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The package has been upgraded to a later upstream version: nodejs (18). (BZ#2223314, BZ#2223316, BZ#2223318, BZ#2223319, BZ#2223320, BZ#2223354)

Security Fix(es):

* nodejs: mainModule.proto bypass experimental policy mechanism (CVE-2023-30581)
* nodejs: process interuption due to invalid Public Key information in x509 certificates (CVE-2023-30588)
* nodejs: HTTP Request Smuggling via Empty headers separated by CR (CVE-2023-30589)
* nodejs: DiffieHellman do not generate keys after setting a private key (CVE-2023-30590)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4330" id="RHSA-2023:4330" type="rhsa" title="RHSA-2023:4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30581" id="CVE-2023-30581" type="cve" title="CVE-2023-30581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30588" id="CVE-2023-30588" type="cve" title="CVE-2023-30588"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30589" id="CVE-2023-30589" type="cve" title="CVE-2023-30589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30590" id="CVE-2023-30590" type="cve" title="CVE-2023-30590"/>
      <reference href="https://bugzilla.redhat.com/2219824" id="2219824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219838" id="2219838" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219841" id="2219841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219842" id="2219842" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4330.html" id="ALSA-2023:4330" type="self" title="ALSA-2023:4330"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <module name="nodejs" stream="18" version="9020020230802112332" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-full-i18n" version="18.16.1" release="1.module_el9.2.0+31+cbae0c8e" epoch="1" arch="s390x" src="nodejs-18.16.1-1.module_el9.2.0+31+cbae0c8e.src.rpm">
          <filename>nodejs-full-i18n-18.16.1-1.module_el9.2.0+31+cbae0c8e.s390x.rpm</filename>
          <sum type="sha256">4a01168d419ea9a4e591d6edc6ae056aa40e63eb2e5d6c2b433bc275547ec322</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8</sum>
        </package>
        <package name="nodejs-docs" version="18.16.1" release="1.module_el9.2.0+31+cbae0c8e" epoch="1" arch="noarch" src="nodejs-18.16.1-1.module_el9.2.0+31+cbae0c8e.src.rpm">
          <filename>nodejs-docs-18.16.1-1.module_el9.2.0+31+cbae0c8e.noarch.rpm</filename>
          <sum type="sha256">8c3fa3cb42ef5df1bf9ca20ec5f9cc2c56e702231b236e37670681e241c5fa63</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0</sum>
        </package>
        <package name="npm" version="9.5.1" release="1.18.16.1.1.module_el9.2.0+31+cbae0c8e" epoch="1" arch="s390x" src="nodejs-18.16.1-1.module_el9.2.0+31+cbae0c8e.src.rpm">
          <filename>npm-9.5.1-1.18.16.1.1.module_el9.2.0+31+cbae0c8e.s390x.rpm</filename>
          <sum type="sha256">a4c535a4c3185c88b10322976802ce7e612822365c5c3a5b58fdea8722167541</sum>
        </package>
        <package name="nodejs" version="18.16.1" release="1.module_el9.2.0+31+cbae0c8e" epoch="1" arch="s390x" src="nodejs-18.16.1-1.module_el9.2.0+31+cbae0c8e.src.rpm">
          <filename>nodejs-18.16.1-1.module_el9.2.0+31+cbae0c8e.s390x.rpm</filename>
          <sum type="sha256">a874b6031ba6c67adb0ef0c2d8f6d2d1910b26ef507493bb57b1a44225886cdd</sum>
        </package>
        <package name="nodejs-devel" version="18.16.1" release="1.module_el9.2.0+31+cbae0c8e" epoch="1" arch="s390x" src="nodejs-18.16.1-1.module_el9.2.0+31+cbae0c8e.src.rpm">
          <filename>nodejs-devel-18.16.1-1.module_el9.2.0+31+cbae0c8e.s390x.rpm</filename>
          <sum type="sha256">f16e2d023963348428566819d3d1b451c1a97f64a046bf36378f82e16631f031</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="2.module_el9.2.0+29+de583a0b" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-2.module_el9.2.0+29+de583a0b.src.rpm">
          <filename>nodejs-nodemon-2.0.20-2.module_el9.2.0+29+de583a0b.noarch.rpm</filename>
          <sum type="sha256">f50193ade11d258bdd6c8782db590f72eaeb21799f8df9703e96ffd60644688d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4331</id>
    <title>Moderate: nodejs security, bug fix, and enhancement update</title>
    <issued date="2023-07-31 00:00:00"/>
    <updated date="2023-08-02 18:13:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The package has been upgraded to a later upstream version: nodejs (16.20.1). (BZ#2223334, BZ#2223336, BZ#2223338, BZ#2223340, BZ#2223342, BZ#2223344)

Security Fix(es):

* nodejs: mainModule.proto bypass experimental policy mechanism (CVE-2023-30581)
* nodejs: process interuption due to invalid Public Key information in x509 certificates (CVE-2023-30588)
* nodejs: HTTP Request Smuggling via Empty headers separated by CR (CVE-2023-30589)
* nodejs: DiffieHellman do not generate keys after setting a private key (CVE-2023-30590)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4331" id="RHSA-2023:4331" type="rhsa" title="RHSA-2023:4331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30581" id="CVE-2023-30581" type="cve" title="CVE-2023-30581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30588" id="CVE-2023-30588" type="cve" title="CVE-2023-30588"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30589" id="CVE-2023-30589" type="cve" title="CVE-2023-30589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30590" id="CVE-2023-30590" type="cve" title="CVE-2023-30590"/>
      <reference href="https://bugzilla.redhat.com/2219824" id="2219824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219838" id="2219838" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219841" id="2219841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219842" id="2219842" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4331.html" id="ALSA-2023:4331" type="self" title="ALSA-2023:4331"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="npm" version="8.19.4" release="1.16.20.1.1.el9_2" epoch="1" arch="s390x" src="nodejs-16.20.1-1.el9_2.src.rpm">
          <filename>npm-8.19.4-1.16.20.1.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">861216e89b1f98f6cd920569310cd24a31f8115a2b9a12357b65dbd7c35d7f07</sum>
        </package>
        <package name="nodejs-libs" version="16.20.1" release="1.el9_2" epoch="1" arch="s390x" src="nodejs-16.20.1-1.el9_2.src.rpm">
          <filename>nodejs-libs-16.20.1-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">909f71b193bc086f03b2bb43e1da9f84c57230faebecca84fb194afeaaaa275a</sum>
        </package>
        <package name="nodejs" version="16.20.1" release="1.el9_2" epoch="1" arch="s390x" src="nodejs-16.20.1-1.el9_2.src.rpm">
          <filename>nodejs-16.20.1-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">bb64757b7a7f0e9bb5f096c6d68843ecc94dce352ba5d146d8d2ef2468736396</sum>
        </package>
        <package name="nodejs-docs" version="16.20.1" release="1.el9_2" epoch="1" arch="noarch" src="nodejs-16.20.1-1.el9_2.src.rpm">
          <filename>nodejs-docs-16.20.1-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">e06d71fd417fd39b1765657dd8cc90ec19f42cbe1e479373f337e9e8c57df2df</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.20.1" release="1.el9_2" epoch="1" arch="s390x" src="nodejs-16.20.1-1.el9_2.src.rpm">
          <filename>nodejs-full-i18n-16.20.1-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">e3172f15aa21711e39b09948882dc9bfd007809609533a20066db760416bd81e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4349</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-02 13:24:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484)
* libxml2: Hashing of empty dict strings isn't deterministic (CVE-2023-29469)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4349" id="RHSA-2023:4349" type="rhsa" title="RHSA-2023:4349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28484" id="CVE-2023-28484" type="cve" title="CVE-2023-28484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29469" id="CVE-2023-29469" type="cve" title="CVE-2023-29469"/>
      <reference href="https://bugzilla.redhat.com/2185984" id="2185984" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2185994" id="2185994" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4349.html" id="ALSA-2023:4349" type="self" title="ALSA-2023:4349"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libxml2-devel" version="2.9.13" release="3.el9_2.1" epoch="0" arch="s390x" src="libxml2-2.9.13-3.el9_2.1.src.rpm">
          <filename>libxml2-devel-2.9.13-3.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">9269127b0ca52804269b8c8e46acfaf1d87c88470bc6de2a942bdf7c92b6d1a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4350</id>
    <title>Moderate: python-requests security update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-02 13:06:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-requests security update</summary>
    <description>The python-requests package contains a library designed to make HTTP requests easy for developers.

Security Fix(es):

* python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4350" id="RHSA-2023:4350" type="rhsa" title="RHSA-2023:4350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32681" id="CVE-2023-32681" type="cve" title="CVE-2023-32681"/>
      <reference href="https://bugzilla.redhat.com/2209469" id="2209469" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4350.html" id="ALSA-2023:4350" type="self" title="ALSA-2023:4350"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="python3-requests+security" version="2.25.1" release="7.el9_2" epoch="0" arch="noarch" src="python-requests-2.25.1-7.el9_2.src.rpm">
          <filename>python3-requests+security-2.25.1-7.el9_2.noarch.rpm</filename>
          <sum type="sha256">3e24ebe477beb77a17f2aedb06e9312bef3771af9a0e11266b05774485bf9e76</sum>
        </package>
        <package name="python3-requests+socks" version="2.25.1" release="7.el9_2" epoch="0" arch="noarch" src="python-requests-2.25.1-7.el9_2.src.rpm">
          <filename>python3-requests+socks-2.25.1-7.el9_2.noarch.rpm</filename>
          <sum type="sha256">8a27ca1c7eebbfd292640cf4d76adeeb9487862fd39ca3124cd03898c70da5e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4354</id>
    <title>Moderate: curl security update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-02 12:34:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: IDN wildcard match may lead to Improper Cerificate Validation (CVE-2023-28321)
* curl: more POST-after-PUT confusion (CVE-2023-28322)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4354" id="RHSA-2023:4354" type="rhsa" title="RHSA-2023:4354"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28321" id="CVE-2023-28321" type="cve" title="CVE-2023-28321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28322" id="CVE-2023-28322" type="cve" title="CVE-2023-28322"/>
      <reference href="https://bugzilla.redhat.com/2196786" id="2196786" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196793" id="2196793" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4354.html" id="ALSA-2023:4354" type="self" title="ALSA-2023:4354"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libcurl-devel" version="7.76.1" release="23.el9_2.2" epoch="0" arch="s390x" src="curl-7.76.1-23.el9_2.2.src.rpm">
          <filename>libcurl-devel-7.76.1-23.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">e8cfbbf97a6cc95a64a419730e7cb7d4e66a6cdbcd6283e406e3c5c226d4c9d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4377</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-08 13:12:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ipvlan: out-of-bounds write caused by unclear skb-&gt;cb (CVE-2023-3090)
* kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)
* kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869)
* kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458)
* kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4377" id="RHSA-2023:4377" type="rhsa" title="RHSA-2023:4377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45869" id="CVE-2022-45869" type="cve" title="CVE-2022-45869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0458" id="CVE-2023-0458" type="cve" title="CVE-2023-0458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1998" id="CVE-2023-1998" type="cve" title="CVE-2023-1998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3090" id="CVE-2023-3090" type="cve" title="CVE-2023-3090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35788" id="CVE-2023-35788" type="cve" title="CVE-2023-35788"/>
      <reference href="https://bugzilla.redhat.com/2151317" id="2151317" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187257" id="2187257" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2193219" id="2193219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215768" id="2215768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218672" id="2218672" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4377.html" id="ALSA-2023:4377" type="self" title="ALSA-2023:4377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="284.25.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.25.1.el9_2.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-284.25.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">316f77bc8eab3491aacba7d37693bda77eee46a6408783f51954d11052417d13</sum>
        </package>
        <package name="perf" version="5.14.0" release="284.25.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.25.1.el9_2.src.rpm">
          <filename>perf-5.14.0-284.25.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">450fae403786506b21160356026b69f41d7732b5e18869180b5b1bbca5e66153</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="284.25.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.25.1.el9_2.src.rpm">
          <filename>kernel-debug-devel-5.14.0-284.25.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">4ab85216bca5e915589322b7d19656aa1fb51d4d60a8c3c39794270eb90de863</sum>
        </package>
        <package name="rtla" version="5.14.0" release="284.25.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.25.1.el9_2.src.rpm">
          <filename>rtla-5.14.0-284.25.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">5e28261fc3171839d3042e3a3201d4a24f34a175d0729b68d9175291b72e1284</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="284.25.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.25.1.el9_2.src.rpm">
          <filename>kernel-devel-matched-5.14.0-284.25.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">71436fe47f87c0ac6933c8002b3c1811041c7bb0e531af9646ae25dd5f5f380a</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="284.25.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.25.1.el9_2.src.rpm">
          <filename>kernel-devel-5.14.0-284.25.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">879963917432c72897ea325b4e7fa05b8d3914fbbc435be3c4eee820b9378ee9</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="284.25.1.el9_2" epoch="0" arch="noarch" src="kernel-5.14.0-284.25.1.el9_2.src.rpm">
          <filename>kernel-doc-5.14.0-284.25.1.el9_2.noarch.rpm</filename>
          <sum type="sha256">8eba8be1d7bcfa73611b13790706a35b22ba614e1fbfffd60e60f6451ea1255c</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="284.25.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.25.1.el9_2.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-284.25.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">a6f412e2e1c5fb8f38cdcb4fd7fd47fb13d2f02723099e3841886d1d65ef4427</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="284.25.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.25.1.el9_2.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-284.25.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">c6551b899463faa0b9c58423028798386e1050033c5a6ade2b678c6339939427</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4411</id>
    <title>Important: cjose security update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-02 16:01:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cjose security update</summary>
    <description>CJose is C library implementing the Javascript Object Signing and Encryption (JOSE).

Security Fix(es):

* cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE (CVE-2023-37464)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4411" id="RHSA-2023:4411" type="rhsa" title="RHSA-2023:4411"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37464" id="CVE-2023-37464" type="cve" title="CVE-2023-37464"/>
      <reference href="https://bugzilla.redhat.com/2223295" id="2223295" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4411.html" id="ALSA-2023:4411" type="self" title="ALSA-2023:4411"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="cjose" version="0.6.1" release="13.el9_2.alma" epoch="0" arch="s390x" src="cjose-0.6.1-13.el9_2.alma.src.rpm">
          <filename>cjose-0.6.1-13.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">2c4b5ba1acd58f94e4d1d529c4e323138c97ae107b281a1fbede79cad62d33b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4412</id>
    <title>Important: openssh security update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-02 09:36:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4412" id="RHSA-2023:4412" type="rhsa" title="RHSA-2023:4412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38408" id="CVE-2023-38408" type="cve" title="CVE-2023-38408"/>
      <reference href="https://bugzilla.redhat.com/2224173" id="2224173" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4412.html" id="ALSA-2023:4412" type="self" title="ALSA-2023:4412"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="pam_ssh_agent_auth" version="0.10.4" release="5.30.el9_2" epoch="0" arch="s390x" src="openssh-8.7p1-30.el9_2.src.rpm">
          <filename>pam_ssh_agent_auth-0.10.4-5.30.el9_2.s390x.rpm</filename>
          <sum type="sha256">43051f96993fbc9680fba6144a724eafb3c144ebdde352ab2ebd66834adcf41a</sum>
        </package>
        <package name="openssh-askpass" version="8.7p1" release="30.el9_2" epoch="0" arch="s390x" src="openssh-8.7p1-30.el9_2.src.rpm">
          <filename>openssh-askpass-8.7p1-30.el9_2.s390x.rpm</filename>
          <sum type="sha256">8a66dba2f6f84368086a553ff7a3ab47425658d48e391f5500c8e739b06641c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4462</id>
    <title>Important: firefox security update</title>
    <issued date="2023-08-03 00:00:00"/>
    <updated date="2023-08-04 19:00:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.14.0 ESR.

Security Fix(es):

* Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)
* Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)
* Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)
* Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)
* Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)
* Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)
* Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056)
* Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057)
* Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4462" id="RHSA-2023:4462" type="rhsa" title="RHSA-2023:4462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4045" id="CVE-2023-4045" type="cve" title="CVE-2023-4045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4046" id="CVE-2023-4046" type="cve" title="CVE-2023-4046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4047" id="CVE-2023-4047" type="cve" title="CVE-2023-4047"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4048" id="CVE-2023-4048" type="cve" title="CVE-2023-4048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4049" id="CVE-2023-4049" type="cve" title="CVE-2023-4049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4050" id="CVE-2023-4050" type="cve" title="CVE-2023-4050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4055" id="CVE-2023-4055" type="cve" title="CVE-2023-4055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4056" id="CVE-2023-4056" type="cve" title="CVE-2023-4056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4057" id="CVE-2023-4057" type="cve" title="CVE-2023-4057"/>
      <reference href="https://bugzilla.redhat.com/2228360" id="2228360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228361" id="2228361" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228362" id="2228362" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228363" id="2228363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228364" id="2228364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228365" id="2228365" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228367" id="2228367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228370" id="2228370" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228371" id="2228371" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4462.html" id="ALSA-2023:4462" type="self" title="ALSA-2023:4462"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="firefox" version="102.14.0" release="1.el9_2.alma" epoch="0" arch="s390x" src="firefox-102.14.0-1.el9_2.alma.src.rpm">
          <filename>firefox-102.14.0-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">45e861c6a706802294e4a762890059b9e537e1eefb41a906e366775ec3f20a91</sum>
        </package>
        <package name="firefox-x11" version="102.14.0" release="1.el9_2.alma" epoch="0" arch="s390x" src="firefox-102.14.0-1.el9_2.alma.src.rpm">
          <filename>firefox-x11-102.14.0-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">776763558c8da966849330725ec838e1537dabc2506c2784fc8d4a8a3acbb283</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4499</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-08-07 00:00:00"/>
    <updated date="2023-08-08 11:56:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.14.0.

Security Fix(es):

* Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)
* Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)
* Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)
* Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)
* Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)
* Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)
* Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056)
* Mozilla: Memory safety bugs fixed in Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057)
* thunderbird: File Extension Spoofing using the Text Direction Override Character (CVE-2023-3417)
* Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4499" id="RHSA-2023:4499" type="rhsa" title="RHSA-2023:4499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3417" id="CVE-2023-3417" type="cve" title="CVE-2023-3417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4045" id="CVE-2023-4045" type="cve" title="CVE-2023-4045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4046" id="CVE-2023-4046" type="cve" title="CVE-2023-4046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4047" id="CVE-2023-4047" type="cve" title="CVE-2023-4047"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4048" id="CVE-2023-4048" type="cve" title="CVE-2023-4048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4049" id="CVE-2023-4049" type="cve" title="CVE-2023-4049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4050" id="CVE-2023-4050" type="cve" title="CVE-2023-4050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4055" id="CVE-2023-4055" type="cve" title="CVE-2023-4055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4056" id="CVE-2023-4056" type="cve" title="CVE-2023-4056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4057" id="CVE-2023-4057" type="cve" title="CVE-2023-4057"/>
      <reference href="https://bugzilla.redhat.com/2225325" id="2225325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228360" id="2228360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228361" id="2228361" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228362" id="2228362" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228363" id="2228363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228364" id="2228364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228365" id="2228365" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228367" id="2228367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228370" id="2228370" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228371" id="2228371" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4499.html" id="ALSA-2023:4499" type="self" title="ALSA-2023:4499"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="thunderbird" version="102.14.0" release="1.el9_2.alma" epoch="0" arch="s390x" src="thunderbird-102.14.0-1.el9_2.alma.src.rpm">
          <filename>thunderbird-102.14.0-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">51072918e69661c5e40bf661af9e382823c8fb2ec0ec6f438b8e24a19b8a13fd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4569</id>
    <title>Moderate: dbus security update</title>
    <issued date="2023-08-08 00:00:00"/>
    <updated date="2023-08-09 11:31:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dbus security update</summary>
    <description>D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility.

Security Fix(es):

* dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered (CVE-2023-34969)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4569" id="RHSA-2023:4569" type="rhsa" title="RHSA-2023:4569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34969" id="CVE-2023-34969" type="cve" title="CVE-2023-34969"/>
      <reference href="https://bugzilla.redhat.com/2213166" id="2213166" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4569.html" id="ALSA-2023:4569" type="self" title="ALSA-2023:4569"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="dbus-daemon" version="1.12.20" release="7.el9_2.1" epoch="1" arch="s390x" src="dbus-1.12.20-7.el9_2.1.src.rpm">
          <filename>dbus-daemon-1.12.20-7.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">5419f62d4e6c2073623710c778fa993db9e1280fcc6f666b68ed91cb58fbeb7d</sum>
        </package>
        <package name="dbus-x11" version="1.12.20" release="7.el9_2.1" epoch="1" arch="s390x" src="dbus-1.12.20-7.el9_2.1.src.rpm">
          <filename>dbus-x11-1.12.20-7.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">60b0151501857d6facc190ba34a28ee9bf934c7252804e051bd7301bbc2b2052</sum>
        </package>
        <package name="dbus-devel" version="1.12.20" release="7.el9_2.1" epoch="1" arch="s390x" src="dbus-1.12.20-7.el9_2.1.src.rpm">
          <filename>dbus-devel-1.12.20-7.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">925e7250a05c75f5754e603b03e027d7df8fea8ae6e630cbe322dcdeb8c4ae69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4571</id>
    <title>Important: iperf3 security update</title>
    <issued date="2023-08-08 00:00:00"/>
    <updated date="2023-08-09 11:22:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>iperf3 security update</summary>
    <description>Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

Security Fix(es):

* iperf3: memory allocation hazard and crash (CVE-2023-38403)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4571" id="RHSA-2023:4571" type="rhsa" title="RHSA-2023:4571"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38403" id="CVE-2023-38403" type="cve" title="CVE-2023-38403"/>
      <reference href="https://bugzilla.redhat.com/2222204" id="2222204" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4571.html" id="ALSA-2023:4571" type="self" title="ALSA-2023:4571"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="iperf3" version="3.9" release="10.el9_2.alma" epoch="0" arch="s390x" src="iperf3-3.9-10.el9_2.alma.src.rpm">
          <filename>iperf3-3.9-10.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">2a454df992975f1ed87d6ecae65f638f500e94066dcadf40bd4a6230da332b44</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4634</id>
    <title>Important: rust security update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 09:01:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>rust security update</summary>
    <description>Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries. 

Security Fix(es):

* rust-cargo: cargo does not respect the umask when extracting dependencies (CVE-2023-38497)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4634" id="RHSA-2023:4634" type="rhsa" title="RHSA-2023:4634"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38497" id="CVE-2023-38497" type="cve" title="CVE-2023-38497"/>
      <reference href="https://bugzilla.redhat.com/2228038" id="2228038" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4634.html" id="ALSA-2023:4634" type="self" title="ALSA-2023:4634"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="rustfmt" version="1.66.1" release="2.el9_2" epoch="0" arch="s390x" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>rustfmt-1.66.1-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">085d942818b2216e8023dc04b054892514a6ba22966e287e688b6637ed8817c4</sum>
        </package>
        <package name="rust-src" version="1.66.1" release="2.el9_2" epoch="0" arch="noarch" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>rust-src-1.66.1-2.el9_2.noarch.rpm</filename>
          <sum type="sha256">1facb7484f74dbb22012883cfc6ee052b7e533e636fbde7d657d6534cc802b6d</sum>
        </package>
        <package name="clippy" version="1.66.1" release="2.el9_2" epoch="0" arch="s390x" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>clippy-1.66.1-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">22ff015cfc6a5afd2bda6eca1786757a1087258dcb5d6c4c9ae1f174f97fef43</sum>
        </package>
        <package name="rust-analysis" version="1.66.1" release="2.el9_2" epoch="0" arch="s390x" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>rust-analysis-1.66.1-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">3b0cd8b5182f7c2c6c11132f4b7f03d3ab542c73a89c70418b11f2d3b80ad76e</sum>
        </package>
        <package name="rust-toolset" version="1.66.1" release="2.el9_2" epoch="0" arch="s390x" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>rust-toolset-1.66.1-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">45ef9fed21f42f33dd5b78aeca7c19ecbd8e02900fa66f3e3f4fc4f35df999c3</sum>
        </package>
        <package name="rust-std-static-wasm32-wasi" version="1.66.1" release="2.el9_2" epoch="0" arch="noarch" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>rust-std-static-wasm32-wasi-1.66.1-2.el9_2.noarch.rpm</filename>
          <sum type="sha256">60459374ae943f9914cbd8a14ee1b4e19b843661a50eeba370c0663d8df56a73</sum>
        </package>
        <package name="rust-lldb" version="1.66.1" release="2.el9_2" epoch="0" arch="noarch" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>rust-lldb-1.66.1-2.el9_2.noarch.rpm</filename>
          <sum type="sha256">61a689c097cafd7e8275c8a5c27000e3fdacdabeac111935ece27faff7583904</sum>
        </package>
        <package name="rust-std-static" version="1.66.1" release="2.el9_2" epoch="0" arch="s390x" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>rust-std-static-1.66.1-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">6abd43903b7a55dd433cf0d54ceebbb621a4daaa83e76a5b02900f5df23ca223</sum>
        </package>
        <package name="rust-gdb" version="1.66.1" release="2.el9_2" epoch="0" arch="noarch" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>rust-gdb-1.66.1-2.el9_2.noarch.rpm</filename>
          <sum type="sha256">6df55647414454c1ec1e8ea2510536e446da01d792d336812a0540265a97521b</sum>
        </package>
        <package name="rust-analyzer" version="1.66.1" release="2.el9_2" epoch="0" arch="s390x" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>rust-analyzer-1.66.1-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">7a10ab767b0a07855bdf07b1a61bec39d8f8bd89fb9cd7e0a6582c9d189bf669</sum>
        </package>
        <package name="rust" version="1.66.1" release="2.el9_2" epoch="0" arch="s390x" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>rust-1.66.1-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">b68e5db10f908a7156ccfdda0af3cad7375b86142d1a7c24c6dcfdbc2e0f8f24</sum>
        </package>
        <package name="rust-debugger-common" version="1.66.1" release="2.el9_2" epoch="0" arch="noarch" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>rust-debugger-common-1.66.1-2.el9_2.noarch.rpm</filename>
          <sum type="sha256">c08735b6178beb86b9405fdbb11dac9b0a71a0271459b4073745461efeba5ecd</sum>
        </package>
        <package name="cargo" version="1.66.1" release="2.el9_2" epoch="0" arch="s390x" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>cargo-1.66.1-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">c55e8755666e7e1ce2b93b508b5ab09990f0f93db55b1b4fdd29e8c8a6f79161</sum>
        </package>
        <package name="rust-std-static-wasm32-unknown-unknown" version="1.66.1" release="2.el9_2" epoch="0" arch="noarch" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>rust-std-static-wasm32-unknown-unknown-1.66.1-2.el9_2.noarch.rpm</filename>
          <sum type="sha256">f1c83991316d5b6218e5af9e5d0f9e18b71196ddca8fc9abb06849c2ca8d6616</sum>
        </package>
        <package name="rust-doc" version="1.66.1" release="2.el9_2" epoch="0" arch="s390x" src="rust-1.66.1-2.el9_2.src.rpm">
          <filename>rust-doc-1.66.1-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">f4b90482b1cf49b481ae04e9102a6f16f8e7b7845d7146592df18435996da2b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4642</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 08:47:03"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.110 and .NET Runtime 7.0.10.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4642" id="RHSA-2023:4642" type="rhsa" title="RHSA-2023:4642"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35390" id="CVE-2023-35390" type="cve" title="CVE-2023-35390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38180" id="CVE-2023-38180" type="cve" title="CVE-2023-38180"/>
      <reference href="https://bugzilla.redhat.com/2228621" id="2228621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228622" id="2228622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4642.html" id="ALSA-2023:4642" type="self" title="ALSA-2023:4642"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="dotnet-targeting-pack-7.0" version="7.0.10" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el9_2.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.10-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">2516c1e1ea6ec76881a75d6d84f1671ce226238d8d6fddfd128bcdc2b963924c</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.10" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el9_2.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.10-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">266f473bcbb93a638606e1b684427e505a76df108e223607467c7323b2b8795b</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.110" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el9_2.src.rpm">
          <filename>dotnet-templates-7.0-7.0.110-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">54cfd686d0baf5c07fefd7e394768a09dd7fe49d7370f74a781222490f137577</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.10" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el9_2.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.10-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">76b155a168e34bbc095a5dfce3902ad3a2f2aebaab2be07d4f4601b045f061af</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="7.0.110" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el9_2.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.110-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7803fcd04268f8c88cf56a78baeae558a7dde7c009e2f5190097ae44177ba0e9</sum>
        </package>
        <package name="dotnet-host" version="7.0.10" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el9_2.src.rpm">
          <filename>dotnet-host-7.0.10-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">878263abd4cb479c8be363b67b646b67d31a1ce22753a2b20dc80aa075159b36</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.10" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el9_2.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.10-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">a3461d6552354d5f1ab0a4b1591d7595183e3e13673add50bb7caad63967c0a1</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.10" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el9_2.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.10-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">a761635823f56f74c144c4e80707b27375aad016a8eaa6f70bd64e3332b12bb3</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.110" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.110-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">ac4b49a983d6bdee91f765de410dd31354db2ffb2d47e781927c6348bad6f403</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.10" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el9_2.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.10-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">edd812d0211687ee7ba785954139ebb5dbf0d20546ec1c42fb439ddf8bce1a84</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4644</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 08:24:16"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.121 and .NET Runtime 6.0.21.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4644" id="RHSA-2023:4644" type="rhsa" title="RHSA-2023:4644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35390" id="CVE-2023-35390" type="cve" title="CVE-2023-35390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38180" id="CVE-2023-38180" type="cve" title="CVE-2023-38180"/>
      <reference href="https://bugzilla.redhat.com/2228621" id="2228621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228622" id="2228622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4644.html" id="ALSA-2023:4644" type="self" title="ALSA-2023:4644"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="dotnet-runtime-6.0" version="6.0.21" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el9_2.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.21-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">19a6228aed82825e5ebaed390228a5d0dad2ddbfe7baec186f8ad88ac836b267</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.21" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el9_2.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.21-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">2f54c3a4347e4e45c5866ef3b76f3b3f2cbf441a2aaeabd6922555e525604d2f</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.21" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el9_2.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.21-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7f6242082a40427e4f8a2df0c413c25c32e74f9b3c8326f064f510be3cb7c78e</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.21" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el9_2.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.21-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">c1564a58ba81408a5aff5f7c5704a46d4c2742e1bf58d828ef5accc0f27966e3</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.21" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el9_2.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.21-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">c5ccd53732b30c8204ffd391be5d755d6fd7b6c11d7997fc4f2781301002ba4c</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.121" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.121-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">cb53690296fa8a3575ecf27c3be95044c97dbce8196bbc2bc63590a26cfd2689</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.121" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el9_2.src.rpm">
          <filename>dotnet-templates-6.0-6.0.121-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">e31f2f3abc2e56cee761bc4b9a74439dc12e4778190b41151c45a016376996a9</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.21" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el9_2.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.21-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">e74db3ed894143ba9f23c1302c6a34b1916c6e1476b345a6f1afd9f300c1acde</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4838</id>
    <title>Important: cups security update</title>
    <issued date="2023-08-29 00:00:00"/>
    <updated date="2023-08-30 09:39:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

* cups: Information leak through Cups-Get-Document operation (CVE-2023-32360)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4838" id="RHSA-2023:4838" type="rhsa" title="RHSA-2023:4838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32360" id="CVE-2023-32360" type="cve" title="CVE-2023-32360"/>
      <reference href="https://bugzilla.redhat.com/2230495" id="2230495" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4838.html" id="ALSA-2023:4838" type="self" title="ALSA-2023:4838"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="cups-lpd" version="2.3.3op2" release="16.el9_2.1" epoch="1" arch="s390x" src="cups-2.3.3op2-16.el9_2.1.src.rpm">
          <filename>cups-lpd-2.3.3op2-16.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">50fef411e2e5749e86fe20732aab36c7db8fb5f499d92a539db557a156e78a2b</sum>
        </package>
        <package name="cups-filesystem" version="2.3.3op2" release="16.el9_2.1" epoch="1" arch="noarch" src="cups-2.3.3op2-16.el9_2.1.src.rpm">
          <filename>cups-filesystem-2.3.3op2-16.el9_2.1.noarch.rpm</filename>
          <sum type="sha256">aa04bc93b6930f3be08d7fcef1b901e910e5638414afe1eeed997ed3360b6477</sum>
        </package>
        <package name="cups-client" version="2.3.3op2" release="16.el9_2.1" epoch="1" arch="s390x" src="cups-2.3.3op2-16.el9_2.1.src.rpm">
          <filename>cups-client-2.3.3op2-16.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">ae0ea52d70da78b0cac5e0dd2a6bf4d74bfe8aacd97aced582157fbdd302c721</sum>
        </package>
        <package name="cups-ipptool" version="2.3.3op2" release="16.el9_2.1" epoch="1" arch="s390x" src="cups-2.3.3op2-16.el9_2.1.src.rpm">
          <filename>cups-ipptool-2.3.3op2-16.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">bf159a7f1fee251152d22538fb5209c02c7c52404341112313030e3d0a421e5d</sum>
        </package>
        <package name="cups-devel" version="2.3.3op2" release="16.el9_2.1" epoch="1" arch="s390x" src="cups-2.3.3op2-16.el9_2.1.src.rpm">
          <filename>cups-devel-2.3.3op2-16.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">c6e017fd31dcfb36495aa29153ad8bf22f2f032963b8c0ad9658b92f842ad54e</sum>
        </package>
        <package name="cups-printerapp" version="2.3.3op2" release="16.el9_2.1" epoch="1" arch="s390x" src="cups-2.3.3op2-16.el9_2.1.src.rpm">
          <filename>cups-printerapp-2.3.3op2-16.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">eeb0ec7b8791c80c3493f14c6543d8e9e6cb726366b9d6b696634606c45d93aa</sum>
        </package>
        <package name="cups" version="2.3.3op2" release="16.el9_2.1" epoch="1" arch="s390x" src="cups-2.3.3op2-16.el9_2.1.src.rpm">
          <filename>cups-2.3.3op2-16.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">fd3a2aa026490ae695189069bd6bf6afb23bf1b3d56dad422f1070e3580c4e9a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4955</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-09-04 00:00:00"/>
    <updated date="2023-09-06 14:26:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.15.0.

Security Fix(es):

* Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573)
* Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574)
* Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575)
* Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577)
* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584)
* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585)
* Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051)
* Mozilla: Full screen notification obscured by external program (CVE-2023-4053)
* Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578)
* Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580)
* Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581)
* Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4955" id="RHSA-2023:4955" type="rhsa" title="RHSA-2023:4955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4051" id="CVE-2023-4051" type="cve" title="CVE-2023-4051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4053" id="CVE-2023-4053" type="cve" title="CVE-2023-4053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4573" id="CVE-2023-4573" type="cve" title="CVE-2023-4573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4574" id="CVE-2023-4574" type="cve" title="CVE-2023-4574"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4575" id="CVE-2023-4575" type="cve" title="CVE-2023-4575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4577" id="CVE-2023-4577" type="cve" title="CVE-2023-4577"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4578" id="CVE-2023-4578" type="cve" title="CVE-2023-4578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4580" id="CVE-2023-4580" type="cve" title="CVE-2023-4580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4581" id="CVE-2023-4581" type="cve" title="CVE-2023-4581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4583" id="CVE-2023-4583" type="cve" title="CVE-2023-4583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4584" id="CVE-2023-4584" type="cve" title="CVE-2023-4584"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4585" id="CVE-2023-4585" type="cve" title="CVE-2023-4585"/>
      <reference href="https://bugzilla.redhat.com/2236071" id="2236071" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236072" id="2236072" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236073" id="2236073" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236075" id="2236075" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236076" id="2236076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236077" id="2236077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236078" id="2236078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236079" id="2236079" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236080" id="2236080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236082" id="2236082" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236084" id="2236084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236086" id="2236086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4955.html" id="ALSA-2023:4955" type="self" title="ALSA-2023:4955"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="thunderbird" version="102.15.0" release="1.el9_2.alma" epoch="0" arch="s390x" src="thunderbird-102.15.0-1.el9_2.alma.src.rpm">
          <filename>thunderbird-102.15.0-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">7079fe64c1163769b300ef855b4be9bd2bf1494ca36e086adb575649600099a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4958</id>
    <title>Important: firefox security update</title>
    <issued date="2023-09-04 00:00:00"/>
    <updated date="2023-09-06 14:38:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.15.0 ESR.

Security Fix(es):

* Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573)
* Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574)
* Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575)
* Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577)
* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584)
* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585)
* Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051)
* Mozilla: Full screen notification obscured by external program (CVE-2023-4053)
* Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578)
* Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580)
* Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581)
* Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4958" id="RHSA-2023:4958" type="rhsa" title="RHSA-2023:4958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4051" id="CVE-2023-4051" type="cve" title="CVE-2023-4051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4053" id="CVE-2023-4053" type="cve" title="CVE-2023-4053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4573" id="CVE-2023-4573" type="cve" title="CVE-2023-4573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4574" id="CVE-2023-4574" type="cve" title="CVE-2023-4574"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4575" id="CVE-2023-4575" type="cve" title="CVE-2023-4575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4577" id="CVE-2023-4577" type="cve" title="CVE-2023-4577"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4578" id="CVE-2023-4578" type="cve" title="CVE-2023-4578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4580" id="CVE-2023-4580" type="cve" title="CVE-2023-4580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4581" id="CVE-2023-4581" type="cve" title="CVE-2023-4581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4583" id="CVE-2023-4583" type="cve" title="CVE-2023-4583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4584" id="CVE-2023-4584" type="cve" title="CVE-2023-4584"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4585" id="CVE-2023-4585" type="cve" title="CVE-2023-4585"/>
      <reference href="https://bugzilla.redhat.com/2236071" id="2236071" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236072" id="2236072" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236073" id="2236073" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236075" id="2236075" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236076" id="2236076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236077" id="2236077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236078" id="2236078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236079" id="2236079" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236080" id="2236080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236082" id="2236082" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236084" id="2236084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236086" id="2236086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4958.html" id="ALSA-2023:4958" type="self" title="ALSA-2023:4958"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="firefox" version="102.15.0" release="1.el9_2.alma" epoch="0" arch="s390x" src="firefox-102.15.0-1.el9_2.alma.src.rpm">
          <filename>firefox-102.15.0-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">30184df5b5ca0545da3fe878fa0a7dfd0e02083f12b251a57fd6268f26eca72e</sum>
        </package>
        <package name="firefox-x11" version="102.15.0" release="1.el9_2.alma" epoch="0" arch="s390x" src="firefox-102.15.0-1.el9_2.alma.src.rpm">
          <filename>firefox-x11-102.15.0-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">ab29a757d91ed9d6b429bf9c6d0ceab5ffee3aaebd8d7137098a43a1eabf17bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5048</id>
    <title>Important: flac security update</title>
    <issued date="2023-09-11 00:00:00"/>
    <updated date="2023-09-12 09:07:01"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flac security update</summary>
    <description>FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

* flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5048" id="RHSA-2023:5048" type="rhsa" title="RHSA-2023:5048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-22219" id="CVE-2020-22219" type="cve" title="CVE-2020-22219"/>
      <reference href="https://bugzilla.redhat.com/2235489" id="2235489" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5048.html" id="ALSA-2023:5048" type="self" title="ALSA-2023:5048"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="flac-libs" version="1.3.3" release="10.el9_2.1" epoch="0" arch="s390x" src="flac-1.3.3-10.el9_2.1.src.rpm">
          <filename>flac-libs-1.3.3-10.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">e1a97f4cdf3f37f2fe30c92a495aaab1c57b68e79c81ce95f6da803ba3c181e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5069</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-09-12 00:00:00"/>
    <updated date="2023-09-14 08:08:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

The following packages have been upgraded to a later upstream version: kernel (5.14.0).

Security Fix(es):

* kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390)
* kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE (CVE-2023-3610)
* kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776)
* kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)
* kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free (CVE-2023-4147)
* kernel: nf_tables: use-after-free in nft_chain_lookup_byid() (CVE-2023-31248)
* kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001)
* kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637)
* hw: amd: Cross-Process Information Leak (CVE-2023-20593)
* kernel: bypass of shadow stack protection due to a logic error (CVE-2023-21102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* [Intel 9.3 BUG] [SPR][EMR][FHF] ACPI: Fix system hang during S3 wakeup (BZ#2218026)
* [Dell 9.2 BUG] Monitor lost after replug WD19TBS to SUT port wiith VGA/DVI to type-C dongle (BZ#2219463)
* rtmutex: Incorrect waiter woken when requeueing in rt_mutex_adjust_prio_chain() (BZ#2222121)
* AlmaLinux AWS ARM Instability During Microshift e2e tests (BZ#2223310)
* AlmaLinux 9.x updates for SEV-SNP guest support (BZ#2224587)
* Lock state corruption from nested rtmutex blocking in blk_flush_plug() (BZ#2225623)
* bpf_jit_limit hit again - copy_seccomp() fix (BZ#2226945)
* libceph: harden msgr2.1 frame segment length checks (BZ#2227070)
* Temporary values used for the FIPS integrity test should be zeroized after use (BZ#2227768)
* Important iavf bug fixes July 2023 (BZ#2228156)
* [i40e/ice] error: Cannot set interface MAC/vlanid to 1e:b7:e2:02:b1:aa/0 for ifname ens4f0 vf 0: Resource temporarily unavailable (BZ#2228158)
* lvconvert --splitcache, --uncache operations getting hung (BZ#2228481)
* perf: EMR core and uncore PMU support (BZ#2230175)
* NVIDIA - Grace: Backport i2c: tegra: Set ACPI node as primary fwnode (BZ#2230483)
* NVIDIA - Grace: Backport i2c: tegra: Fix PEC support for SMBUS block read (BZ#2230488)
* [Hyper-V][AlmaLinux 9]incomplete fc_transport implementation in storvsc causes null dereference in fc_timed_out() (BZ#2230747)
* Kernel config option CONFIG_CRYPTO_STATS should be disabled until it is enhanced (BZ#2231850)
* [AlmaLinux 9][Hyper-V]Excessive hv_storvsc driver logging with srb_status  SRB_STATUS_INTERNAL_ERROR  (0x30) (BZ#2231990)
* AlmaLinux-9: WARNING: bad unlock balance detected! (BZ#2232213)
* NVIDIA - Grace: Backport drm/ast patch expected for kernel 6.4 (BZ#2232302)
* [Lenovo 9.1 bug]   AlmaLinux 9 will hang when "echo c &gt; /proc/sysrq-trigger". (BZ#2232700)
* [AlmaLinux-9] bz2022169 in /kernel/general/process/reg-suit fails on aarch64  (/proc/[pid]/wchan broken) (BZ#2233928)

Enhancement(s):

* [Intel 9.3 FEAT] cpufreq: intel_pstate: Enable HWP IO boost for all servers (BZ#2210270)
* [Dell 9.3 FEAT] - New MB with AMP Codec Change on Maya Bay (audio driver) (BZ#2218960)
* [Lenovo 9.3 FEAT] MDRAID - Update to the latest upstream (BZ#2221170)
* [Intel 9.3 FEAT] [EMR] Add EMR support to uncore-frequency driver (BZ#2230169)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5069" id="RHSA-2023:5069" type="rhsa" title="RHSA-2023:5069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1637" id="CVE-2023-1637" type="cve" title="CVE-2023-1637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-20593" id="CVE-2023-20593" type="cve" title="CVE-2023-20593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21102" id="CVE-2023-21102" type="cve" title="CVE-2023-21102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31248" id="CVE-2023-31248" type="cve" title="CVE-2023-31248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3390" id="CVE-2023-3390" type="cve" title="CVE-2023-3390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35001" id="CVE-2023-35001" type="cve" title="CVE-2023-35001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3610" id="CVE-2023-3610" type="cve" title="CVE-2023-3610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3776" id="CVE-2023-3776" type="cve" title="CVE-2023-3776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4004" id="CVE-2023-4004" type="cve" title="CVE-2023-4004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4147" id="CVE-2023-4147" type="cve" title="CVE-2023-4147"/>
      <reference href="https://bugzilla.redhat.com/2181891" id="2181891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213260" id="2213260" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213455" id="2213455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2217845" id="2217845" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2220892" id="2220892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2220893" id="2220893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225097" id="2225097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225198" id="2225198" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225239" id="2225239" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225275" id="2225275" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5069.html" id="ALSA-2023:5069" type="self" title="ALSA-2023:5069"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="kernel-debug-devel" version="5.14.0" release="284.30.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.30.1.el9_2.src.rpm">
          <filename>kernel-debug-devel-5.14.0-284.30.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">0d15ada8f542210c416728688369b839aca8c87fe2597a8d32ad65b3e5478e95</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="284.30.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.30.1.el9_2.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-284.30.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">18e3de1f39e69da9b83ea66b8563f7b4ee444240124ee25e10faebae23f34ef1</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="284.30.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.30.1.el9_2.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-284.30.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">59c6f1783f5d236fe834f9453123d8ce561b2d78b6b014775a7db08625818854</sum>
        </package>
        <package name="rtla" version="5.14.0" release="284.30.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.30.1.el9_2.src.rpm">
          <filename>rtla-5.14.0-284.30.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">59cd349677cdf9d948bcecb0584a17ab1ddadfa64597281eab36c9cc48ca81cf</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="284.30.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.30.1.el9_2.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-284.30.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7cc556bb427aa89c99e1fa7c46e34b47748ec38f09b9277857ef0d6e4663c262</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="284.30.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.30.1.el9_2.src.rpm">
          <filename>kernel-devel-matched-5.14.0-284.30.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">9181ea5f71940d05b6559748ac3d898a560139ec6d94fecac097ca504864206e</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="284.30.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.30.1.el9_2.src.rpm">
          <filename>kernel-devel-5.14.0-284.30.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">d7a6bb36f40fbfb85472c54fdb22bdefae6733dc77fd12fabc7769cfb4362b39</sum>
        </package>
        <package name="perf" version="5.14.0" release="284.30.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.30.1.el9_2.src.rpm">
          <filename>perf-5.14.0-284.30.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">da863e81a8bdc20226606af193c151b1911d0f0cca0e2dd129029aa9345a3902</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5071</id>
    <title>Moderate: libcap security update</title>
    <issued date="2023-09-12 00:00:00"/>
    <updated date="2023-09-14 09:25:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libcap security update</summary>
    <description>Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.

Security Fix(es):

* libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603)
* libcap: Memory Leak on pthread_create() Error (CVE-2023-2602)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5071" id="RHSA-2023:5071" type="rhsa" title="RHSA-2023:5071"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2602" id="CVE-2023-2602" type="cve" title="CVE-2023-2602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2603" id="CVE-2023-2603" type="cve" title="CVE-2023-2603"/>
      <reference href="https://bugzilla.redhat.com/2209113" id="2209113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209114" id="2209114" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5071.html" id="ALSA-2023:5071" type="self" title="ALSA-2023:5071"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libcap-devel" version="2.48" release="9.el9_2" epoch="0" arch="s390x" src="libcap-2.48-9.el9_2.src.rpm">
          <filename>libcap-devel-2.48-9.el9_2.s390x.rpm</filename>
          <sum type="sha256">21b81981dad89226c28f9a2249d77063068c040bee0665b3aa0b06dce47cac2e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5080</id>
    <title>Moderate: keylime security update</title>
    <issued date="2023-09-12 00:00:00"/>
    <updated date="2023-09-14 09:44:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>keylime security update</summary>
    <description>Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.

Security Fix(es):

* keylime: registrar is subject to a DoS against SSL connections (CVE-2023-38200)
* Keylime: challenge-response protocol bypass during agent registration (CVE-2023-38201)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5080" id="RHSA-2023:5080" type="rhsa" title="RHSA-2023:5080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38200" id="CVE-2023-38200" type="cve" title="CVE-2023-38200"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38201" id="CVE-2023-38201" type="cve" title="CVE-2023-38201"/>
      <reference href="https://bugzilla.redhat.com/2222692" id="2222692" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222693" id="2222693" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5080.html" id="ALSA-2023:5080" type="self" title="ALSA-2023:5080"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="keylime" version="6.5.2" release="6.el9_2.alma.1" epoch="0" arch="s390x" src="keylime-6.5.2-6.el9_2.alma.1.src.rpm">
          <filename>keylime-6.5.2-6.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">056c81ac24e863e064bab111e4f0e66c60e416570179d301aeb5687cc684e93b</sum>
        </package>
        <package name="keylime-registrar" version="6.5.2" release="6.el9_2.alma.1" epoch="0" arch="s390x" src="keylime-6.5.2-6.el9_2.alma.1.src.rpm">
          <filename>keylime-registrar-6.5.2-6.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">0bd413d16ed62ed37a5099c9680f28f108f19b9161bdd37da47f95816b21779b</sum>
        </package>
        <package name="python3-keylime" version="6.5.2" release="6.el9_2.alma.1" epoch="0" arch="s390x" src="keylime-6.5.2-6.el9_2.alma.1.src.rpm">
          <filename>python3-keylime-6.5.2-6.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">39317cab012bb0296a117d0e21b838646fda45118a9f6e2895d2ba1a6af1399d</sum>
        </package>
        <package name="keylime-verifier" version="6.5.2" release="6.el9_2.alma.1" epoch="0" arch="s390x" src="keylime-6.5.2-6.el9_2.alma.1.src.rpm">
          <filename>keylime-verifier-6.5.2-6.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">4dd03e7f0c50f1fde23e92f3c6483db4adf002f98a0e057a7b03446bb69c71f2</sum>
        </package>
        <package name="keylime-selinux" version="6.5.2" release="6.el9_2.alma.1" epoch="0" arch="noarch" src="keylime-6.5.2-6.el9_2.alma.1.src.rpm">
          <filename>keylime-selinux-6.5.2-6.el9_2.alma.1.noarch.rpm</filename>
          <sum type="sha256">7d2cd2926a2a1055a094e35ace1481c09033033a86e78e656745ce16d58e4d61</sum>
        </package>
        <package name="keylime-tenant" version="6.5.2" release="6.el9_2.alma.1" epoch="0" arch="s390x" src="keylime-6.5.2-6.el9_2.alma.1.src.rpm">
          <filename>keylime-tenant-6.5.2-6.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">d4278f4e73efbf891c1a0f822c77f5676d7c7ea287ce7cb7256f63efd454b37a</sum>
        </package>
        <package name="keylime-base" version="6.5.2" release="6.el9_2.alma.1" epoch="0" arch="s390x" src="keylime-6.5.2-6.el9_2.alma.1.src.rpm">
          <filename>keylime-base-6.5.2-6.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">e2d1dc3ad936b6b13a1e53bcdd2d861ce41f7cfd59c3146489bb01357a3dfb1a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5081</id>
    <title>Moderate: librsvg2 security update</title>
    <issued date="2023-09-12 00:00:00"/>
    <updated date="2023-09-14 09:52:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>librsvg2 security update</summary>
    <description>The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library.

Security Fix(es):

* librsvg: Arbitrary file read when xinclude href has special characters (CVE-2023-38633)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5081" id="RHSA-2023:5081" type="rhsa" title="RHSA-2023:5081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38633" id="CVE-2023-38633" type="cve" title="CVE-2023-38633"/>
      <reference href="https://bugzilla.redhat.com/2224945" id="2224945" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5081.html" id="ALSA-2023:5081" type="self" title="ALSA-2023:5081"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="librsvg2-tools" version="2.50.7" release="1.el9_2.1" epoch="0" arch="s390x" src="librsvg2-2.50.7-1.el9_2.1.src.rpm">
          <filename>librsvg2-tools-2.50.7-1.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">2925868ecb50f3b8e006c2494a3ace2894f368f29a6919cf8e021605f4b3cb67</sum>
        </package>
        <package name="librsvg2-devel" version="2.50.7" release="1.el9_2.1" epoch="0" arch="s390x" src="librsvg2-2.50.7-1.el9_2.1.src.rpm">
          <filename>librsvg2-devel-2.50.7-1.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">d0a08089bd4f5ac9ca44eb421d02c1d794ec62b390c2dcd4e6d16f9e4a68c526</sum>
        </package>
        <package name="librsvg2" version="2.50.7" release="1.el9_2.1" epoch="0" arch="s390x" src="librsvg2-2.50.7-1.el9_2.1.src.rpm">
          <filename>librsvg2-2.50.7-1.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">ee774248faaa7ccea2a86756ff3aa5f0989d721960bae2551008134d517f0092</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5094</id>
    <title>Important: qemu-kvm security and bug fix update</title>
    <issued date="2023-09-12 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>qemu-kvm security and bug fix update</summary>
    <description>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

* QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service (CVE-2023-3354)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* [qemu-kvm] rhel guest failed boot with multi disks on error Failed to start udev Wait for Complete Device Initialization (BZ#2211923)
* [almalinux9.2] hotplug/hotunplug mlx vdpa device to the occupied addr port, then qemu core dump occurs after shutdown guest (BZ#2227721)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5094" id="RHSA-2023:5094" type="rhsa" title="RHSA-2023:5094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3354" id="CVE-2023-3354" type="cve" title="CVE-2023-3354"/>
      <reference href="https://bugzilla.redhat.com/2216478" id="2216478" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5094.html" id="ALSA-2023:5094" type="self" title="ALSA-2023:5094"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="qemu-kvm-tools" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-kvm-tools-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">05a18320e25de3bb82e4db2159300f977861c5919ad77f1b6ab5f852b27812cd</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-kvm-block-curl-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">0af0ecaf7276928ee582d0068be5722d4ad34d0c0aac9a0133cf1f899059a595</sum>
        </package>
        <package name="qemu-kvm-core" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-kvm-core-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">3b48a01c09df8bda7956170a7373c94f5ee9db881bc761723c05d7a99366fcf7</sum>
        </package>
        <package name="qemu-guest-agent" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-guest-agent-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">49e8ee8689b03475cd8a15321bd267695e6911c33a6c014d61e7926575a93e03</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-kvm-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">58ef41c61a76c0ed52236ff2890a4d710cdbff8522786d6491aa6ac585b259aa</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-kvm-block-rbd-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">5d73e80f61b994a2573acb3200832034307a5115ef470b1c0e9574f5b4c577a9</sum>
        </package>
        <package name="qemu-pr-helper" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-pr-helper-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">7911c8d0ad2510590797f9dd8ac8555ffb45356fc3cfff0d2dfa6189f9c17d09</sum>
        </package>
        <package name="qemu-kvm-audio-pa" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-kvm-audio-pa-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">84b3294af977ba13d6772de33ffc0be02ca668740e3f5cbe73f7b5b04bf65e11</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">8bd31e018b8c478839d5e95a73da031e425898ebaea93f42a1de680223a7d4be</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu-ccw" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-ccw-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">93c607b3b2181bce83b9038ca5e734545950334013411462a691891c2f548f65</sum>
        </package>
        <package name="qemu-kvm-docs" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-kvm-docs-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">c01ba4883257e2933b4577a65f26741dd6f8e2d467987e0b5e06b5708d4b4367</sum>
        </package>
        <package name="qemu-kvm-common" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-kvm-common-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">c3e69d13ff5692ea80ef9aab3b9b56c912755e3ce172b118693f67ef19987ca2</sum>
        </package>
        <package name="qemu-kvm-device-usb-host" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-kvm-device-usb-host-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">d061d3b7a79b382ce7dc1aefb8581f4900f27ad35437153fadb4bea6d25dd259</sum>
        </package>
        <package name="qemu-img" version="7.2.0" release="14.el9_2.5.alma.1" epoch="17" arch="s390x" src="qemu-kvm-7.2.0-14.el9_2.5.alma.1.src.rpm">
          <filename>qemu-img-7.2.0-14.el9_2.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">e9580db22907f76721e0c39f5b11c0af1323669881cbaa7abbb4cf52aa06f3d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5143</id>
    <title>Moderate: .NET 6.0 security update</title>
    <issued date="2023-09-13 00:00:00"/>
    <updated date="2023-09-14 10:12:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.122 and .NET Runtime 6.0.22.

Security Fix(es):

* dotnet:  Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5143" id="RHSA-2023:5143" type="rhsa" title="RHSA-2023:5143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5143.html" id="ALSA-2023:5143" type="self" title="ALSA-2023:5143"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="aspnetcore-runtime-6.0" version="6.0.22" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el9_2.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.22-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">22186ee30f38a602be8f5303b99ba060ecb93182eea176f599102b06126eff5f</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.22" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el9_2.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.22-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">48a6c802308596b3deaebd2b9e41085287c04e57b3ffb7c0badd3b7a7f863263</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.122" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el9_2.src.rpm">
          <filename>dotnet-templates-6.0-6.0.122-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">90fc195c56082c4bef1e28b61ba6467cdb5fa5fbc813ea8fe254a55f648e7f99</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.22" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el9_2.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.22-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">bcdd6dce7486a28d1030e9ed2ef6bbbea69d978a92ab410e468044959e4df62a</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.22" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el9_2.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.22-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">d649df27f35dbdf204f04e8b040ff8c8e6abc752138f63cc8b65d758d98fb0d7</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.22" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el9_2.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.22-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">f4deae044a57ea1e19054efa0188df803eadaaa62cefccc04f0cde04ef8fb9b1</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.22" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el9_2.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.22-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">f9fa51d3526d0f235e2ccb8c4efac2b97746013fb7f24eea989f9e7f02e8f942</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.122" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.122-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">fda6737b4c23c907b89b64a454dddf8e302ff5a2e41a343c95508ca2244bed30</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5146</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2023-09-13 00:00:00"/>
    <updated date="2023-09-14 10:35:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.111 and .NET Runtime 7.0.11.

Security Fix(es):

* dotnet:  Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5146" id="RHSA-2023:5146" type="rhsa" title="RHSA-2023:5146"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5146.html" id="ALSA-2023:5146" type="self" title="ALSA-2023:5146"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="dotnet-templates-7.0" version="7.0.111" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el9_2.src.rpm">
          <filename>dotnet-templates-7.0-7.0.111-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">0055517ede0001dff0cb2c3e3dccf5a302c9dfe271f79cf988271fc628e36440</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.11" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el9_2.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">0a0890900952532537e58a2fa1c6903ecf1018924bd851f90e4907f19f141039</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.11" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el9_2.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">2cd04684d3ea8e298311bbad02a398956dc599aaaebbcea72aa0c77aa66c7c43</sum>
        </package>
        <package name="dotnet-host" version="7.0.11" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el9_2.src.rpm">
          <filename>dotnet-host-7.0.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7203f47824458d7328a7c87bf49bb03d499ca6ead95af184ef73c2fc70a0a1cd</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.11" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el9_2.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7a00332e5730da4c63a007ed06c6f9e1f04f981dac651f30654ecc3474d6bb1e</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="7.0.111" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el9_2.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.111-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7f8ee78abc354adc46ee480910be787326e7ad519296fe662c66f052945c1cd9</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.11" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el9_2.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">aa2f4d7570a22d64f130d55bbe897cbd0b5895bbb6af0f87fd8bc99645a4fde0</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.111" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.111-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">b9b92fb36bb71f964153bfe7e66cd85810f781e2340af4c230e85bba27009c05</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.11" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el9_2.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">bf258f14b12e70309c32e4d5429b7e3d51866d76db117d1cf269f18ea49aa9b1</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.11" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el9_2.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">d7e48ec7936fabbf352bde72c5952622e34f320828488b158ceb662ffc23d4d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5194</id>
    <title>Important: frr security update</title>
    <issued date="2023-09-18 00:00:00"/>
    <updated date="2023-09-20 11:51:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>frr security update</summary>
    <description>FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. 

Security Fix(es):

* frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router (CVE-2023-38802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5194" id="RHSA-2023:5194" type="rhsa" title="RHSA-2023:5194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38802" id="CVE-2023-38802" type="cve" title="CVE-2023-38802"/>
      <reference href="https://bugzilla.redhat.com/2230983" id="2230983" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5194.html" id="ALSA-2023:5194" type="self" title="ALSA-2023:5194"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="frr-selinux" version="8.3.1" release="5.el9_2.2.alma" epoch="0" arch="noarch" src="frr-8.3.1-5.el9_2.2.alma.src.rpm">
          <filename>frr-selinux-8.3.1-5.el9_2.2.alma.noarch.rpm</filename>
          <sum type="sha256">9f2cdde8e80c69a0ccfaf75e0a5547962330d34480d455d467beb0e0ddd801b8</sum>
        </package>
        <package name="frr" version="8.3.1" release="5.el9_2.2.alma" epoch="0" arch="s390x" src="frr-8.3.1-5.el9_2.2.alma.src.rpm">
          <filename>frr-8.3.1-5.el9_2.2.alma.s390x.rpm</filename>
          <sum type="sha256">fc10a4d7e58e41b008bc770ce16dc81a2f83bdcf35d795e9a74bdd7abe96fcec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5200</id>
    <title>Important: firefox security update</title>
    <issued date="2023-09-18 00:00:00"/>
    <updated date="2023-09-22 08:50:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.15.1 ESR.

Security Fix(es):

* libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5200" id="RHSA-2023:5200" type="rhsa" title="RHSA-2023:5200"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4863" id="CVE-2023-4863" type="cve" title="CVE-2023-4863"/>
      <reference href="https://bugzilla.redhat.com/2238431" id="2238431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5200.html" id="ALSA-2023:5200" type="self" title="ALSA-2023:5200"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="firefox" version="102.15.1" release="1.el9_2.alma" epoch="0" arch="s390x" src="firefox-102.15.1-1.el9_2.alma.src.rpm">
          <filename>firefox-102.15.1-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">9b0be2452910ebd12ae19f9598642d68cafb018540cb315f7076c83f5dbf1e38</sum>
        </package>
        <package name="firefox-x11" version="102.15.1" release="1.el9_2.alma" epoch="0" arch="s390x" src="firefox-102.15.1-1.el9_2.alma.src.rpm">
          <filename>firefox-x11-102.15.1-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">ee3be56a5ccca8abd0863911b9962c28d49e501b441b333ca054c05f7cd2fcf9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5214</id>
    <title>Important: libwebp security update</title>
    <issued date="2023-09-19 00:00:00"/>
    <updated date="2023-09-20 11:58:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libwebp security update</summary>
    <description>The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

* libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5214" id="RHSA-2023:5214" type="rhsa" title="RHSA-2023:5214"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4863" id="CVE-2023-4863" type="cve" title="CVE-2023-4863"/>
      <reference href="https://bugzilla.redhat.com/2238431" id="2238431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5214.html" id="ALSA-2023:5214" type="self" title="ALSA-2023:5214"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libwebp" version="1.2.0" release="7.el9_2" epoch="0" arch="s390x" src="libwebp-1.2.0-7.el9_2.src.rpm">
          <filename>libwebp-1.2.0-7.el9_2.s390x.rpm</filename>
          <sum type="sha256">1dab22581c0e263a0f9d32a4b5c5bb2937bf606076797251c90d6ce257a1dd92</sum>
        </package>
        <package name="libwebp-devel" version="1.2.0" release="7.el9_2" epoch="0" arch="s390x" src="libwebp-1.2.0-7.el9_2.src.rpm">
          <filename>libwebp-devel-1.2.0-7.el9_2.s390x.rpm</filename>
          <sum type="sha256">6b1ae202e9d9d4fe62067086616825a0d1524c9a0841280ad429cccc9c589e83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5224</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-09-19 00:00:00"/>
    <updated date="2023-09-22 08:36:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.15.1.

Security Fix(es):

* libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5224" id="RHSA-2023:5224" type="rhsa" title="RHSA-2023:5224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4863" id="CVE-2023-4863" type="cve" title="CVE-2023-4863"/>
      <reference href="https://bugzilla.redhat.com/2238431" id="2238431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5224.html" id="ALSA-2023:5224" type="self" title="ALSA-2023:5224"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="thunderbird" version="102.15.1" release="1.el9_2.alma" epoch="0" arch="s390x" src="thunderbird-102.15.1-1.el9_2.alma.src.rpm">
          <filename>thunderbird-102.15.1-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">1474571d3a295d2b1aea6a2ae71dcace26a0e3c1151c30b1719577c5f441236c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5363</id>
    <title>Important: nodejs:18 security, bug fix, and enhancement update</title>
    <issued date="2023-09-26 00:00:00"/>
    <updated date="2023-09-27 16:44:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:18 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (18). (BZ#2223313, BZ#2234404)

Security Fix(es):

* nodejs: Permissions policies can be bypassed via Module._load (CVE-2023-32002)
* nodejs-semver: Regular expression denial of service (CVE-2022-25883)
* nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire() (CVE-2023-32006)
* nodejs: Permissions policies can be bypassed via process.binding (CVE-2023-32559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5363" id="RHSA-2023:5363" type="rhsa" title="RHSA-2023:5363"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25883" id="CVE-2022-25883" type="cve" title="CVE-2022-25883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32002" id="CVE-2023-32002" type="cve" title="CVE-2023-32002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32006" id="CVE-2023-32006" type="cve" title="CVE-2023-32006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32559" id="CVE-2023-32559" type="cve" title="CVE-2023-32559"/>
      <reference href="https://bugzilla.redhat.com/2216475" id="2216475" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230948" id="2230948" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230955" id="2230955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230956" id="2230956" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5363.html" id="ALSA-2023:5363" type="self" title="ALSA-2023:5363"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <module name="nodejs" stream="18" version="9020020230927094557" context="8cf767d6" arch="s390x"/>
        <package name="nodejs" version="18.17.1" release="1.module_el9.2.0+36+853e48f5" epoch="1" arch="s390x" src="nodejs-18.17.1-1.module_el9.2.0+36+853e48f5.src.rpm">
          <filename>nodejs-18.17.1-1.module_el9.2.0+36+853e48f5.s390x.rpm</filename>
          <sum type="sha256">03f7adff15426b9b50924d8a60298564c3bc215f47f4ceae64d0f75977ac8e0a</sum>
        </package>
        <package name="npm" version="9.6.7" release="1.18.17.1.1.module_el9.2.0+36+853e48f5" epoch="1" arch="s390x" src="nodejs-18.17.1-1.module_el9.2.0+36+853e48f5.src.rpm">
          <filename>npm-9.6.7-1.18.17.1.1.module_el9.2.0+36+853e48f5.s390x.rpm</filename>
          <sum type="sha256">28779f040572af53532f541d19ea1bc6f9699fb8559f3a1f1273d7a644104857</sum>
        </package>
        <package name="nodejs-devel" version="18.17.1" release="1.module_el9.2.0+36+853e48f5" epoch="1" arch="s390x" src="nodejs-18.17.1-1.module_el9.2.0+36+853e48f5.src.rpm">
          <filename>nodejs-devel-18.17.1-1.module_el9.2.0+36+853e48f5.s390x.rpm</filename>
          <sum type="sha256">3c2944d7c2f496cb6711a39085df933b29db8b5524a9bca1186a29bb5384175d</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.2.0+36+853e48f5" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm</filename>
          <sum type="sha256">6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.17.1" release="1.module_el9.2.0+36+853e48f5" epoch="1" arch="s390x" src="nodejs-18.17.1-1.module_el9.2.0+36+853e48f5.src.rpm">
          <filename>nodejs-full-i18n-18.17.1-1.module_el9.2.0+36+853e48f5.s390x.rpm</filename>
          <sum type="sha256">a27567fd511cfb83e5ab4adab666f5b2abfe38132ed93fcf071ae6034bfa4b69</sum>
        </package>
        <package name="nodejs-docs" version="18.17.1" release="1.module_el9.2.0+36+853e48f5" epoch="1" arch="noarch" src="nodejs-18.17.1-1.module_el9.2.0+36+853e48f5.src.rpm">
          <filename>nodejs-docs-18.17.1-1.module_el9.2.0+36+853e48f5.noarch.rpm</filename>
          <sum type="sha256">c88feff14205e859cd2c765c6acb71f2b608773fddc3b6ebdb1247243500c6c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5434</id>
    <title>Important: firefox security update</title>
    <issued date="2023-10-04 00:00:00"/>
    <updated date="2023-10-06 13:33:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.3.1 ESR.

Security Fix(es):

* firefox: use-after-free in workers (CVE-2023-3600)
* Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169)
* Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171)
* Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (CVE-2023-5176)
* libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5434" id="RHSA-2023:5434" type="rhsa" title="RHSA-2023:5434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3600" id="CVE-2023-3600" type="cve" title="CVE-2023-3600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5169" id="CVE-2023-5169" type="cve" title="CVE-2023-5169"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5171" id="CVE-2023-5171" type="cve" title="CVE-2023-5171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5176" id="CVE-2023-5176" type="cve" title="CVE-2023-5176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5217" id="CVE-2023-5217" type="cve" title="CVE-2023-5217"/>
      <reference href="https://bugzilla.redhat.com/2222652" id="2222652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240893" id="2240893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240894" id="2240894" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240896" id="2240896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241191" id="2241191" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5434.html" id="ALSA-2023:5434" type="self" title="ALSA-2023:5434"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="firefox" version="115.3.1" release="1.el9_2.alma.1" epoch="0" arch="s390x" src="firefox-115.3.1-1.el9_2.alma.1.src.rpm">
          <filename>firefox-115.3.1-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">37271f06ed4d98ee29a06f6f38c6891fb6681890785bd1b6041fa6954d4969f5</sum>
        </package>
        <package name="firefox-x11" version="115.3.1" release="1.el9_2.alma.1" epoch="0" arch="s390x" src="firefox-115.3.1-1.el9_2.alma.1.src.rpm">
          <filename>firefox-x11-115.3.1-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">b5779794122a4d2caae12ca2dc64933af14fa926322d368fd11f17bd129b8db1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5435</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-10-04 00:00:00"/>
    <updated date="2023-10-06 13:57:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.3.1.

Security Fix(es):

* firefox: use-after-free in workers (CVE-2023-3600)
* Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169)
* Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171)
* Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (CVE-2023-5176)
* libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5435" id="RHSA-2023:5435" type="rhsa" title="RHSA-2023:5435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3600" id="CVE-2023-3600" type="cve" title="CVE-2023-3600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5169" id="CVE-2023-5169" type="cve" title="CVE-2023-5169"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5171" id="CVE-2023-5171" type="cve" title="CVE-2023-5171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5176" id="CVE-2023-5176" type="cve" title="CVE-2023-5176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5217" id="CVE-2023-5217" type="cve" title="CVE-2023-5217"/>
      <reference href="https://bugzilla.redhat.com/2222652" id="2222652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240893" id="2240893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240894" id="2240894" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240896" id="2240896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241191" id="2241191" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5435.html" id="ALSA-2023:5435" type="self" title="ALSA-2023:5435"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="thunderbird" version="115.3.1" release="1.el9_2.alma" epoch="0" arch="s390x" src="thunderbird-115.3.1-1.el9_2.alma.src.rpm">
          <filename>thunderbird-115.3.1-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">5184ae1fccf3ede845b79544f995743b1011e287ebd2aa9892ab52690870ecd1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5453</id>
    <title>Important: glibc security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 10:29:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911)
* glibc: Stack read overflow in getaddrinfo in no-aaaa mode (CVE-2023-4527)
* glibc: potential use-after-free in getaddrinfo() (CVE-2023-4806)
* glibc: potential use-after-free in gaih_inet() (CVE-2023-4813)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5453" id="RHSA-2023:5453" type="rhsa" title="RHSA-2023:5453"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4527" id="CVE-2023-4527" type="cve" title="CVE-2023-4527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4806" id="CVE-2023-4806" type="cve" title="CVE-2023-4806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4813" id="CVE-2023-4813" type="cve" title="CVE-2023-4813"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4911" id="CVE-2023-4911" type="cve" title="CVE-2023-4911"/>
      <reference href="https://bugzilla.redhat.com/2234712" id="2234712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237782" id="2237782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237798" id="2237798" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238352" id="2238352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5453.html" id="ALSA-2023:5453" type="self" title="ALSA-2023:5453"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="glibc-utils" version="2.34" release="60.el9_2.7" epoch="0" arch="s390x" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>glibc-utils-2.34-60.el9_2.7.s390x.rpm</filename>
          <sum type="sha256">0eaee6a25bc275070b6c8f243ffebdee5c887ac6f03ae7ff1593e1c06172cfd1</sum>
        </package>
        <package name="glibc-headers" version="2.34" release="60.el9_2.7" epoch="0" arch="s390x" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>glibc-headers-2.34-60.el9_2.7.s390x.rpm</filename>
          <sum type="sha256">406265704bc7a92ae1a6301cf16eebc7522587b0b9595f92d6603e1297ec7ea6</sum>
        </package>
        <package name="glibc-devel" version="2.34" release="60.el9_2.7" epoch="0" arch="s390x" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>glibc-devel-2.34-60.el9_2.7.s390x.rpm</filename>
          <sum type="sha256">4b2ae6abccac559c8153a0ae7886ce52ec2552d08e054eae39f2db167e72384a</sum>
        </package>
        <package name="glibc-doc" version="2.34" release="60.el9_2.7" epoch="0" arch="noarch" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>glibc-doc-2.34-60.el9_2.7.noarch.rpm</filename>
          <sum type="sha256">b815dc8db3dc8d6e123d6718685d319dde9832dbad92f00d6f6b5d24f161bf18</sum>
        </package>
        <package name="glibc-locale-source" version="2.34" release="60.el9_2.7" epoch="0" arch="s390x" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>glibc-locale-source-2.34-60.el9_2.7.s390x.rpm</filename>
          <sum type="sha256">bc62766bf8ceaafb57050fdec0e0f08c031a79d8908b621a1f6bffd5ae2e270f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5456</id>
    <title>Important: python3.11 security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 10:55:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5456" id="RHSA-2023:5456" type="rhsa" title="RHSA-2023:5456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5456.html" id="ALSA-2023:5456" type="self" title="ALSA-2023:5456"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="python3.11" version="3.11.2" release="2.el9_2.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.2.src.rpm">
          <filename>python3.11-3.11.2-2.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">1632f0ba321954d79a4cc091693449f28546b9ca98ec6990bc9c28672f49389f</sum>
        </package>
        <package name="python3.11-devel" version="3.11.2" release="2.el9_2.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.2.src.rpm">
          <filename>python3.11-devel-3.11.2-2.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">1dbd3d5bca8ec9ae0752b9b4dae42fc5a892e391222d4daf4a0b50511e90a9b3</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.2" release="2.el9_2.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.2.src.rpm">
          <filename>python3.11-tkinter-3.11.2-2.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">1fc1eab57a3d87753f11abfbee5854ec4cab32c9fb42faa4a951ac8bc82da517</sum>
        </package>
        <package name="python3.11-libs" version="3.11.2" release="2.el9_2.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.2.src.rpm">
          <filename>python3.11-libs-3.11.2-2.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">dafb424bb6e7410dc6d6dbb72fce6cc4962b21ec5d1c17b0fdf83ec07da9710a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5459</id>
    <title>Important: ghostscript security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 11:13:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: vulnerable to OS command injection due to mishandles permission validation for pipe devices (CVE-2023-36664)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5459" id="RHSA-2023:5459" type="rhsa" title="RHSA-2023:5459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36664" id="CVE-2023-36664" type="cve" title="CVE-2023-36664"/>
      <reference href="https://bugzilla.redhat.com/2217798" id="2217798" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5459.html" id="ALSA-2023:5459" type="self" title="ALSA-2023:5459"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="ghostscript-tools-fonts" version="9.54.0" release="10.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-10.el9_2.src.rpm">
          <filename>ghostscript-tools-fonts-9.54.0-10.el9_2.s390x.rpm</filename>
          <sum type="sha256">242005aed4b8cd721526c3f87787a8bbea852211acc1d50d4e1e340ddf8ed8a4</sum>
        </package>
        <package name="libgs" version="9.54.0" release="10.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-10.el9_2.src.rpm">
          <filename>libgs-9.54.0-10.el9_2.s390x.rpm</filename>
          <sum type="sha256">2ec4d0e13fce79d1a7ff1d276a04f042c33db107275bd515251d74059d7d4544</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.54.0" release="10.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-10.el9_2.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.54.0-10.el9_2.s390x.rpm</filename>
          <sum type="sha256">35b045bf3b2790016ef0cee02d12faa7b068948df1c50a31ffa23dd373b124d3</sum>
        </package>
        <package name="ghostscript-x11" version="9.54.0" release="10.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-10.el9_2.src.rpm">
          <filename>ghostscript-x11-9.54.0-10.el9_2.s390x.rpm</filename>
          <sum type="sha256">a7013045be057bcaeb6784e1661312173fd1b5de1a5a6f284bdb551224f3a1cb</sum>
        </package>
        <package name="ghostscript" version="9.54.0" release="10.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-10.el9_2.src.rpm">
          <filename>ghostscript-9.54.0-10.el9_2.s390x.rpm</filename>
          <sum type="sha256">a8eba8426f4feff3777e152906fa218f902750423489c75e2672cc5467514110</sum>
        </package>
        <package name="ghostscript-doc" version="9.54.0" release="10.el9_2" epoch="0" arch="noarch" src="ghostscript-9.54.0-10.el9_2.src.rpm">
          <filename>ghostscript-doc-9.54.0-10.el9_2.noarch.rpm</filename>
          <sum type="sha256">a9fbde0874ce6eceb343bd037c297ee445d98fc1185fedda26a3cc72fe9f2450</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.54.0" release="10.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-10.el9_2.src.rpm">
          <filename>ghostscript-tools-printing-9.54.0-10.el9_2.s390x.rpm</filename>
          <sum type="sha256">c31cedb7e5d4035e0330726124df7de5d8fa33ce3e7747f23bbc8a405138358c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5462</id>
    <title>Important: python3.9 security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 11:34:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5462" id="RHSA-2023:5462" type="rhsa" title="RHSA-2023:5462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5462.html" id="ALSA-2023:5462" type="self" title="ALSA-2023:5462"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="python-unversioned-command" version="3.9.16" release="1.el9_2.2" epoch="0" arch="noarch" src="python3.9-3.9.16-1.el9_2.2.src.rpm">
          <filename>python-unversioned-command-3.9.16-1.el9_2.2.noarch.rpm</filename>
          <sum type="sha256">005b770b08188fbf2ab1fe356f947cca65f6aa836ecc6ec48769203034898af9</sum>
        </package>
        <package name="python3-devel" version="3.9.16" release="1.el9_2.2" epoch="0" arch="s390x" src="python3.9-3.9.16-1.el9_2.2.src.rpm">
          <filename>python3-devel-3.9.16-1.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">2d835810a5c2b4728bab367acd86e71dd334c90df45d8d2735dd4f799f7501e1</sum>
        </package>
        <package name="python3-tkinter" version="3.9.16" release="1.el9_2.2" epoch="0" arch="s390x" src="python3.9-3.9.16-1.el9_2.2.src.rpm">
          <filename>python3-tkinter-3.9.16-1.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">8e6dbf5b5dcfe303b7e140c70029a21d2b008b26e70af970dcf664fb6d1fb80c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5532</id>
    <title>Important: nodejs security and bug fix update</title>
    <issued date="2023-10-09 00:00:00"/>
    <updated date="2023-10-09 19:50:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs security and bug fix update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* nodejs: Permissions policies can be bypassed via Module._load (CVE-2023-32002)
* nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire() (CVE-2023-32006)
* nodejs: Permissions policies can be bypassed via process.binding (CVE-2023-32559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* nodejs: Rebase to the latest Nodejs 16 release [almalinux-9] (BZ#2236434)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5532" id="RHSA-2023:5532" type="rhsa" title="RHSA-2023:5532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32002" id="CVE-2023-32002" type="cve" title="CVE-2023-32002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32006" id="CVE-2023-32006" type="cve" title="CVE-2023-32006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32559" id="CVE-2023-32559" type="cve" title="CVE-2023-32559"/>
      <reference href="https://bugzilla.redhat.com/2230948" id="2230948" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230955" id="2230955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230956" id="2230956" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5532.html" id="ALSA-2023:5532" type="self" title="ALSA-2023:5532"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="npm" version="8.19.4" release="1.16.20.2.1.el9_2" epoch="1" arch="s390x" src="nodejs-16.20.2-1.el9_2.src.rpm">
          <filename>npm-8.19.4-1.16.20.2.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">5eb90431bbcbcf692e364ced5a89630b6ba0f9220327617940edd83123e185e8</sum>
        </package>
        <package name="nodejs" version="16.20.2" release="1.el9_2" epoch="1" arch="s390x" src="nodejs-16.20.2-1.el9_2.src.rpm">
          <filename>nodejs-16.20.2-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">b03a01d2894dae0461455a6c55987db0969945b79df9efa3f7db9bf3148240ca</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.20.2" release="1.el9_2" epoch="1" arch="s390x" src="nodejs-16.20.2-1.el9_2.src.rpm">
          <filename>nodejs-full-i18n-16.20.2-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">d82727198b52f71adadf8ab922223272d505951911ad27320b14e5abc1c1657b</sum>
        </package>
        <package name="nodejs-libs" version="16.20.2" release="1.el9_2" epoch="1" arch="s390x" src="nodejs-16.20.2-1.el9_2.src.rpm">
          <filename>nodejs-libs-16.20.2-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">d9465afd8debebcd5d40b03a37bdf4cdf13c4ab727b324c730aacca6d235a072</sum>
        </package>
        <package name="nodejs-docs" version="16.20.2" release="1.el9_2" epoch="1" arch="noarch" src="nodejs-16.20.2-1.el9_2.src.rpm">
          <filename>nodejs-docs-16.20.2-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">e9b2779d80a707dc7add98c8b2e875b6ce047e4af60f689ad6b78da46cb089ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5539</id>
    <title>Important: libvpx security update</title>
    <issued date="2023-10-09 00:00:00"/>
    <updated date="2023-10-09 19:24:38"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)
* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5539" id="RHSA-2023:5539" type="rhsa" title="RHSA-2023:5539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44488" id="CVE-2023-44488" type="cve" title="CVE-2023-44488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5217" id="CVE-2023-5217" type="cve" title="CVE-2023-5217"/>
      <reference href="https://bugzilla.redhat.com/2241191" id="2241191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241806" id="2241806" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5539.html" id="ALSA-2023:5539" type="self" title="ALSA-2023:5539"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libvpx" version="1.9.0" release="7.el9_2.alma.1" epoch="0" arch="s390x" src="libvpx-1.9.0-7.el9_2.alma.1.src.rpm">
          <filename>libvpx-1.9.0-7.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">2e673b6423cbb24c2824ec5efeacee4b8cbb8d075dce7d6e8d9061ab154263bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5684</id>
    <title>Important: galera and mariadb security update</title>
    <issued date="2023-10-12 00:00:00"/>
    <updated date="2023-10-13 15:18:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>galera and mariadb security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: galera
(26.4.14), mariadb (10.5.22).

Security Fix(es):

* mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6 (CVE-2023-5157)
* mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc (CVE-2022-32081)
* mariadb: assertion failure at table-&gt;get_ref_count() == 0 in dict0dict.cc (CVE-2022-32082)
* mariadb: segmentation fault via the component sub_select (CVE-2022-32084)
* mariadb: server crash in st_select_lex_unit::exclude_level (CVE-2022-32089)
* mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091)
* mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791)
* mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5684" id="RHSA-2023:5684" type="rhsa" title="RHSA-2023:5684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32081" id="CVE-2022-32081" type="cve" title="CVE-2022-32081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32082" id="CVE-2022-32082" type="cve" title="CVE-2022-32082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32084" id="CVE-2022-32084" type="cve" title="CVE-2022-32084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32089" id="CVE-2022-32089" type="cve" title="CVE-2022-32089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32091" id="CVE-2022-32091" type="cve" title="CVE-2022-32091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38791" id="CVE-2022-38791" type="cve" title="CVE-2022-38791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47015" id="CVE-2022-47015" type="cve" title="CVE-2022-47015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5157" id="CVE-2023-5157" type="cve" title="CVE-2023-5157"/>
      <reference href="https://bugzilla.redhat.com/2106028" id="2106028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106030" id="2106030" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106034" id="2106034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106035" id="2106035" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106042" id="2106042" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130105" id="2130105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2163609" id="2163609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240246" id="2240246" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5684.html" id="ALSA-2023:5684" type="self" title="ALSA-2023:5684"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="mariadb-embedded" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-embedded-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">1facc532013c20ac4076e4cdd92dc9cc32a3541b6da5c8999f26e680a294cfff</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-gssapi-server-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">30a1c6bc50a971f1a9592a7de6f584a337444f9c8a54750e4b3658437e3ebd86</sum>
        </package>
        <package name="mariadb-server" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-server-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">5958157f98c7259c8d383a579efe53dc9c2e988af244d6675c44456265cee095</sum>
        </package>
        <package name="mariadb-server-utils" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-server-utils-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">718b6376eb0f5b4968f999152cbb0c39ae650f3969d8d34c47598f625d3a59ce</sum>
        </package>
        <package name="galera" version="26.4.14" release="1.el9_2.alma.1" epoch="0" arch="s390x" src="galera-26.4.14-1.el9_2.alma.1.src.rpm">
          <filename>galera-26.4.14-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">780e8d242c24f123991b5ae1d3772a3c1e17ed59a6cd167e890cd002fe50597e</sum>
        </package>
        <package name="mariadb-errmsg" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-errmsg-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">902d89549931026993e3248b675af2cb9633c37dd80b02660ee46ced8fc64fae</sum>
        </package>
        <package name="mariadb-pam" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-pam-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">b0d5f9710489e33383e300c536ba8c0a52bc31d3160c47be8d665c298fab6e2b</sum>
        </package>
        <package name="mariadb-common" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-common-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">d04c5520f2765b2da2a5d051ce9e7332218d0402200ff6c5a82b041bf72171fe</sum>
        </package>
        <package name="mariadb-backup" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-backup-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">d5fd5c84767e2c008894e6b128dd7938555c6d8e089ea1fec89c9cd9da3019e0</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-oqgraph-engine-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">d6ed7e33167d62423bffd10ecd14a538dee1983c927b4e0ba76158477743c460</sum>
        </package>
        <package name="mariadb-server-galera" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-server-galera-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">e7bf73476602b6fa3d37168c2bb15d870d9ddf7d495984c95d7f83bec5e91881</sum>
        </package>
        <package name="mariadb" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">f92f1551b4a8f430c61443834c3cd6e016e638bbe613268902027803180ae00d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5689</id>
    <title>Important: bind security update</title>
    <issued date="2023-10-12 00:00:00"/>
    <updated date="2023-10-13 14:58:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5689" id="RHSA-2023:5689" type="rhsa" title="RHSA-2023:5689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3341" id="CVE-2023-3341" type="cve" title="CVE-2023-3341"/>
      <reference href="https://bugzilla.redhat.com/2239621" id="2239621" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5689.html" id="ALSA-2023:5689" type="self" title="ALSA-2023:5689"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="bind" version="9.16.23" release="11.el9_2.2" epoch="32" arch="s390x" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>bind-9.16.23-11.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">2625628d520345b69dcb2028e5e97093b4ec8a9a177df06a56a8bb9f472ee651</sum>
        </package>
        <package name="bind-license" version="9.16.23" release="11.el9_2.2" epoch="32" arch="noarch" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>bind-license-9.16.23-11.el9_2.2.noarch.rpm</filename>
          <sum type="sha256">286a8760584b8db8241d9ca5eee6f08555ccc133659a4edf4c0976291ec10000</sum>
        </package>
        <package name="bind-dnssec-utils" version="9.16.23" release="11.el9_2.2" epoch="32" arch="s390x" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>bind-dnssec-utils-9.16.23-11.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">4a9827cf9c03f7d9131a3d918147eb0c3d045e4568f67a16f0ca764856ac1f5a</sum>
        </package>
        <package name="python3-bind" version="9.16.23" release="11.el9_2.2" epoch="32" arch="noarch" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>python3-bind-9.16.23-11.el9_2.2.noarch.rpm</filename>
          <sum type="sha256">68add8db9f08d920be81a334a49c98a4ad4475725c0cbed03414757ca6c70198</sum>
        </package>
        <package name="bind-dnssec-doc" version="9.16.23" release="11.el9_2.2" epoch="32" arch="noarch" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>bind-dnssec-doc-9.16.23-11.el9_2.2.noarch.rpm</filename>
          <sum type="sha256">6ccf0a2650f08758150be4498d10a6885e217045eeecdb6569f1d7225ab6beb1</sum>
        </package>
        <package name="bind-utils" version="9.16.23" release="11.el9_2.2" epoch="32" arch="s390x" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>bind-utils-9.16.23-11.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">7de874188c17da2b967c54de4f74a18047a2bfcb8b2a842fef8a1ea9e637b71c</sum>
        </package>
        <package name="bind-libs" version="9.16.23" release="11.el9_2.2" epoch="32" arch="s390x" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>bind-libs-9.16.23-11.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">c842621e3dd400d7379ea5947323e40b20383adcbd0de77384142cbacd2c8a9b</sum>
        </package>
        <package name="bind-chroot" version="9.16.23" release="11.el9_2.2" epoch="32" arch="s390x" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>bind-chroot-9.16.23-11.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">d961ca8469fd5b77951d5a34fbe6291677482ed2955eeb595356c3c8da7c9d14</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5708</id>
    <title>Important: dotnet6.0 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 07:29:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are  .NET 6.0 to SDK 6.0.123 and Runtime 6.0.23.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5708" id="RHSA-2023:5708" type="rhsa" title="RHSA-2023:5708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5708.html" id="ALSA-2023:5708" type="self" title="ALSA-2023:5708"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="dotnet-runtime-6.0" version="6.0.23" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el9_2.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.23-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">321a1986e2a6974e3525286aab466c90748fda745134e979bf899592c93e3cb6</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.123" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el9_2.src.rpm">
          <filename>dotnet-templates-6.0-6.0.123-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">39e53e7334e65e2d714c90b1887bab318a642418afda913e1e3a25a085e6b2e1</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.23" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el9_2.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.23-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">4c6d1acac1b6a2a570c17999d94a34351b135b1355e2dfef2385cc8df70d6b5c</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.23" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el9_2.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.23-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7ce52ba69c308d1f1513b9a2da1f0e9301a49bece02e5a2998cc5f8fcc59a944</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.23" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el9_2.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.23-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">94cab28b5a3f7910a0b8268cd696b2cf33c87bd052e3f05c30c46b57a65ae322</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.23" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el9_2.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.23-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">951dc9703107cea4c7af030502ebb01ad92c2da10a9845e19871d4b7898c79c4</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.123" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.123-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">be5b961a901c5b10f2a82aa8a26faac87176e48b31aa43d3900f23713eeda5a5</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.23" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el9_2.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.23-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">df173cad40bc779e351f0f8578eadaf0740f32a028eb9a9100fde3e08b637e1e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5711</id>
    <title>Moderate: nginx security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 07:12:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. 

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5711" id="RHSA-2023:5711" type="rhsa" title="RHSA-2023:5711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5711.html" id="ALSA-2023:5711" type="self" title="ALSA-2023:5711"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="nginx" version="1.20.1" release="14.el9_2.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-14.el9_2.1.alma.1.src.rpm">
          <filename>nginx-1.20.1-14.el9_2.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">160c5b5f6609da111597561a8753bdea1437af12af35334872de07ab65a860ff</sum>
        </package>
        <package name="nginx-mod-stream" version="1.20.1" release="14.el9_2.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-14.el9_2.1.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">168a2f091b0b21de7131ef3bd86ff994aecdd373fa14d32cfde9360540a473ef</sum>
        </package>
        <package name="nginx-all-modules" version="1.20.1" release="14.el9_2.1.alma.1" epoch="1" arch="noarch" src="nginx-1.20.1-14.el9_2.1.alma.1.src.rpm">
          <filename>nginx-all-modules-1.20.1-14.el9_2.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">224ccfde13a54c23ce3cbe0c073f8f26257baabf4776a292f519f69dbce4166b</sum>
        </package>
        <package name="nginx-mod-mail" version="1.20.1" release="14.el9_2.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-14.el9_2.1.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">26aa6a311d41f8b7526eaf0a3d9b2dd7991e599f202043e5bacc641f9c54cf70</sum>
        </package>
        <package name="nginx-filesystem" version="1.20.1" release="14.el9_2.1.alma.1" epoch="1" arch="noarch" src="nginx-1.20.1-14.el9_2.1.alma.1.src.rpm">
          <filename>nginx-filesystem-1.20.1-14.el9_2.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">6eaa0e536cd84cbdd37d9c8634d8cdf4c575e532e35d0331db02fed271820662</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.20.1" release="14.el9_2.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-14.el9_2.1.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">92f1c1f803b141eb6ad5f4be17df697df2b4668955993dbe3571073b19fdff0a</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.20.1" release="14.el9_2.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-14.el9_2.1.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">95e0c22879ca844a305a3b908cb1338e558967c9504c5afd64bf07ab4d42c215</sum>
        </package>
        <package name="nginx-core" version="1.20.1" release="14.el9_2.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-14.el9_2.1.alma.1.src.rpm">
          <filename>nginx-core-1.20.1-14.el9_2.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">e4c330d3436d8ea41b170928d6050ede927445b14eb5f827315c2fa53d4fab98</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.20.1" release="14.el9_2.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-14.el9_2.1.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">f877e75ee9f412650149234ae7f8989c14a6cbb5a11addd08f5a836f1f85a416</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5733</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 20:16:40"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433)
* OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (AlmaLinux-13593)
* The /usr/bin/jfr alternative is now owned by the java-1.8.0-openjdk package (AlmaLinux-13583)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5733" id="RHSA-2023:5733" type="rhsa" title="RHSA-2023:5733"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40433" id="CVE-2022-40433" type="cve" title="CVE-2022-40433"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22067" id="CVE-2023-22067" type="cve" title="CVE-2023-22067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2237709" id="2237709" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243637" id="2243637" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5733.html" id="ALSA-2023:5733" type="self" title="ALSA-2023:5733"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.392.b08-3.el9.s390x.rpm</filename>
          <sum type="sha256">1d6bd05a256c6edc39616591a3d54463bf2c214823e3ecc8e7e970bb3a19ef13</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.392.b08-3.el9.s390x.rpm</filename>
          <sum type="sha256">22c812d070b1227eceef1425ff91c19185ad03633c74d7181f6de5bfd986e110</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.392.b08-3.el9.s390x.rpm</filename>
          <sum type="sha256">253e873b9f698b74ee41f174e22072b9bcac9ffd902596e85998ce915ba8623e</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.392.b08-3.el9.s390x.rpm</filename>
          <sum type="sha256">641264c397e180de45e8ca3384a7677ebd290c7ca043c04e98c4e446ed772ad6</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.392.b08-3.el9.noarch.rpm</filename>
          <sum type="sha256">7b5b54be0f5c7a3fa0f7cc64e6644af44af3bbbb0aa67c20c7e66b854fb54d70</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.392.b08-3.el9.s390x.rpm</filename>
          <sum type="sha256">9a0c4ecf02d6626bbf25f9e3fb0db4be85ea81e762561c4c57c541a1ec6617a2</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.392.b08" release="3.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.392.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.392.b08-3.el9.noarch.rpm</filename>
          <sum type="sha256">d3353184281947d0544c3d05f8bd4d92cf07f53194a08ba90a42ca89c75fe534</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5738</id>
    <title>Important: go-toolset and golang security and bug fix update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 06:56:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset and golang security and bug fix update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

The golang packages provide the Go programming language compiler.

Security Fix(es):

* golang: net/http, x/net/http2: rapid stream resets can cause excessive work [CVE-2023-44487] (CVE-2023-39325)
* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
* golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Midstream dist-git patches (BZ#2223637)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5738" id="RHSA-2023:5738" type="rhsa" title="RHSA-2023:5738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29409" id="CVE-2023-29409" type="cve" title="CVE-2023-29409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39325" id="CVE-2023-39325" type="cve" title="CVE-2023-39325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2228743" id="2228743" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243296" id="2243296" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5738.html" id="ALSA-2023:5738" type="self" title="ALSA-2023:5738"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="golang-src" version="1.19.13" release="1.el9_2" epoch="0" arch="noarch" src="golang-1.19.13-1.el9_2.src.rpm">
          <filename>golang-src-1.19.13-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">1e00a0e6c32111d4eb15bf27ea45f0ee5448e7411a7cb6b96516f1c22c1146c3</sum>
        </package>
        <package name="golang-bin" version="1.19.13" release="1.el9_2" epoch="0" arch="s390x" src="golang-1.19.13-1.el9_2.src.rpm">
          <filename>golang-bin-1.19.13-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">488fd1b5af3685f6698fd7e017e366e2ba4a15f858249474486ed1c921f1926c</sum>
        </package>
        <package name="golang" version="1.19.13" release="1.el9_2" epoch="0" arch="s390x" src="golang-1.19.13-1.el9_2.src.rpm">
          <filename>golang-1.19.13-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">583bd2f6b7f975be40071eb3d965264f1c5f00f40216e189d6793d732a5fd710</sum>
        </package>
        <package name="go-toolset" version="1.19.13" release="1.el9_2" epoch="0" arch="s390x" src="go-toolset-1.19.13-1.el9_2.src.rpm">
          <filename>go-toolset-1.19.13-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">abd93448da88953318c0138b14f28b46be0f05f88894befbfb3c262046858a0f</sum>
        </package>
        <package name="golang-docs" version="1.19.13" release="1.el9_2" epoch="0" arch="noarch" src="golang-1.19.13-1.el9_2.src.rpm">
          <filename>golang-docs-1.19.13-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">b5aac5c2d4cf88d4e4317c72aa8c6d0668231a8fce484ad8baf75ee90e706b7a</sum>
        </package>
        <package name="golang-misc" version="1.19.13" release="1.el9_2" epoch="0" arch="noarch" src="golang-1.19.13-1.el9_2.src.rpm">
          <filename>golang-misc-1.19.13-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">f6dec5d72b4fe83f0c561cd7d019d7a3357c497a92f890d90bdbdbe227f57fc1</sum>
        </package>
        <package name="golang-tests" version="1.19.13" release="1.el9_2" epoch="0" arch="noarch" src="golang-1.19.13-1.el9_2.src.rpm">
          <filename>golang-tests-1.19.13-1.el9_2.noarch.rpm</filename>
          <sum type="sha256">f8fb3e03768edd80525b2ac8e65807ef49defae23da467d9d6341427e2e2dccd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5744</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 19:54:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 11.0.20 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 11.0.20.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237175)
* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 11.0.20 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 11.0.20.1, increases it to 16 MB.
* The serviceability agent would print an exception when encountering null addresses while producing thread dumps. These null values are now handled appropriately. (JDK-8243210)
* The /usr/bin/jfr alternative is now owned by the java-11-openjdk package (AlmaLinux-13532)
* The jcmd tool is now provided by the java-11-openjdk-headless package, rather than java-11-openjdk-devel, to make it more accessible (AlmaLinux-13536)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5744" id="RHSA-2023:5744" type="rhsa" title="RHSA-2023:5744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5744.html" id="ALSA-2023:5744" type="self" title="ALSA-2023:5744"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="java-11-openjdk-jmods" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">3b2e3b33eedf8435e750d7c774aa6a831e476de9b3c719b9725bd36a20208567</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-src-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">70449d633676e73c0d64694a9c1c193090f7c288ec7d116ab512382970398e40</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">7d61a228c415f66fd8a275cb799d1545351011f75940d646049d18bcfd04d253</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">8e116b0af1df95cc20b534560bc26914f1aec2c618f5a334a335b9e56b7bb754</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">b45d1e8c3f9b49b195df0e6c6b1e93b0e047c44f111846c722f05244e1746c53</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">bab9ec20a561282762d3fcdd9fba7bddfb39a643a783ec90d56cd664a4af991f</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">bfb415bcbb777f91cd42802cb6917c8a31b8bc065476da1e36ff6f468a10666c</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">c4b4ed3d705cc810f198f216720391a18777e9f5f89882e29ceef1bd9a1ee86b</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">de49f7c4e826691dfdbbfffc3456e573ef697ef338916cf30b6fce41c518eb9a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5749</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 10:14:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are  .NET 7.0 to SDK 7.0.112 and Runtime 7.0.12.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5749" id="RHSA-2023:5749" type="rhsa" title="RHSA-2023:5749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5749.html" id="ALSA-2023:5749" type="self" title="ALSA-2023:5749"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="dotnet-apphost-pack-7.0" version="7.0.12" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el9_2.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.12-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">37c86e09acd30f356570b1ec79041dd6846bad2732dba3104d0b37f41d138fae</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="7.0.112" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el9_2.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.112-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">4aad730e08822cfd009c2f89610d65b4c67413c62bbbfd42671a0343a99ce313</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.112" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el9_2.src.rpm">
          <filename>dotnet-templates-7.0-7.0.112-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">61f55e11508c79123826adcf1dc4a05c597bd158762cdbdeb7ef1fc44142bea8</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.12" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el9_2.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.12-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7be892e35cf6669d68afc69baf739021da8a4d054c10d389191f2be9e6b326e5</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.12" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el9_2.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.12-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">b105c728ffae206ee0f1c46d1e196e83bed17ee601608e397eb117cfb78f123f</sum>
        </package>
        <package name="dotnet-host" version="7.0.12" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el9_2.src.rpm">
          <filename>dotnet-host-7.0.12-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">b7b6b1e241bc8d118252bb104dae6b4c8249d271f5af1a3f64d13495093c4a27</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.12" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el9_2.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.12-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">cc07c283bd22ebef9302d28d4049447cf77a324d7a4d378377c71e1033e5b2a4</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.112" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.112-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">ce83d315f5fb736f8481a84b9d7f81ff2afe5601fa9659c57bc49f0243745efc</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.12" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el9_2.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.12-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">e17f9100e41eeff81bf2fe69239ead2495f9cb0747b72a216611e8c817e73a35</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.12" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el9_2.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.12-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">febbafd9ab68beaa3e6c06f6eb4470af4cd3c2290876fb318a5d45c8f8af4ecc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5753</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 19:28:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 17.0.8 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 17.0.9, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237185)
* The /usr/bin/jfr alternative is now owned by the java-17-openjdk package (AlmaLinux-13648)
* The jcmd tool is now provided by the java-17-openjdk-headless package, rather than java-17-openjdk-devel, to make it more accessible (AlmaLinux-13651)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5753" id="RHSA-2023:5753" type="rhsa" title="RHSA-2023:5753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22025" id="CVE-2023-22025" type="cve" title="CVE-2023-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243805" id="2243805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5753.html" id="ALSA-2023:5753" type="self" title="ALSA-2023:5753"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="java-17-openjdk-src" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-src-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">2b46e7fbf6767f5f8cd96c6e8e72331ff1353298f9ae12df40c09c1b151324a9</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">4901c71bfa73ee2f37b3c003e4008569c84ad39eb2a049eab9dbe11f8361a836</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">6972c327a0d57d7468c159415aca09dbaa6ce16914bb363ccb5e76b64645d0f0</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">8a33cb310d6535684c62e7964aa2c00526af523102993417d93fda2f154ce631</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">8ff68fb46bff1c6e83acb5f3ed86d78aeeab8b4e8b6c883ef032c93ce8a2c8db</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">a0ba341629f1cfb8e2580cb925e620fa60c98bcedc72241bbfdd329127c6a4e4</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">deb3e0556cf17b765d6749e74de7f84a228aabedaaffba9d4eda2d29d3174f32</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">e796ea5f7b4ab1a6af1d79336fbeae8e8da7f01ad025e843f54c21c8a1b86956</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">fbc6559a055a883802b574e45008bfbe0b151ef61c771944d260e6fe0af843e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5763</id>
    <title>Important: curl security update</title>
    <issued date="2023-10-17 00:00:00"/>
    <updated date="2023-10-17 14:51:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545)
* curl: cookie injection with none file (CVE-2023-38546)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5763" id="RHSA-2023:5763" type="rhsa" title="RHSA-2023:5763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38545" id="CVE-2023-38545" type="cve" title="CVE-2023-38545"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38546" id="CVE-2023-38546" type="cve" title="CVE-2023-38546"/>
      <reference href="https://bugzilla.redhat.com/2241933" id="2241933" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241938" id="2241938" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5763.html" id="ALSA-2023:5763" type="self" title="ALSA-2023:5763"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libcurl-devel" version="7.76.1" release="23.el9_2.4" epoch="0" arch="s390x" src="curl-7.76.1-23.el9_2.4.src.rpm">
          <filename>libcurl-devel-7.76.1-23.el9_2.4.s390x.rpm</filename>
          <sum type="sha256">5f432340245cf1a9e5209a9c777065af7bbea607d1d26198c7c43ba5f9ba7899</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5765</id>
    <title>Important: nodejs security update</title>
    <issued date="2023-10-17 00:00:00"/>
    <updated date="2023-10-17 15:18:51"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* nodejs: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

A AlmaLinux Security Bulletin which addresses further details about this flaw is available in the References section.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5765" id="RHSA-2023:5765" type="rhsa" title="RHSA-2023:5765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5765.html" id="ALSA-2023:5765" type="self" title="ALSA-2023:5765"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="nodejs-docs" version="16.20.2" release="3.el9_2" epoch="1" arch="noarch" src="nodejs-16.20.2-3.el9_2.src.rpm">
          <filename>nodejs-docs-16.20.2-3.el9_2.noarch.rpm</filename>
          <sum type="sha256">0f5a5069d621f91301233c0819939ce698d99f80cd018abe7bf1c67e8cc9b50e</sum>
        </package>
        <package name="npm" version="8.19.4" release="1.16.20.2.3.el9_2" epoch="1" arch="s390x" src="nodejs-16.20.2-3.el9_2.src.rpm">
          <filename>npm-8.19.4-1.16.20.2.3.el9_2.s390x.rpm</filename>
          <sum type="sha256">106b26528d38b01657a88c2e1f9cb5f371b9c247cf072a8739d70cb1faf77bb0</sum>
        </package>
        <package name="nodejs" version="16.20.2" release="3.el9_2" epoch="1" arch="s390x" src="nodejs-16.20.2-3.el9_2.src.rpm">
          <filename>nodejs-16.20.2-3.el9_2.s390x.rpm</filename>
          <sum type="sha256">1abb0413bda3a5bfc01448256632e00c9e64ef50635ef10c4af0b81a8e33c0f1</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.20.2" release="3.el9_2" epoch="1" arch="s390x" src="nodejs-16.20.2-3.el9_2.src.rpm">
          <filename>nodejs-full-i18n-16.20.2-3.el9_2.s390x.rpm</filename>
          <sum type="sha256">6ffbdb36543defc6168e38b65e0365d83457cb055fa9941225a90ad8dbbe9dc3</sum>
        </package>
        <package name="nodejs-libs" version="16.20.2" release="3.el9_2" epoch="1" arch="s390x" src="nodejs-16.20.2-3.el9_2.src.rpm">
          <filename>nodejs-libs-16.20.2-3.el9_2.s390x.rpm</filename>
          <sum type="sha256">fd5ff6843d52e51691f06676dabdea72bcd6052e30c0a8f3a88cd9027100e868</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5849</id>
    <title>Important: nodejs:18 security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-19 14:05:01"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:18 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
* nodejs: integrity checks according to policies can be circumvented (CVE-2023-38552)
* nodejs: code injection via WebAssembly export names (CVE-2023-39333)
* node-undici: cookie leakage (CVE-2023-45143)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5849" id="RHSA-2023:5849" type="rhsa" title="RHSA-2023:5849"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38552" id="CVE-2023-38552" type="cve" title="CVE-2023-38552"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39333" id="CVE-2023-39333" type="cve" title="CVE-2023-39333"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45143" id="CVE-2023-45143" type="cve" title="CVE-2023-45143"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244104" id="2244104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244415" id="2244415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244418" id="2244418" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5849.html" id="ALSA-2023:5849" type="self" title="ALSA-2023:5849"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <module name="nodejs" stream="18" version="9020020231019054835" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-devel" version="18.18.2" release="2.module_el9.2.0+43+3ebc9e20" epoch="1" arch="s390x" src="nodejs-18.18.2-2.module_el9.2.0+43+3ebc9e20.src.rpm">
          <filename>nodejs-devel-18.18.2-2.module_el9.2.0+43+3ebc9e20.s390x.rpm</filename>
          <sum type="sha256">0e458433ae8f266b1fa375b50983243d998514ee2f0cc0bb3224f3de67b0c11b</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.18.2" release="2.module_el9.2.0+43+3ebc9e20" epoch="1" arch="s390x" src="nodejs-18.18.2-2.module_el9.2.0+43+3ebc9e20.src.rpm">
          <filename>nodejs-full-i18n-18.18.2-2.module_el9.2.0+43+3ebc9e20.s390x.rpm</filename>
          <sum type="sha256">295d46b3c2837df4ab80fe5415b9fbcebf25a475d8c2e1ad8658674b47d03e0d</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.2.0+36+853e48f5" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm</filename>
          <sum type="sha256">6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8</sum>
        </package>
        <package name="nodejs-docs" version="18.18.2" release="2.module_el9.2.0+43+3ebc9e20" epoch="1" arch="noarch" src="nodejs-18.18.2-2.module_el9.2.0+43+3ebc9e20.src.rpm">
          <filename>nodejs-docs-18.18.2-2.module_el9.2.0+43+3ebc9e20.noarch.rpm</filename>
          <sum type="sha256">85883791e1d2b0d7c9b6926a8d15707c75b2b0fad25aa1ebc7700f9d5f4145b2</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0</sum>
        </package>
        <package name="npm" version="9.8.1" release="1.18.18.2.2.module_el9.2.0+43+3ebc9e20" epoch="1" arch="s390x" src="nodejs-18.18.2-2.module_el9.2.0+43+3ebc9e20.src.rpm">
          <filename>npm-9.8.1-1.18.18.2.2.module_el9.2.0+43+3ebc9e20.s390x.rpm</filename>
          <sum type="sha256">dc3775d460894bf8b8c4f89d1021fd5a8b725de1f786a49c2af5fe2590595074</sum>
        </package>
        <package name="nodejs" version="18.18.2" release="2.module_el9.2.0+43+3ebc9e20" epoch="1" arch="s390x" src="nodejs-18.18.2-2.module_el9.2.0+43+3ebc9e20.src.rpm">
          <filename>nodejs-18.18.2-2.module_el9.2.0+43+3ebc9e20.s390x.rpm</filename>
          <sum type="sha256">fecb8b6f2231f38a70ca6c4d634f90225448b49ee4da53aa5aa7314f379a884b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5867</id>
    <title>Moderate: grafana security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-19 15:22:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB. 

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
* golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325)

A AlmaLinux Security Bulletin which addresses further details about this flaw is available in the References section.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5867" id="RHSA-2023:5867" type="rhsa" title="RHSA-2023:5867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39325" id="CVE-2023-39325" type="cve" title="CVE-2023-39325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243296" id="2243296" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5867.html" id="ALSA-2023:5867" type="self" title="ALSA-2023:5867"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="grafana" version="9.0.9" release="4.el9_2.alma.1" epoch="0" arch="s390x" src="grafana-9.0.9-4.el9_2.alma.1.src.rpm">
          <filename>grafana-9.0.9-4.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">b9795802046374bb7a9882f6d65c851678f4ede64ab8870d9360e8a661cd3939</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5924</id>
    <title>Important: varnish security update</title>
    <issued date="2023-10-19 00:00:00"/>
    <updated date="2023-10-20 07:42:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5924" id="RHSA-2023:5924" type="rhsa" title="RHSA-2023:5924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5924.html" id="ALSA-2023:5924" type="self" title="ALSA-2023:5924"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="varnish" version="6.6.2" release="3.el9_2.1" epoch="0" arch="s390x" src="varnish-6.6.2-3.el9_2.1.src.rpm">
          <filename>varnish-6.6.2-3.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">9ce53e484f6ba49f4a9f4cd5b87d97326beda8e88cb1a74f842e1838b2397904</sum>
        </package>
        <package name="varnish-docs" version="6.6.2" release="3.el9_2.1" epoch="0" arch="s390x" src="varnish-6.6.2-3.el9_2.1.src.rpm">
          <filename>varnish-docs-6.6.2-3.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">f846c3f702fd438999a77f0d13a47313133671ca0de5bd8d315364387940d38c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5926</id>
    <title>Important: php security update</title>
    <issued date="2023-10-19 00:00:00"/>
    <updated date="2023-10-20 08:08:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>php security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

* php: XML loading external entity without being enabled (CVE-2023-3823)
* php: phar Buffer mismanagement (CVE-2023-3824)
* php: 1-byte array overrun in common path resolve code (CVE-2023-0568)
* php: DoS vulnerability when parsing multipart request body (CVE-2023-0662)
* php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (CVE-2023-3247)
* php: Password_verify() always return true with some hash (CVE-2023-0567)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5926" id="RHSA-2023:5926" type="rhsa" title="RHSA-2023:5926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0567" id="CVE-2023-0567" type="cve" title="CVE-2023-0567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0568" id="CVE-2023-0568" type="cve" title="CVE-2023-0568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0662" id="CVE-2023-0662" type="cve" title="CVE-2023-0662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3247" id="CVE-2023-3247" type="cve" title="CVE-2023-3247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3823" id="CVE-2023-3823" type="cve" title="CVE-2023-3823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3824" id="CVE-2023-3824" type="cve" title="CVE-2023-3824"/>
      <reference href="https://bugzilla.redhat.com/2170761" id="2170761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170770" id="2170770" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170771" id="2170771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219290" id="2219290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2229396" id="2229396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230101" id="2230101" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5926.html" id="ALSA-2023:5926" type="self" title="ALSA-2023:5926"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="php-cli" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-cli-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">0214339d4015e459802199d8a7eac160c8b23190ef14eeaecbee721d6b621430</sum>
        </package>
        <package name="php-gd" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-gd-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">0305f8a5eb447490a6bab00f3422e7b3500e95d78a8b3e9432c371b02b745e23</sum>
        </package>
        <package name="php-devel" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-devel-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">097e9ca9d1e37655a435d7130b952205c91edde31a972cf7b98c59aae4f7153e</sum>
        </package>
        <package name="php-snmp" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-snmp-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">13fbbc6a0ec5fb8febfe684d863829220cfcd60fa3dd920d79daf0e9e652e493</sum>
        </package>
        <package name="php-ffi" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-ffi-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">1f517fc9ff5615864c396311b87ff8cb6e5cc92c54a08535eeba658156355536</sum>
        </package>
        <package name="php-pgsql" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-pgsql-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">3176d675a8917da000b1c983d4207476001b95cc08f11b6d0ff7834fccd79d54</sum>
        </package>
        <package name="php-ldap" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-ldap-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">4c37e15473bd9c578ed0f044dd8b7e2452f9112fd9ac0c9cc513b861f12813bb</sum>
        </package>
        <package name="php-process" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-process-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">4c654ca16895bda5b8988d9e1f618b185ff9d47d2bda628fa60fcd04551580e1</sum>
        </package>
        <package name="php-embedded" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-embedded-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">4e92257e2287c918188ddcfd202f7fd099ce612206ea4314b6211b699df08326</sum>
        </package>
        <package name="php-opcache" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-opcache-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">59c5930658d41f1da05d03021ddbd899060e5cbcbae5ff7f39d41ae6eb759c06</sum>
        </package>
        <package name="php-gmp" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-gmp-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">5e413a74fc1952d5aaedd2763f9b89735aa9daafb46ad31c679cbd2358356478</sum>
        </package>
        <package name="php-xml" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-xml-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7b846d3c0c07e9a2fe3e22928a2cd57533ce4839850b48c7dc98cfa2eaeefab1</sum>
        </package>
        <package name="php-mysqlnd" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-mysqlnd-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">8695c1d1f6706882787c1d7c72b6ab37f30b1f125c9f4b200d125dcfb836ebd6</sum>
        </package>
        <package name="php-intl" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-intl-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">a05b5bfcbf61c0b9e9126ea005aeac5491fb4d35ab952954794717399a1bb0ab</sum>
        </package>
        <package name="php-fpm" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-fpm-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">a0f430520885669ba2f5d66e31624fc97ef2a852a08959b36e2c730191f4f623</sum>
        </package>
        <package name="php-enchant" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-enchant-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">bdb7a69e65916861ffcd5f6de169bf346718e5a565ce626c76b3982e5021bc39</sum>
        </package>
        <package name="php-odbc" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-odbc-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">c111a57c36cbdd9173103f52323f4801d8e3fc5564839df9acecfedec5478da7</sum>
        </package>
        <package name="php-common" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-common-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">c683749f25dd7beb1f5a0cc6cb20d1fcbce9483139a8bdeba311a9b4a3f3d1fc</sum>
        </package>
        <package name="php-soap" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-soap-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">c6feccaaf3702d3bc899be0cc4c80773a49e080b7074d1b0381ada87e4369996</sum>
        </package>
        <package name="php-dbg" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-dbg-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">c797fc3f9b1bf316bffb73b3f0910c580ca9c2de3462c935ea9e5a0ce6bb800e</sum>
        </package>
        <package name="php-dba" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-dba-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">cef8cc47da97a375516d0d6c7f8e9ea61f4a21eacf8ecb4c78fc177da5bacc81</sum>
        </package>
        <package name="php-bcmath" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-bcmath-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">d91185e26961b7cf7f6c191af3718c1964b43351ef8a7cdaa09f6c5e225aa37e</sum>
        </package>
        <package name="php-mbstring" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-mbstring-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">e763f5fb2052a733d92db32fd3b83aec9be814c1c21936f1282b1e2e22021546</sum>
        </package>
        <package name="php" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">e9f6bee0c0d9bbfb395021c3a6b088e6583c5368c89b55c2fd32de7abfa2a79c</sum>
        </package>
        <package name="php-pdo" version="8.0.30" release="1.el9_2" epoch="0" arch="s390x" src="php-8.0.30-1.el9_2.src.rpm">
          <filename>php-pdo-8.0.30-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">fc70243fa02ef64324d1e3816569d04d17f47c54faea1fae1f7c1957e965c36f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5929</id>
    <title>Important: tomcat security update</title>
    <issued date="2023-10-19 00:00:00"/>
    <updated date="2023-10-20 08:48:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5929" id="RHSA-2023:5929" type="rhsa" title="RHSA-2023:5929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5929.html" id="ALSA-2023:5929" type="self" title="ALSA-2023:5929"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="tomcat-docs-webapp" version="9.0.62" release="11.el9_2.3" epoch="1" arch="noarch" src="tomcat-9.0.62-11.el9_2.3.src.rpm">
          <filename>tomcat-docs-webapp-9.0.62-11.el9_2.3.noarch.rpm</filename>
          <sum type="sha256">15052a457e5a02c13b632e40d663552c7eeaa43949f4188f913d5fcc35530961</sum>
        </package>
        <package name="tomcat-lib" version="9.0.62" release="11.el9_2.3" epoch="1" arch="noarch" src="tomcat-9.0.62-11.el9_2.3.src.rpm">
          <filename>tomcat-lib-9.0.62-11.el9_2.3.noarch.rpm</filename>
          <sum type="sha256">2840a620c450c5cc1f26d502731a50db4f9a87765500b20e82b585ffd3f75a3b</sum>
        </package>
        <package name="tomcat" version="9.0.62" release="11.el9_2.3" epoch="1" arch="noarch" src="tomcat-9.0.62-11.el9_2.3.src.rpm">
          <filename>tomcat-9.0.62-11.el9_2.3.noarch.rpm</filename>
          <sum type="sha256">3f046469ad314431c93dbeee6b078949c4b9196c11e29e9ccf9afe0dd9cddcc2</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.62" release="11.el9_2.3" epoch="1" arch="noarch" src="tomcat-9.0.62-11.el9_2.3.src.rpm">
          <filename>tomcat-webapps-9.0.62-11.el9_2.3.noarch.rpm</filename>
          <sum type="sha256">5e8cc805aa41b20d650fa527d072c026129eb795df7176522e4d03c271443686</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.62" release="11.el9_2.3" epoch="1" arch="noarch" src="tomcat-9.0.62-11.el9_2.3.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.noarch.rpm</filename>
          <sum type="sha256">87ec492c0f03a96fab9e1ce8e7101eeb3d678e793faab35a1f1b75e6367912fd</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.62" release="11.el9_2.3" epoch="1" arch="noarch" src="tomcat-9.0.62-11.el9_2.3.src.rpm">
          <filename>tomcat-admin-webapps-9.0.62-11.el9_2.3.noarch.rpm</filename>
          <sum type="sha256">c54b65accf697229b7c23a36122c4b44acb172c36a1e60d13488c6099d47daa0</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.62" release="11.el9_2.3" epoch="1" arch="noarch" src="tomcat-9.0.62-11.el9_2.3.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.noarch.rpm</filename>
          <sum type="sha256">ddf0cc650d2bc16bdf0aa3074264608925c24fe8e34cc61e5a7db3d11d1a1444</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.62" release="11.el9_2.3" epoch="1" arch="noarch" src="tomcat-9.0.62-11.el9_2.3.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.62-11.el9_2.3.noarch.rpm</filename>
          <sum type="sha256">e6f600319b870be925018c7741b514a3a49670686a5938608e844ea170397251</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6077</id>
    <title>Moderate: toolbox security update</title>
    <issued date="2023-10-24 00:00:00"/>
    <updated date="2023-10-25 11:22:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>toolbox security update</summary>
    <description>The rhel9/toolbox container image can be used with Toolbox to obtain AlmaLinux based containerized command line environments to aid with development and software testing. Toolbox is built on top of Podman and other standard container technologies from OCI.

This updates the rhel9/toolbox image in the AlmaLinux container registry.

To pull this container image, run one of the following commands:

    podman pull registry.AlmaLinux.io/rhel9/toolbox (authenticated)
    podman pull registry.access.AlmaLinux.com/ubi9/toolbox (unauthenticated)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6077" id="RHSA-2023:6077" type="rhsa" title="RHSA-2023:6077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39325" id="CVE-2023-39325" type="cve" title="CVE-2023-39325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243296" id="2243296" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6077.html" id="ALSA-2023:6077" type="self" title="ALSA-2023:6077"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="toolbox-tests" version="0.0.99.3" release="10.el9_2" epoch="0" arch="s390x" src="toolbox-0.0.99.3-10.el9_2.src.rpm">
          <filename>toolbox-tests-0.0.99.3-10.el9_2.s390x.rpm</filename>
          <sum type="sha256">0ee22db979c0577edda39924ddff5f02497301b5149da3585db4f687bb627c4b</sum>
        </package>
        <package name="toolbox" version="0.0.99.3" release="10.el9_2" epoch="0" arch="s390x" src="toolbox-0.0.99.3-10.el9_2.src.rpm">
          <filename>toolbox-0.0.99.3-10.el9_2.s390x.rpm</filename>
          <sum type="sha256">72efa4fc8b7b201f17eb533062fa67ae70843b2eebb36bbc425cc86ef7a5cf62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6120</id>
    <title>Moderate: nginx:1.22 security update</title>
    <issued date="2023-10-25 00:00:00"/>
    <updated date="2023-10-26 20:32:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx:1.22 security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. 

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6120" id="RHSA-2023:6120" type="rhsa" title="RHSA-2023:6120"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6120.html" id="ALSA-2023:6120" type="self" title="ALSA-2023:6120"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <module name="nginx" stream="1.22" version="9020020231026111602" context="8cf767d6" arch="s390x"/>
        <package name="nginx-mod-devel" version="1.22.1" release="3.module_el9.2.0+44+f932b372.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">1f9c0f3d71aa0a63b6ada1ec9a38ad679b113ed6a07fb73250b78c6fe7162f6b</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.22.1" release="3.module_el9.2.0+44+f932b372.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">3d8774d5fe5fc3cc0a4ed1dd0f554ba378b8c0f57d495ce5792afd51bbab3c79</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.22.1" release="3.module_el9.2.0+44+f932b372.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">7ed5bad1c64b904534685be0beb11c70f6533d9d109bcb0e96049a6368ec9d9e</sum>
        </package>
        <package name="nginx-core" version="1.22.1" release="3.module_el9.2.0+44+f932b372.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.src.rpm">
          <filename>nginx-core-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">903ab1670547cbc7bbc1847eee8f0df3fabcc9ccdb77c9b836c999ed7d2ac0d6</sum>
        </package>
        <package name="nginx-all-modules" version="1.22.1" release="3.module_el9.2.0+44+f932b372.1.alma.1" epoch="1" arch="noarch" src="nginx-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.src.rpm">
          <filename>nginx-all-modules-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">aeb3236fb1a6ffd6ec0357beebae256ac1f87040d77ced91fa90e7ea61e1ee79</sum>
        </package>
        <package name="nginx-mod-mail" version="1.22.1" release="3.module_el9.2.0+44+f932b372.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">afe1d446ae9b65bce9338f834301c2f37dcfe563ca83b038bc9f1ccc59281f1d</sum>
        </package>
        <package name="nginx-filesystem" version="1.22.1" release="3.module_el9.2.0+44+f932b372.1.alma.1" epoch="1" arch="noarch" src="nginx-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.src.rpm">
          <filename>nginx-filesystem-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">b6958158249f745572cda8ea2b11a8392750626ca99a882dea00d9ef34ffc439</sum>
        </package>
        <package name="nginx" version="1.22.1" release="3.module_el9.2.0+44+f932b372.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.src.rpm">
          <filename>nginx-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">cc47bb1bdf452151a57cf691963d661387fc04418a31ee04fec8e004115b8c46</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.22.1" release="3.module_el9.2.0+44+f932b372.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">ceb4b3e0760c425edae95174d677eeae6cc9b0dc7371d5295c4cc03c85280e8c</sum>
        </package>
        <package name="nginx-mod-stream" version="1.22.1" release="3.module_el9.2.0+44+f932b372.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.22.1-3.module_el9.2.0+44+f932b372.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">d0ef9abb4822ad669699f774801bd65544eacb84c0e594d1ea47872fd66229b5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6167</id>
    <title>Low: libguestfs-winsupport security update</title>
    <issued date="2023-10-30 00:00:00"/>
    <updated date="2023-10-31 08:52:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libguestfs-winsupport security update</summary>
    <description>The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and libraries allowing users to access and modify virtual machine (VM) disk images.

Security Fix(es):

* NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image (CVE-2022-40284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6167" id="RHSA-2023:6167" type="rhsa" title="RHSA-2023:6167"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40284" id="CVE-2022-40284" type="cve" title="CVE-2022-40284"/>
      <reference href="https://bugzilla.redhat.com/2236130" id="2236130" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6167.html" id="ALSA-2023:6167" type="self" title="ALSA-2023:6167"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libguestfs-winsupport" version="9.2" release="2.el9_2" epoch="0" arch="s390x" src="libguestfs-winsupport-9.2-2.el9_2.src.rpm">
          <filename>libguestfs-winsupport-9.2-2.el9_2.s390x.rpm</filename>
          <sum type="sha256">ed5252e766693d115aa7371a5487623acc505a8a92aaf55f62013bc3a2aa6cf4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6188</id>
    <title>Important: firefox security update</title>
    <issued date="2023-10-30 00:00:00"/>
    <updated date="2023-11-03 09:22:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.4.0 ESR.

Security Fix(es):

* Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)
* Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730)
* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)
* Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)
* Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)
* Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728)
* Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6188" id="RHSA-2023:6188" type="rhsa" title="RHSA-2023:6188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44488" id="CVE-2023-44488" type="cve" title="CVE-2023-44488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5721" id="CVE-2023-5721" type="cve" title="CVE-2023-5721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5724" id="CVE-2023-5724" type="cve" title="CVE-2023-5724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5725" id="CVE-2023-5725" type="cve" title="CVE-2023-5725"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5728" id="CVE-2023-5728" type="cve" title="CVE-2023-5728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5730" id="CVE-2023-5730" type="cve" title="CVE-2023-5730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5732" id="CVE-2023-5732" type="cve" title="CVE-2023-5732"/>
      <reference href="https://bugzilla.redhat.com/2241806" id="2241806" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245896" id="2245896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245898" id="2245898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245899" id="2245899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245900" id="2245900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245903" id="2245903" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245906" id="2245906" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6188.html" id="ALSA-2023:6188" type="self" title="ALSA-2023:6188"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="firefox" version="115.4.0" release="1.el9_2.alma.1" epoch="0" arch="s390x" src="firefox-115.4.0-1.el9_2.alma.1.src.rpm">
          <filename>firefox-115.4.0-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">86880ffb7f3aed02ea9b1f3d4a21da0cf4cc5ce42bd3a0695ff1520d2e76431f</sum>
        </package>
        <package name="firefox-x11" version="115.4.0" release="1.el9_2.alma.1" epoch="0" arch="s390x" src="firefox-115.4.0-1.el9_2.alma.1.src.rpm">
          <filename>firefox-x11-115.4.0-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">8c48c2d54df6a972776fa67964a781d32d60d8935a90ba1a1e8a13691cadffbd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6191</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-10-30 00:00:00"/>
    <updated date="2023-11-03 09:28:28"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.4.1.

Security Fix(es):

* Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)
* Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730)
* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)
* Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)
* Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)
* Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728)
* Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6191" id="RHSA-2023:6191" type="rhsa" title="RHSA-2023:6191"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44488" id="CVE-2023-44488" type="cve" title="CVE-2023-44488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5721" id="CVE-2023-5721" type="cve" title="CVE-2023-5721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5724" id="CVE-2023-5724" type="cve" title="CVE-2023-5724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5725" id="CVE-2023-5725" type="cve" title="CVE-2023-5725"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5728" id="CVE-2023-5728" type="cve" title="CVE-2023-5728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5730" id="CVE-2023-5730" type="cve" title="CVE-2023-5730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5732" id="CVE-2023-5732" type="cve" title="CVE-2023-5732"/>
      <reference href="https://bugzilla.redhat.com/2241806" id="2241806" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245896" id="2245896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245898" id="2245898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245899" id="2245899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245900" id="2245900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245903" id="2245903" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245906" id="2245906" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6191.html" id="ALSA-2023:6191" type="self" title="ALSA-2023:6191"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="thunderbird" version="115.4.1" release="1.el9_2.alma" epoch="0" arch="s390x" src="thunderbird-115.4.1-1.el9_2.alma.src.rpm">
          <filename>thunderbird-115.4.1-1.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">d4a39453c1e0802218065773e895132f22d34e4983b5adf326991096a7331b9d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6242</id>
    <title>Moderate: .NET 6.0 security update</title>
    <issued date="2023-11-01 00:00:00"/>
    <updated date="2023-11-03 10:06:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.124 and .NET Runtime 6.0.24.

Security Fix(es):

* dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6242" id="RHSA-2023:6242" type="rhsa" title="RHSA-2023:6242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6242.html" id="ALSA-2023:6242" type="self" title="ALSA-2023:6242"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="dotnet-hostfxr-6.0" version="6.0.24" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el9_2.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.24-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">0c44d741c362a3cc22325dff149ddc78480048c47d6fb4cd62fa53da8b654070</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.24" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el9_2.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.24-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">2ca13562611dd380625783de2973783d96fe14e3ce16c078b53dcd7f65a86a78</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.24" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el9_2.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.24-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">467c3b12d39eedcfe927bb227790dd97dd129d3aeb3145bc58ae7e651c07dd40</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.24" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el9_2.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.24-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">79d4af42f3ec8c587a7f4acb1fb444a200d31a7fac28e5cbd92801793e0ae757</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.24" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el9_2.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.24-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7f5dc8d5f4d4db22875a2613aacb8601103300a59e3f90b597ae4353f0f0cb9b</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.124" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el9_2.src.rpm">
          <filename>dotnet-templates-6.0-6.0.124-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">a9de69dd7c1e5a3b41020b79c5bd84dcac0edc6416cd1edc6be8cb5ba6b45e5f</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.124" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.124-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">b6aad4a2967ed7bed0e3c79ae4ceae325103fd3162be63f6cab344f9ac535df8</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.24" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el9_2.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.24-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">e6e64d96fd2f82adf2cfbb4e28a79260ea0fac82ff01fcc7165a484a6dea8629</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2023:6246</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2023-11-02 00:00:00"/>
    <updated date="2023-11-03 11:04:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.113 and .NET Runtime 7.0.13.

Security Fix(es):

* dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6246" id="RHSA-2023:6246" type="rhsa" title="RHSA-2023:6246"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6246.html" id="ALSA-2023:6246" type="self" title="ALSA-2023:6246"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="aspnetcore-runtime-7.0" version="7.0.13" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el9_2.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.13-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">213356938340e1805b7ade11c22f79bd200ecd4bc6b5cbcf4151f6d708146e24</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.13" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el9_2.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.13-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">26df3352a374dd82d3f981f2d0b07699ee2a53e2736b3bed264393ba1aad80e1</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.113" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el9_2.src.rpm">
          <filename>dotnet-templates-7.0-7.0.113-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">299c0bb8e1500fc16ffb2323b29ddb9f019eeb9e4cc652b06ab13ad9ec026f84</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.13" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el9_2.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.13-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">5466eb40067152e8932fcdc75899c023eedf77f96e132ebe8181ebcfe28432aa</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.113" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.113-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7dc8a02ed0b6042e2f9f5d432ae82553bd9d5ebcee1852b6f6b22006e356ae3e</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.13" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el9_2.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.13-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">8359d5b99a3ae8db7b2337d004bbaa64f0abe2c6619b3ca94c36c4b4059f214b</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="7.0.113" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el9_2.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.113-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">b441c996be11a055589b5a53f47271951d4dd7f0ade862c32783b9b1c27d884f</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.13" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el9_2.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.13-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">b86b1d58dc413e269cee1d153224efc191eb3cfa36eec601834aa7bbc9621419</sum>
        </package>
        <package name="dotnet-host" version="7.0.13" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el9_2.src.rpm">
          <filename>dotnet-host-7.0.13-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">c59475d74c7b01510261c045fc665923cea53db14ebb2f6416d7855d2d141028</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.13" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el9_2.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.13-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">ef61b18f369ab7db3c1bf9af242c287e72d0e8cb866abe614d70618fc3489f40</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6265</id>
    <title>Important: ghostscript security update</title>
    <issued date="2023-11-02 00:00:00"/>
    <updated date="2023-11-03 10:25:10"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents (CVE-2023-43115)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6265" id="RHSA-2023:6265" type="rhsa" title="RHSA-2023:6265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43115" id="CVE-2023-43115" type="cve" title="CVE-2023-43115"/>
      <reference href="https://bugzilla.redhat.com/2241108" id="2241108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6265.html" id="ALSA-2023:6265" type="self" title="ALSA-2023:6265"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="ghostscript-tools-dvipdf" version="9.54.0" release="11.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-11.el9_2.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.54.0-11.el9_2.s390x.rpm</filename>
          <sum type="sha256">0323d64794d85b6ca30e9d1a2c15be013268742324742493f6d401344a22badf</sum>
        </package>
        <package name="ghostscript-x11" version="9.54.0" release="11.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-11.el9_2.src.rpm">
          <filename>ghostscript-x11-9.54.0-11.el9_2.s390x.rpm</filename>
          <sum type="sha256">59189f95deabb02404c6d02c1b43eadf7f75cb119f75ea111a88be1b584ae7b7</sum>
        </package>
        <package name="ghostscript-doc" version="9.54.0" release="11.el9_2" epoch="0" arch="noarch" src="ghostscript-9.54.0-11.el9_2.src.rpm">
          <filename>ghostscript-doc-9.54.0-11.el9_2.noarch.rpm</filename>
          <sum type="sha256">5b8dfd10c092ca54f56c949f274b6669bafa753c0520d65e13991351018884e5</sum>
        </package>
        <package name="libgs" version="9.54.0" release="11.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-11.el9_2.src.rpm">
          <filename>libgs-9.54.0-11.el9_2.s390x.rpm</filename>
          <sum type="sha256">812634be0507a0647a8a1d05bbcb83df0fbba691876d96f24d6c81b725ca9708</sum>
        </package>
        <package name="ghostscript-tools-fonts" version="9.54.0" release="11.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-11.el9_2.src.rpm">
          <filename>ghostscript-tools-fonts-9.54.0-11.el9_2.s390x.rpm</filename>
          <sum type="sha256">9b1b36d7361b55b777438ff5f59bef33eb1f84a58250824c6a5a9201b39dbba1</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.54.0" release="11.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-11.el9_2.src.rpm">
          <filename>ghostscript-tools-printing-9.54.0-11.el9_2.s390x.rpm</filename>
          <sum type="sha256">cdbf112a5e711c2e18eeeddc2a0e6fc448fb7a1a689f63ce7a8af62ec8a039f8</sum>
        </package>
        <package name="ghostscript" version="9.54.0" release="11.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-11.el9_2.src.rpm">
          <filename>ghostscript-9.54.0-11.el9_2.s390x.rpm</filename>
          <sum type="sha256">f0e453010d989916a80e72b9b83db72334d8791000906cb00fcf7072ec6d5b1b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6266</id>
    <title>Critical: squid security update</title>
    <issued date="2023-11-02 00:00:00"/>
    <updated date="2023-11-03 10:35:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>squid security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
* SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)
* SQUID-2023:5 squid: denial of Service in FTP (CVE-2023-46848)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6266" id="RHSA-2023:6266" type="rhsa" title="RHSA-2023:6266"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46846" id="CVE-2023-46846" type="cve" title="CVE-2023-46846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46847" id="CVE-2023-46847" type="cve" title="CVE-2023-46847"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46848" id="CVE-2023-46848" type="cve" title="CVE-2023-46848"/>
      <reference href="https://bugzilla.redhat.com/2245910" id="2245910" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245916" id="2245916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245919" id="2245919" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6266.html" id="ALSA-2023:6266" type="self" title="ALSA-2023:6266"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="squid" version="5.5" release="5.el9_2.1" epoch="7" arch="s390x" src="squid-5.5-5.el9_2.1.src.rpm">
          <filename>squid-5.5-5.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">0d9db22e60fe1803f47c4ef0db87067620732f9eb02fdf7bc1cd73da67c4143c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6324</id>
    <title>Moderate: python3.11-pip security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:12:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-pip security update</summary>
    <description>pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python".

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6324" id="RHSA-2023:6324" type="rhsa" title="RHSA-2023:6324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6324.html" id="ALSA-2023:6324" type="self" title="ALSA-2023:6324"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="python3.11-pip-wheel" version="22.3.1" release="4.el9" epoch="0" arch="noarch" src="python3.11-pip-22.3.1-4.el9.src.rpm">
          <filename>python3.11-pip-wheel-22.3.1-4.el9.noarch.rpm</filename>
          <sum type="sha256">f7537bf8b9a5a45c95276f850dc1856a345144d4bce317f62c67d67e764f531d</sum>
        </package>
        <package name="python3.11-pip" version="22.3.1" release="4.el9" epoch="0" arch="noarch" src="python3.11-pip-22.3.1-4.el9.src.rpm">
          <filename>python3.11-pip-22.3.1-4.el9.noarch.rpm</filename>
          <sum type="sha256">fd34722a1fe8e4736de5eaeb450f8b85fb79323b61846de58407d9df71ab1ad8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6330</id>
    <title>Moderate: edk2 security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-15 12:35:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2 security, bug fix, and enhancement update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() (CVE-2019-14560)
* openssl: Possible DoS translating ASN.1 object identifiers (CVE-2023-2650)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6330" id="RHSA-2023:6330" type="rhsa" title="RHSA-2023:6330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-14560" id="CVE-2019-14560" type="cve" title="CVE-2019-14560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2650" id="CVE-2023-2650" type="cve" title="CVE-2023-2650"/>
      <reference href="https://bugzilla.redhat.com/1858038" id="1858038" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207947" id="2207947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6330.html" id="ALSA-2023:6330" type="self" title="ALSA-2023:6330"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="edk2-aarch64" version="20230524" release="3.el9" epoch="0" arch="noarch" src="edk2-20230524-3.el9.src.rpm">
          <filename>edk2-aarch64-20230524-3.el9.noarch.rpm</filename>
          <sum type="sha256">7f420a2e6902aa83721973936da687385ce3f9a318f79cec650eaf58da03c9ed</sum>
        </package>
        <package name="edk2-ovmf" version="20230524" release="3.el9" epoch="0" arch="noarch" src="edk2-20230524-3.el9.src.rpm">
          <filename>edk2-ovmf-20230524-3.el9.noarch.rpm</filename>
          <sum type="sha256">cf00362ca3ecc9d6ce43ec1f21168c8524b96b2675854692c3afd7bf709e0918</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6340</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:07:37"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6340" id="RHSA-2023:6340" type="rhsa" title="RHSA-2023:6340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1393" id="CVE-2023-1393" type="cve" title="CVE-2023-1393"/>
      <reference href="https://bugzilla.redhat.com/2180288" id="2180288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6340.html" id="ALSA-2023:6340" type="self" title="ALSA-2023:6340"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="xorg-x11-server-common" version="1.20.11" release="19.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-19.el9.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-19.el9.s390x.rpm</filename>
          <sum type="sha256">1b2c1e5b4abe6e054b5ce5ce642c980e6f2d13e52b468d7d9e2e23e677eb93d4</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="19.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-19.el9.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-19.el9.s390x.rpm</filename>
          <sum type="sha256">56d0f1a90cb5283bcc8ea9cd9a0dea67bd29d5b3cdf6e0ff7645d61f72b83d81</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="19.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-19.el9.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-19.el9.s390x.rpm</filename>
          <sum type="sha256">575c0a58016945469084f72bd8afc2331f478dfb0dfb01f99490c3367785c6f1</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="19.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-19.el9.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-19.el9.s390x.rpm</filename>
          <sum type="sha256">8d5f708d6d0ade7bedf85ae663e85ef7a113a7317d5c83ae2dd915e25e423cfe</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="19.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-19.el9.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-19.el9.s390x.rpm</filename>
          <sum type="sha256">bebf647eb6037056993f968f0a3c41d3baa80fea3d7ea37aa537b3b7e1e9df21</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="19.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-19.el9.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-19.el9.s390x.rpm</filename>
          <sum type="sha256">f334511cedecbc2d1c8633c79aa7d171bde634e5eb7c78c01380d6e1ed6484df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6341</id>
    <title>Moderate: xorg-x11-server-Xwayland security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security, bug fix, and enhancement update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.

The following packages have been upgraded to a later upstream version: xorg-x11-server-Xwayland (22.1.9). (BZ#2158761)

Security Fix(es):

* xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6341" id="RHSA-2023:6341" type="rhsa" title="RHSA-2023:6341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1393" id="CVE-2023-1393" type="cve" title="CVE-2023-1393"/>
      <reference href="https://bugzilla.redhat.com/2180288" id="2180288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6341.html" id="ALSA-2023:6341" type="self" title="ALSA-2023:6341"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="xorg-x11-server-Xwayland" version="22.1.9" release="2.el9" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-22.1.9-2.el9.src.rpm">
          <filename>xorg-x11-server-Xwayland-22.1.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">9da0b0c4c16747391d2d7fa988ff6ec68a7a15bb2854e4b4b80f2522bc889977</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6343</id>
    <title>Moderate: LibRaw security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>LibRaw security update</summary>
    <description>LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).

Security Fix(es):

* LibRaw: stack buffer overflow in LibRaw_buffer_datastream::gets() in src/libraw_datastream.cpp (CVE-2021-32142)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6343" id="RHSA-2023:6343" type="rhsa" title="RHSA-2023:6343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-32142" id="CVE-2021-32142" type="cve" title="CVE-2021-32142"/>
      <reference href="https://bugzilla.redhat.com/2172004" id="2172004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6343.html" id="ALSA-2023:6343" type="self" title="ALSA-2023:6343"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="LibRaw" version="0.20.2" release="6.el9" epoch="0" arch="s390x" src="LibRaw-0.20.2-6.el9.src.rpm">
          <filename>LibRaw-0.20.2-6.el9.s390x.rpm</filename>
          <sum type="sha256">2be1a2f3a95c92794a56ddfee37a32286a64dcebae83c83a6420d90565babe07</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6346</id>
    <title>Moderate: toolbox security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:31"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>toolbox security and bug fix update</summary>
    <description>Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI.

Security Fix(es):

* go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064)
* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)
* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)
* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)
* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)
* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)
* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)
* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)
* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)
* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6346" id="RHSA-2023:6346" type="rhsa" title="RHSA-2023:6346"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3064" id="CVE-2022-3064" type="cve" title="CVE-2022-3064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41723" id="CVE-2022-41723" type="cve" title="CVE-2022-41723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41725" id="CVE-2022-41725" type="cve" title="CVE-2022-41725"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24534" id="CVE-2023-24534" type="cve" title="CVE-2023-24534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24536" id="CVE-2023-24536" type="cve" title="CVE-2023-24536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24538" id="CVE-2023-24538" type="cve" title="CVE-2023-24538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24539" id="CVE-2023-24539" type="cve" title="CVE-2023-24539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24540" id="CVE-2023-24540" type="cve" title="CVE-2023-24540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29400" id="CVE-2023-29400" type="cve" title="CVE-2023-29400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29406" id="CVE-2023-29406" type="cve" title="CVE-2023-29406"/>
      <reference href="https://bugzilla.redhat.com/2163037" id="2163037" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178358" id="2178358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178488" id="2178488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184481" id="2184481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184482" id="2184482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184483" id="2184483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196026" id="2196026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196027" id="2196027" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196029" id="2196029" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222167" id="2222167" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6346.html" id="ALSA-2023:6346" type="self" title="ALSA-2023:6346"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="toolbox-tests" version="0.0.99.4" release="6.el9_3" epoch="0" arch="s390x" src="toolbox-0.0.99.4-6.el9_3.src.rpm">
          <filename>toolbox-tests-0.0.99.4-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">727fa3a5d3284a41bd5a6d5b881e419d133207944c89cb74aebbf72e5e7e8134</sum>
        </package>
        <package name="toolbox" version="0.0.99.4" release="6.el9_3" epoch="0" arch="s390x" src="toolbox-0.0.99.4-6.el9_3.src.rpm">
          <filename>toolbox-0.0.99.4-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">cc4b88aa654d722001a6c974cd5739dc49ae032bbb32e0e4f8dd007f5e9b745e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6363</id>
    <title>Moderate: skopeo security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>skopeo security update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. 

Security Fix(es):

* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)
* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)
* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)
* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)
* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)
* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)
* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)
* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)
* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)
* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)
* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6363" id="RHSA-2023:6363" type="rhsa" title="RHSA-2023:6363"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41723" id="CVE-2022-41723" type="cve" title="CVE-2022-41723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41724" id="CVE-2022-41724" type="cve" title="CVE-2022-41724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41725" id="CVE-2022-41725" type="cve" title="CVE-2022-41725"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24534" id="CVE-2023-24534" type="cve" title="CVE-2023-24534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24536" id="CVE-2023-24536" type="cve" title="CVE-2023-24536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24537" id="CVE-2023-24537" type="cve" title="CVE-2023-24537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24538" id="CVE-2023-24538" type="cve" title="CVE-2023-24538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24539" id="CVE-2023-24539" type="cve" title="CVE-2023-24539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24540" id="CVE-2023-24540" type="cve" title="CVE-2023-24540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29400" id="CVE-2023-29400" type="cve" title="CVE-2023-29400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29406" id="CVE-2023-29406" type="cve" title="CVE-2023-29406"/>
      <reference href="https://bugzilla.redhat.com/2178358" id="2178358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178488" id="2178488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178492" id="2178492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184481" id="2184481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184482" id="2184482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184483" id="2184483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184484" id="2184484" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196026" id="2196026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196027" id="2196027" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196029" id="2196029" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222167" id="2222167" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6363.html" id="ALSA-2023:6363" type="self" title="ALSA-2023:6363"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="skopeo" version="1.13.3" release="1.el9" epoch="2" arch="s390x" src="skopeo-1.13.3-1.el9.src.rpm">
          <filename>skopeo-1.13.3-1.el9.s390x.rpm</filename>
          <sum type="sha256">703f34bd0081a890ca38da49246a5a6498ce581aed315d3d6d790cc0129b0216</sum>
        </package>
        <package name="skopeo-tests" version="1.13.3" release="1.el9" epoch="2" arch="s390x" src="skopeo-1.13.3-1.el9.src.rpm">
          <filename>skopeo-tests-1.13.3-1.el9.s390x.rpm</filename>
          <sum type="sha256">b6c95a05ab5fbd78e33b67ba89eb83ec0bcd309e6eef42c60a0f65e746d9ef61</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6365</id>
    <title>Moderate: mod_auth_openidc security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mod_auth_openidc security and bug fix update</summary>
    <description>The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. 

Security Fix(es):

* mod_auth_openidc: Open Redirect in oidc_validate_redirect_url() using tab character (CVE-2022-23527)
* mod_auth_openidc: NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied (CVE-2023-28625)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6365" id="RHSA-2023:6365" type="rhsa" title="RHSA-2023:6365"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23527" id="CVE-2022-23527" type="cve" title="CVE-2022-23527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28625" id="CVE-2023-28625" type="cve" title="CVE-2023-28625"/>
      <reference href="https://bugzilla.redhat.com/2153655" id="2153655" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184118" id="2184118" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6365.html" id="ALSA-2023:6365" type="self" title="ALSA-2023:6365"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="mod_auth_openidc" version="2.4.9.4" release="4.el9" epoch="0" arch="s390x" src="mod_auth_openidc-2.4.9.4-4.el9.src.rpm">
          <filename>mod_auth_openidc-2.4.9.4-4.el9.s390x.rpm</filename>
          <sum type="sha256">c1c5ef13f60c1956d11a3b0aa1aba63446cde2a0822fecc100420cec77dd7f64</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6368</id>
    <title>Moderate: qemu-kvm security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-15 12:25:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qemu-kvm security, bug fix, and enhancement update</summary>
    <description>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

The following packages have been upgraded to a later upstream version: qemu-kvm (8.0.0). (BZ#2180898)

Security Fix(es):

* QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750) (CVE-2023-2680)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6368" id="RHSA-2023:6368" type="rhsa" title="RHSA-2023:6368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2680" id="CVE-2023-2680" type="cve" title="CVE-2023-2680"/>
      <reference href="https://bugzilla.redhat.com/2203387" id="2203387" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6368.html" id="ALSA-2023:6368" type="self" title="ALSA-2023:6368"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="qemu-pr-helper" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-pr-helper-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">0a0b53bfa2f81dedc2dba280efe5f131b42355d5a1da7f83b0fca8c764aace5f</sum>
        </package>
        <package name="qemu-kvm-block-blkio" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-kvm-block-blkio-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">2525409332e34c6dd51abe60c40062ad04bbfdd80f53ebd1586fddaab992caca</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">2c729c850713d93ab8be40d82c3f8dc404f0c3c4d5802d4c5142e19ca2311faa</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-kvm-block-rbd-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">312b67426e1fb4afc43a377572c59cbf05992b24aecc72b83995a5442d58a400</sum>
        </package>
        <package name="qemu-kvm-tools" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-kvm-tools-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">4ce692219912ba2f0694f4509f4ba81f182eaee8f919a8f264d949da97a93a50</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu-ccw" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-ccw-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">54509bbc045b2607bca93700bfeeda6fa74b97ac796854caa0d32d6e66cc199f</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-kvm-block-curl-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">5d4a6d53eb32aa1ac6d25a83689727b34b911948558d6f26a39bd20abcf71566</sum>
        </package>
        <package name="qemu-kvm" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-kvm-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">6d32739ff900936d28225a0298655cef2c0b1b07c0395e9fbb6c813e96a94061</sum>
        </package>
        <package name="qemu-kvm-device-usb-host" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-kvm-device-usb-host-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">6e59330d763428086aa8397311204cc2935bc24863e483d776b26b4d5f2a8f70</sum>
        </package>
        <package name="qemu-kvm-audio-pa" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-kvm-audio-pa-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">6ef3ce86efeb91baf6160765607763875775834e9076c780c3ac68146b695871</sum>
        </package>
        <package name="qemu-guest-agent" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-guest-agent-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">80e6e07389a43427d2f27c883c95c76e916e93d1f5d75df46435003d66806282</sum>
        </package>
        <package name="qemu-kvm-core" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-kvm-core-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">a46bd5bf5780bc904d8ba94a1b63066becf2c74b742e3bdd679125eb88f7a172</sum>
        </package>
        <package name="qemu-kvm-docs" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-kvm-docs-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">b1ccde669983a667796b72769870e2436cafca98e596ffc105751db5a683af73</sum>
        </package>
        <package name="qemu-kvm-common" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-kvm-common-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">c4b55758c167e0a9dbf98319388cd1735bae89b095f40d79c066906778508dab</sum>
        </package>
        <package name="qemu-img" version="8.0.0" release="16.el9_3.alma.1" epoch="17" arch="s390x" src="qemu-kvm-8.0.0-16.el9_3.alma.1.src.rpm">
          <filename>qemu-img-8.0.0-16.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">fa71430568b2c985e0e6e7f788a86241e9fe02a6760bf7c3d0c5637b7ad68c7f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6369</id>
    <title>Moderate: qt5 security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:13:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5 security and bug fix update</summary>
    <description>Qt is a software toolkit for developing applications.

Security Fix(es):

* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)
* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)
* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)
* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)
* qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6369" id="RHSA-2023:6369" type="rhsa" title="RHSA-2023:6369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32573" id="CVE-2023-32573" type="cve" title="CVE-2023-32573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33285" id="CVE-2023-33285" type="cve" title="CVE-2023-33285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34410" id="CVE-2023-34410" type="cve" title="CVE-2023-34410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37369" id="CVE-2023-37369" type="cve" title="CVE-2023-37369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38197" id="CVE-2023-38197" type="cve" title="CVE-2023-38197"/>
      <reference href="https://bugzilla.redhat.com/2208135" id="2208135" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209488" id="2209488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212747" id="2212747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222767" id="2222767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2232173" id="2232173" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6369.html" id="ALSA-2023:6369" type="self" title="ALSA-2023:6369"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="qt5" version="5.15.9" release="1.el9" epoch="0" arch="noarch" src="qt5-5.15.9-1.el9.src.rpm">
          <filename>qt5-5.15.9-1.el9.noarch.rpm</filename>
          <sum type="sha256">1f03d500ce4714c52ed14b451049fb3d7f5102f275757c4803eeb326399f2988</sum>
        </package>
        <package name="qt5-qtbase-postgresql" version="5.15.9" release="7.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-7.el9.src.rpm">
          <filename>qt5-qtbase-postgresql-5.15.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">319d8ac95e2ea6c2fb8ed10599e0bcb94e4cc5ee13820eeafdf5a1c3fe907bbb</sum>
        </package>
        <package name="qt5-qtbase-gui" version="5.15.9" release="7.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-7.el9.src.rpm">
          <filename>qt5-qtbase-gui-5.15.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">46257ad4d49a0275020c564abbc38f25e0962e82aba035007e606f2be41cd9f2</sum>
        </package>
        <package name="qt5-rpm-macros" version="5.15.9" release="1.el9" epoch="0" arch="noarch" src="qt5-5.15.9-1.el9.src.rpm">
          <filename>qt5-rpm-macros-5.15.9-1.el9.noarch.rpm</filename>
          <sum type="sha256">85144a67944d2d6c361c5da835b48399ff7ca39422027661915f58d0a7389f65</sum>
        </package>
        <package name="qt5-qtbase-private-devel" version="5.15.9" release="7.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-7.el9.src.rpm">
          <filename>qt5-qtbase-private-devel-5.15.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">97d6f48bf8a08e68e824874c2de6287fb6ec3366cb4b140f6a8adfdd62f59e46</sum>
        </package>
        <package name="qt5-qtbase-odbc" version="5.15.9" release="7.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-7.el9.src.rpm">
          <filename>qt5-qtbase-odbc-5.15.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">9c1b3e02464f37902d1ff8b11e542216ccf7df2473f67df27bd77415240aedc8</sum>
        </package>
        <package name="qt5-qtbase-devel" version="5.15.9" release="7.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-7.el9.src.rpm">
          <filename>qt5-qtbase-devel-5.15.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">af9749673a1ae03ac6142b58f9fb2b437dbed89194b8d7f2c7dc9ee780bfee18</sum>
        </package>
        <package name="qt5-qtbase-common" version="5.15.9" release="7.el9" epoch="0" arch="noarch" src="qt5-qtbase-5.15.9-7.el9.src.rpm">
          <filename>qt5-qtbase-common-5.15.9-7.el9.noarch.rpm</filename>
          <sum type="sha256">b4c263414cb34747e04caa5ec17718554621b059ac6e2aec604a7834cb244a03</sum>
        </package>
        <package name="qt5-qtbase-mysql" version="5.15.9" release="7.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-7.el9.src.rpm">
          <filename>qt5-qtbase-mysql-5.15.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">b59b63955229ffdd50cc68218d12967f07c5edea6f1707bb3171da952a583940</sum>
        </package>
        <package name="qt5-srpm-macros" version="5.15.9" release="1.el9" epoch="0" arch="noarch" src="qt5-5.15.9-1.el9.src.rpm">
          <filename>qt5-srpm-macros-5.15.9-1.el9.noarch.rpm</filename>
          <sum type="sha256">c1f1403eebef89590fa960c668ba4b970b2cd83ca98034e4528831c1a05e8e78</sum>
        </package>
        <package name="qt5-qtbase" version="5.15.9" release="7.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-7.el9.src.rpm">
          <filename>qt5-qtbase-5.15.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">f57cd81888d1be534baf1a70890e8341047b98aa034c7155e5bb7d94d8160389</sum>
        </package>
        <package name="qt5-qtbase-examples" version="5.15.9" release="7.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-7.el9.src.rpm">
          <filename>qt5-qtbase-examples-5.15.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">fc383a116afa7bd16aa408efe9717c7d71fefa02f2f4bdf02eacdee25815e719</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6371</id>
    <title>Moderate: cloud-init security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cloud-init security, bug fix, and enhancement update</summary>
    <description>The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts.

Security Fix(es):

* cloud-init: sensitive data could be exposed in logs (CVE-2023-1786)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6371" id="RHSA-2023:6371" type="rhsa" title="RHSA-2023:6371"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1786" id="CVE-2023-1786" type="cve" title="CVE-2023-1786"/>
      <reference href="https://bugzilla.redhat.com/2190079" id="2190079" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6371.html" id="ALSA-2023:6371" type="self" title="ALSA-2023:6371"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="cloud-init" version="23.1.1" release="11.el9.alma.1" epoch="0" arch="noarch" src="cloud-init-23.1.1-11.el9.alma.1.src.rpm">
          <filename>cloud-init-23.1.1-11.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">6543f9ac6dcf5896078fa6905c1b1017b73bd5ecc60d43d41be4af868aff8d4e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6372</id>
    <title>Low: gdb security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:11:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>gdb security update</summary>
    <description>The GNU Debugger (GDB) allows users to debug programs written in various programming languages including C, C++, and Fortran. 

Security Fix(es):

* libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c (CVE-2021-3826)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6372" id="RHSA-2023:6372" type="rhsa" title="RHSA-2023:6372"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3826" id="CVE-2021-3826" type="cve" title="CVE-2021-3826"/>
      <reference href="https://bugzilla.redhat.com/2122627" id="2122627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6372.html" id="ALSA-2023:6372" type="self" title="ALSA-2023:6372"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="gdb-gdbserver" version="10.2" release="11.el9" epoch="0" arch="s390x" src="gdb-10.2-11.el9.src.rpm">
          <filename>gdb-gdbserver-10.2-11.el9.s390x.rpm</filename>
          <sum type="sha256">40af26097c2ebc46560021e1655fc93c516a7318f0e03a8e640b72a67c86eec1</sum>
        </package>
        <package name="gdb-doc" version="10.2" release="11.el9" epoch="0" arch="noarch" src="gdb-10.2-11.el9.src.rpm">
          <filename>gdb-doc-10.2-11.el9.noarch.rpm</filename>
          <sum type="sha256">4f4578cb4c9bb950fd98a4091523de664e12486835a8a6f75653a2e05c5d0f21</sum>
        </package>
        <package name="gdb-minimal" version="10.2" release="11.el9" epoch="0" arch="s390x" src="gdb-10.2-11.el9.src.rpm">
          <filename>gdb-minimal-10.2-11.el9.s390x.rpm</filename>
          <sum type="sha256">84062532e8836ca97ea73d9e52f53787921982bc03e790a3ebd0e83c45956e50</sum>
        </package>
        <package name="gdb-headless" version="10.2" release="11.el9" epoch="0" arch="s390x" src="gdb-10.2-11.el9.src.rpm">
          <filename>gdb-headless-10.2-11.el9.s390x.rpm</filename>
          <sum type="sha256">bd2fe85ad3b617376886f3f8ac0c16f88a52f0bf44ad0652a7d800bbaaffc00e</sum>
        </package>
        <package name="gdb" version="10.2" release="11.el9" epoch="0" arch="s390x" src="gdb-10.2-11.el9.src.rpm">
          <filename>gdb-10.2-11.el9.s390x.rpm</filename>
          <sum type="sha256">e5794338f8db10c6fca194dc334fb3ea2d40ef2c216d7ed2519d80f6b1e4f866</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6380</id>
    <title>Moderate: runc security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>runc security update</summary>
    <description>The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.

Security Fix(es):

* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)
* runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809)
* runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561)
* runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642)
* runc: integer overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration (CVE-2021-43784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6380" id="RHSA-2023:6380" type="rhsa" title="RHSA-2023:6380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-43784" id="CVE-2021-43784" type="cve" title="CVE-2021-43784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41724" id="CVE-2022-41724" type="cve" title="CVE-2022-41724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25809" id="CVE-2023-25809" type="cve" title="CVE-2023-25809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27561" id="CVE-2023-27561" type="cve" title="CVE-2023-27561"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28642" id="CVE-2023-28642" type="cve" title="CVE-2023-28642"/>
      <reference href="https://bugzilla.redhat.com/2029439" id="2029439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175721" id="2175721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178492" id="2178492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2182883" id="2182883" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2182884" id="2182884" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6380.html" id="ALSA-2023:6380" type="self" title="ALSA-2023:6380"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="runc" version="1.1.9" release="1.el9" epoch="4" arch="s390x" src="runc-1.1.9-1.el9.src.rpm">
          <filename>runc-1.1.9-1.el9.s390x.rpm</filename>
          <sum type="sha256">102467e9862bad192c97eb3de75efecea26bb4528b4498efb991d8bdcc8457de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6385</id>
    <title>Moderate: liblouis security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>liblouis security update</summary>
    <description>Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, supports contracted and uncontracted translation for many languages and has support for hyphenation. New languages can easily be added through tables that support a rule or dictionary based approach. Liblouis also supports math braille (Nemeth and Marburg).

Security Fix(es):

* liblouis: buffer overflow in lou_logFile function at logginc.c (CVE-2023-26767)
* liblouis: buffer overflow in lou_setDataPath (CVE-2023-26768)
* liblouis: buffer overflow in Lou_Trace (CVE-2023-26769)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6385" id="RHSA-2023:6385" type="rhsa" title="RHSA-2023:6385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-26767" id="CVE-2023-26767" type="cve" title="CVE-2023-26767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-26768" id="CVE-2023-26768" type="cve" title="CVE-2023-26768"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-26769" id="CVE-2023-26769" type="cve" title="CVE-2023-26769"/>
      <reference href="https://bugzilla.redhat.com/2181135" id="2181135" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2181139" id="2181139" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2181143" id="2181143" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6385.html" id="ALSA-2023:6385" type="self" title="ALSA-2023:6385"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="liblouis" version="3.16.1" release="5.el9" epoch="0" arch="s390x" src="liblouis-3.16.1-5.el9.src.rpm">
          <filename>liblouis-3.16.1-5.el9.s390x.rpm</filename>
          <sum type="sha256">926032d17ebdce811044949c09e26bbac6ea4536542761221a2a20ce41760f03</sum>
        </package>
        <package name="python3-louis" version="3.16.1" release="5.el9" epoch="0" arch="noarch" src="liblouis-3.16.1-5.el9.src.rpm">
          <filename>python3-louis-3.16.1-5.el9.noarch.rpm</filename>
          <sum type="sha256">dd703bb9638c42a1ee89c9b39b2a03a38401268451406ff132cd8470daa88d78</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6402</id>
    <title>Moderate: containernetworking-plugins security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>containernetworking-plugins security and bug fix update</summary>
    <description>The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. 

Security Fix(es):

* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)
* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)
* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)
* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)
* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)
* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)
* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)
* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)
* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)
* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6402" id="RHSA-2023:6402" type="rhsa" title="RHSA-2023:6402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41723" id="CVE-2022-41723" type="cve" title="CVE-2022-41723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41724" id="CVE-2022-41724" type="cve" title="CVE-2022-41724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41725" id="CVE-2022-41725" type="cve" title="CVE-2022-41725"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24534" id="CVE-2023-24534" type="cve" title="CVE-2023-24534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24536" id="CVE-2023-24536" type="cve" title="CVE-2023-24536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24538" id="CVE-2023-24538" type="cve" title="CVE-2023-24538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24539" id="CVE-2023-24539" type="cve" title="CVE-2023-24539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24540" id="CVE-2023-24540" type="cve" title="CVE-2023-24540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29400" id="CVE-2023-29400" type="cve" title="CVE-2023-29400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29406" id="CVE-2023-29406" type="cve" title="CVE-2023-29406"/>
      <reference href="https://bugzilla.redhat.com/2178358" id="2178358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178488" id="2178488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178492" id="2178492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184481" id="2184481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184482" id="2184482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184483" id="2184483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196026" id="2196026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196027" id="2196027" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196029" id="2196029" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222167" id="2222167" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6402.html" id="ALSA-2023:6402" type="self" title="ALSA-2023:6402"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="containernetworking-plugins" version="1.3.0" release="4.el9" epoch="1" arch="s390x" src="containernetworking-plugins-1.3.0-4.el9.src.rpm">
          <filename>containernetworking-plugins-1.3.0-4.el9.s390x.rpm</filename>
          <sum type="sha256">bfcd219a406229b3060f13e4d71998053f33abfbda467fece383d54d45a4f4fe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6403</id>
    <title>Moderate: httpd and mod_http2 security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:12:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>httpd and mod_http2 security, bug fix, and enhancement update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

The following packages have been upgraded to a later upstream version: httpd (2.4.57). (BZ#2184403)

Security Fix(es):

* httpd: mod_proxy_uwsgi HTTP response splitting (CVE-2023-27522)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6403" id="RHSA-2023:6403" type="rhsa" title="RHSA-2023:6403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27522" id="CVE-2023-27522" type="cve" title="CVE-2023-27522"/>
      <reference href="https://bugzilla.redhat.com/2176211" id="2176211" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6403.html" id="ALSA-2023:6403" type="self" title="ALSA-2023:6403"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="mod_session" version="2.4.57" release="5.el9" epoch="0" arch="s390x" src="httpd-2.4.57-5.el9.src.rpm">
          <filename>mod_session-2.4.57-5.el9.s390x.rpm</filename>
          <sum type="sha256">1f73c7083475a68f53369bb6038b22f24051e80b6b6e781baf1e9328a588fc1b</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.57" release="5.el9" epoch="0" arch="noarch" src="httpd-2.4.57-5.el9.src.rpm">
          <filename>httpd-filesystem-2.4.57-5.el9.noarch.rpm</filename>
          <sum type="sha256">32e094505ffe7810a951b4ad337509c1d1dfda74acf8509405d2053e224a57e9</sum>
        </package>
        <package name="httpd-devel" version="2.4.57" release="5.el9" epoch="0" arch="s390x" src="httpd-2.4.57-5.el9.src.rpm">
          <filename>httpd-devel-2.4.57-5.el9.s390x.rpm</filename>
          <sum type="sha256">43c9c5574009e43b8ba80d546f763c2cf83748a97b9e23b1ac19eb9aeecb2956</sum>
        </package>
        <package name="mod_ssl" version="2.4.57" release="5.el9" epoch="1" arch="s390x" src="httpd-2.4.57-5.el9.src.rpm">
          <filename>mod_ssl-2.4.57-5.el9.s390x.rpm</filename>
          <sum type="sha256">4d36b621bd9d978b8b6daf6189320ee3a3ba9bd088456169735cd93fef4bf36b</sum>
        </package>
        <package name="mod_lua" version="2.4.57" release="5.el9" epoch="0" arch="s390x" src="httpd-2.4.57-5.el9.src.rpm">
          <filename>mod_lua-2.4.57-5.el9.s390x.rpm</filename>
          <sum type="sha256">69888c47bebd744947616b741906c02798b0177586e89028a2905e9219fa79a6</sum>
        </package>
        <package name="httpd-core" version="2.4.57" release="5.el9" epoch="0" arch="s390x" src="httpd-2.4.57-5.el9.src.rpm">
          <filename>httpd-core-2.4.57-5.el9.s390x.rpm</filename>
          <sum type="sha256">6b942da85b3278ca2aee2b5b046d07ae94d889f52691b95e3c4fb578e16b6561</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.57" release="5.el9" epoch="1" arch="s390x" src="httpd-2.4.57-5.el9.src.rpm">
          <filename>mod_proxy_html-2.4.57-5.el9.s390x.rpm</filename>
          <sum type="sha256">9c2f766d96d862ce35eaf3d972bfec059026012c74753fbfb3bf6d8ffb3f87f5</sum>
        </package>
        <package name="httpd-tools" version="2.4.57" release="5.el9" epoch="0" arch="s390x" src="httpd-2.4.57-5.el9.src.rpm">
          <filename>httpd-tools-2.4.57-5.el9.s390x.rpm</filename>
          <sum type="sha256">a582c16d641ecc3a42a1fafd3ac391d74f13bdb078c1e69f90822148cf39a4c1</sum>
        </package>
        <package name="httpd-manual" version="2.4.57" release="5.el9" epoch="0" arch="noarch" src="httpd-2.4.57-5.el9.src.rpm">
          <filename>httpd-manual-2.4.57-5.el9.noarch.rpm</filename>
          <sum type="sha256">b242a56538be35818ce6fd9ce455c42ad770d5e54f8cc7c8d1b8d971b70f7972</sum>
        </package>
        <package name="httpd" version="2.4.57" release="5.el9" epoch="0" arch="s390x" src="httpd-2.4.57-5.el9.src.rpm">
          <filename>httpd-2.4.57-5.el9.s390x.rpm</filename>
          <sum type="sha256">c2c127da2e5da4a4c8e5f369b4229736548b0a80e3b94e1a0944fa510ffbbdcc</sum>
        </package>
        <package name="mod_ldap" version="2.4.57" release="5.el9" epoch="0" arch="s390x" src="httpd-2.4.57-5.el9.src.rpm">
          <filename>mod_ldap-2.4.57-5.el9.s390x.rpm</filename>
          <sum type="sha256">e9937febf6e6d32819bd1ceb00a52bdd2586e668ded3690906d952823fcd5fec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6409</id>
    <title>Moderate: libvirt security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:11:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security, bug fix, and enhancement update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

The following packages have been upgraded to a later upstream version: libvirt (9.5.0). (BZ#2175785)

Security Fix(es):

* libvirt: improper locking in virStoragePoolObjListSearch may lead to denial of service (CVE-2023-3750)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6409" id="RHSA-2023:6409" type="rhsa" title="RHSA-2023:6409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3750" id="CVE-2023-3750" type="cve" title="CVE-2023-3750"/>
      <reference href="https://bugzilla.redhat.com/2222210" id="2222210" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6409.html" id="ALSA-2023:6409" type="self" title="ALSA-2023:6409"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libvirt-daemon-kvm" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-kvm-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">13cbaa9d1e188ddb899c7ceedb69408bd2528f3a5433a699aced6bc19618b94c</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-interface-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">2cf6fd0f7e69c8c89271ad56f004be3b541c2e305933a6f4d7022b72a4e1b20a</sum>
        </package>
        <package name="libvirt-libs" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-libs-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">2f3e1a8caeb6ab2adb97682a88dfa78c9948b1c28679858040b644585eef857e</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">35334ba2daa5a27778df5a1f061d3f9047f9494029fdc0cffdc7b67de9bb3803</sum>
        </package>
        <package name="libvirt-daemon-plugin-lockd" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-lockd-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">385174cf6899ced5037ceb518af8bf86bf124e3948329c3ae85830af3e88fc8b</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">3b8fa22a98e8b462b91107b6ba0a3d2f548ec991b9fb65b319bb80df41bb64a7</sum>
        </package>
        <package name="libvirt-client" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-client-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">3c14cb14eaf87b4861e99895d266322f7a670cdc5023bbc7fb1bba80c373347e</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">425c9bafe5a1369450dd20081f0f998fad0c996522da9b2e10f1ad28aeb8726a</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">5152a9d53c4bbcf0c7265263b2d4e167d607e949416a51b4f540be746cee4cde</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-qemu-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">67db680246bd3740f724162b451b54c4e10af5f3390a547f89f8148b58815f3c</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">72e63a20db52a5086ef8c115adb4e369f7abc7b7cd58a997159d78354008e5d1</sum>
        </package>
        <package name="libvirt-daemon-lock" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-lock-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">7f10b74a041d9caedfd500289397d08d22f45838cdd696782311378bda97603d</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-config-network-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">859e823b78b9f93e92180762ade600d7aedb5ae65c451617820d2cfc706fe74c</sum>
        </package>
        <package name="libvirt-daemon-log" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-log-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">8bd92777602177509220973c656f545f043f4ecd00720b280570bcb478aea03a</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">914099b72dcd47a8cb20816ef18039b4b2c3c241e46c07dce235f207eae622fb</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">97679ac6b8d79d5083ef61282cac479da786fb34245904e5a7e227e94d3375df</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">9d3cead4395697f971a425dc3e99feb9bf8fa26125b8b1be27b5bb79961811ae</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">b348c6a0906217f8d38445f95d7bb1afa23db44c66439b1252d322803a364e38</sum>
        </package>
        <package name="libvirt" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">b412f5ee21171cb851a7f461055bccb9a843b7a2a2cc4d684c5205781857e543</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">b706ebcda40089d29f587791949f690d4b9840fe61c8958d37bca81fb2f84dfc</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-secret-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">b9ca292b3b0db78ec59feb9e07e15ce608f877eeb3b6641cdda5aa51664f8ffa</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">d468ab514e01e6dc67d35535d33a2608b567c1bd98efc0bc605743d741bbb414</sum>
        </package>
        <package name="libvirt-daemon" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">d949e095ff4952c745a3401c74a532965688987fe9d82701accc61787624b79f</sum>
        </package>
        <package name="libvirt-daemon-proxy" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-proxy-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">df5302df08d2d0d4caa8e673f9278f8a6fcacdf245e30c178ebef900fe612819</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-network-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">e1bb18dd39d9b7641b78d0ae6576e0eac1be04e734a423837d376787dcfcf67a</sum>
        </package>
        <package name="libvirt-nss" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-nss-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">ea0573f89f0a64bd9f63698bacc0c0d89e5289f2eae649ad633def740db2eef6</sum>
        </package>
        <package name="libvirt-daemon-common" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-common-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">ff80c28e96c1aa819b2ac53662e5503f7ff61f53ffabb74c68c5e2f948be0b7b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6420</id>
    <title>Moderate: grafana security and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security and enhancement update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB. 

Security Fix(es):

* grafana: persistent xss in grafana core plugins (CVE-2022-23552)
* grafana: plugin signature bypass (CVE-2022-31123)
* grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins (CVE-2022-31130)
* grafana: Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins (CVE-2022-39201)
* grafana: email addresses and usernames cannot be trusted (CVE-2022-39306)
* grafana: User enumeration via forget password (CVE-2022-39307)
* grafana: Spoofing of the originalUrl parameter of snapshots (CVE-2022-39324)
* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6420" id="RHSA-2023:6420" type="rhsa" title="RHSA-2023:6420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23552" id="CVE-2022-23552" type="cve" title="CVE-2022-23552"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31123" id="CVE-2022-31123" type="cve" title="CVE-2022-31123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31130" id="CVE-2022-31130" type="cve" title="CVE-2022-31130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39201" id="CVE-2022-39201" type="cve" title="CVE-2022-39201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39306" id="CVE-2022-39306" type="cve" title="CVE-2022-39306"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39307" id="CVE-2022-39307" type="cve" title="CVE-2022-39307"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39324" id="CVE-2022-39324" type="cve" title="CVE-2022-39324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41717" id="CVE-2022-41717" type="cve" title="CVE-2022-41717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24534" id="CVE-2023-24534" type="cve" title="CVE-2023-24534"/>
      <reference href="https://bugzilla.redhat.com/2131146" id="2131146" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2131147" id="2131147" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2131148" id="2131148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2138014" id="2138014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2138015" id="2138015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2148252" id="2148252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2158420" id="2158420" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161274" id="2161274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184483" id="2184483" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6420.html" id="ALSA-2023:6420" type="self" title="ALSA-2023:6420"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="grafana" version="9.2.10" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="grafana-9.2.10-7.el9_3.alma.1.src.rpm">
          <filename>grafana-9.2.10-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">5d80796062db2034a000a3b5525d8596f183e5630674668a3c55db728e405738</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6429</id>
    <title>Low: libpq security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libpq security update</summary>
    <description>The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. 

Security Fix(es):

* postgresql: Client memory disclosure when connecting with Kerberos to modified server (CVE-2022-41862)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6429" id="RHSA-2023:6429" type="rhsa" title="RHSA-2023:6429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41862" id="CVE-2022-41862" type="cve" title="CVE-2022-41862"/>
      <reference href="https://bugzilla.redhat.com/2165722" id="2165722" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6429.html" id="ALSA-2023:6429" type="self" title="ALSA-2023:6429"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libpq" version="13.11" release="1.el9" epoch="0" arch="s390x" src="libpq-13.11-1.el9.src.rpm">
          <filename>libpq-13.11-1.el9.s390x.rpm</filename>
          <sum type="sha256">6c22bf505478f0159651c22aae97df04ef82bcf8de6ce2043ec9046c98fa8213</sum>
        </package>
        <package name="libpq-devel" version="13.11" release="1.el9" epoch="0" arch="s390x" src="libpq-13.11-1.el9.src.rpm">
          <filename>libpq-devel-13.11-1.el9.s390x.rpm</filename>
          <sum type="sha256">8b3f4f98467e08f776c8cf86fb313340709ef5c6b48d748176ec1a0d5a8b7f9a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6431</id>
    <title>Moderate: libfastjson security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:10"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libfastjson security update</summary>
    <description>The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert JSON-formatted strings back to the C representation of JSON objects.

Security Fix(es):

* json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6431" id="RHSA-2023:6431" type="rhsa" title="RHSA-2023:6431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-12762" id="CVE-2020-12762" type="cve" title="CVE-2020-12762"/>
      <reference href="https://bugzilla.redhat.com/1835253" id="1835253" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6431.html" id="ALSA-2023:6431" type="self" title="ALSA-2023:6431"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libfastjson" version="0.99.9" release="5.el9" epoch="0" arch="s390x" src="libfastjson-0.99.9-5.el9.src.rpm">
          <filename>libfastjson-0.99.9-5.el9.s390x.rpm</filename>
          <sum type="sha256">3d9f1c33bd8fe9048cf76b2b238c0a4a9754057e515e32e27a74a2ce164ebac4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6434</id>
    <title>Moderate: frr security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>frr security and bug fix update</summary>
    <description>FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. 

Security Fix(es):

* frr: Reachable assertion in peek_for_as4_capability function (CVE-2022-36440)
* frr: denial of service by crafting a BGP OPEN message with an option of type 0xff (CVE-2022-40302)
* frr: denial of service by crafting a BGP OPEN message with an option of type in bgp_open_option_parse in the bgp_open.c 0xff (CVE-2022-40318)
* frr: out-of-bounds read exists in the BGP daemon of FRRouting (CVE-2022-43681)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6434" id="RHSA-2023:6434" type="rhsa" title="RHSA-2023:6434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36440" id="CVE-2022-36440" type="cve" title="CVE-2022-36440"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40302" id="CVE-2022-40302" type="cve" title="CVE-2022-40302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40318" id="CVE-2022-40318" type="cve" title="CVE-2022-40318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43681" id="CVE-2022-43681" type="cve" title="CVE-2022-43681"/>
      <reference href="https://bugzilla.redhat.com/2184468" id="2184468" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196088" id="2196088" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196090" id="2196090" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196091" id="2196091" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6434.html" id="ALSA-2023:6434" type="self" title="ALSA-2023:6434"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="frr" version="8.3.1" release="11.el9_3.alma.1" epoch="0" arch="s390x" src="frr-8.3.1-11.el9_3.alma.1.src.rpm">
          <filename>frr-8.3.1-11.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">58892c0a844aacfe87875a5d9072242ec842d9603da4021cea9d8e91033cb280</sum>
        </package>
        <package name="frr-selinux" version="8.3.1" release="11.el9_3.alma.1" epoch="0" arch="noarch" src="frr-8.3.1-11.el9_3.alma.1.src.rpm">
          <filename>frr-selinux-8.3.1-11.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">870b0f8fe1790980445cc04b697f5bc1d76221d1f374500912df87374d47bb49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6469</id>
    <title>Moderate: wireshark security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:36"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

* wireshark: RTPS dissector crash (CVE-2023-0666)
* wireshark: IEEE C37.118 Synchrophasor dissector crash (CVE-2023-0668)
* wireshark: Candump log file parser crash (CVE-2023-2855)
* wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856)
* wireshark: NetScaler file parser crash (CVE-2023-2858)
* wireshark: XRA dissector infinite loop (CVE-2023-2952)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6469" id="RHSA-2023:6469" type="rhsa" title="RHSA-2023:6469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0666" id="CVE-2023-0666" type="cve" title="CVE-2023-0666"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0668" id="CVE-2023-0668" type="cve" title="CVE-2023-0668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2855" id="CVE-2023-2855" type="cve" title="CVE-2023-2855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2856" id="CVE-2023-2856" type="cve" title="CVE-2023-2856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2858" id="CVE-2023-2858" type="cve" title="CVE-2023-2858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2952" id="CVE-2023-2952" type="cve" title="CVE-2023-2952"/>
      <reference href="https://bugzilla.redhat.com/2210822" id="2210822" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210824" id="2210824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210829" id="2210829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210832" id="2210832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210835" id="2210835" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211406" id="2211406" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6469.html" id="ALSA-2023:6469" type="self" title="ALSA-2023:6469"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="wireshark" version="3.4.10" release="6.el9" epoch="1" arch="s390x" src="wireshark-3.4.10-6.el9.src.rpm">
          <filename>wireshark-3.4.10-6.el9.s390x.rpm</filename>
          <sum type="sha256">4c97f3a779880e3f96062ac21db0cc2856e366061fabf148ff617c6f56176499</sum>
        </package>
        <package name="wireshark-cli" version="3.4.10" release="6.el9" epoch="1" arch="s390x" src="wireshark-3.4.10-6.el9.src.rpm">
          <filename>wireshark-cli-3.4.10-6.el9.s390x.rpm</filename>
          <sum type="sha256">83f86c802d1e0ea0b497a5dee7aeb456fbc5c8c927525d3d70b563572c8922c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6473</id>
    <title>Moderate: buildah security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:37"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. 

Security Fix(es):

* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)
* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)
* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)
* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)
* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)
* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)
* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)
* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)
* containerd: Supplementary groups are not set up properly (CVE-2023-25173)
* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)
* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6473" id="RHSA-2023:6473" type="rhsa" title="RHSA-2023:6473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41723" id="CVE-2022-41723" type="cve" title="CVE-2022-41723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41724" id="CVE-2022-41724" type="cve" title="CVE-2022-41724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41725" id="CVE-2022-41725" type="cve" title="CVE-2022-41725"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24534" id="CVE-2023-24534" type="cve" title="CVE-2023-24534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24536" id="CVE-2023-24536" type="cve" title="CVE-2023-24536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24538" id="CVE-2023-24538" type="cve" title="CVE-2023-24538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24539" id="CVE-2023-24539" type="cve" title="CVE-2023-24539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24540" id="CVE-2023-24540" type="cve" title="CVE-2023-24540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25173" id="CVE-2023-25173" type="cve" title="CVE-2023-25173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29400" id="CVE-2023-29400" type="cve" title="CVE-2023-29400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29406" id="CVE-2023-29406" type="cve" title="CVE-2023-29406"/>
      <reference href="https://bugzilla.redhat.com/2174485" id="2174485" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178358" id="2178358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178488" id="2178488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178492" id="2178492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184481" id="2184481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184482" id="2184482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184483" id="2184483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196026" id="2196026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196027" id="2196027" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196029" id="2196029" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222167" id="2222167" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6473.html" id="ALSA-2023:6473" type="self" title="ALSA-2023:6473"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="buildah-tests" version="1.31.3" release="1.el9" epoch="1" arch="s390x" src="buildah-1.31.3-1.el9.src.rpm">
          <filename>buildah-tests-1.31.3-1.el9.s390x.rpm</filename>
          <sum type="sha256">3a79731fe89a2654eedf723e3d6fdd5a725d8a18bb26a72076adf4edef20db72</sum>
        </package>
        <package name="buildah" version="1.31.3" release="1.el9" epoch="1" arch="s390x" src="buildah-1.31.3-1.el9.src.rpm">
          <filename>buildah-1.31.3-1.el9.s390x.rpm</filename>
          <sum type="sha256">6cfd3c4afa6aa431eadfec755903e5c44e3975e118bd2ccf795415aeaa811afb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6474</id>
    <title>Moderate: podman security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>podman security, bug fix, and enhancement update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)
* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)
* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)
* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)
* golang.org/x/net/html: Cross site scripting (CVE-2023-3978)
* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)
* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)
* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)
* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)
* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)
* containerd: Supplementary groups are not set up properly (CVE-2023-25173)
* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)
* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6474" id="RHSA-2023:6474" type="rhsa" title="RHSA-2023:6474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41723" id="CVE-2022-41723" type="cve" title="CVE-2022-41723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41724" id="CVE-2022-41724" type="cve" title="CVE-2022-41724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41725" id="CVE-2022-41725" type="cve" title="CVE-2022-41725"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24534" id="CVE-2023-24534" type="cve" title="CVE-2023-24534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24536" id="CVE-2023-24536" type="cve" title="CVE-2023-24536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24537" id="CVE-2023-24537" type="cve" title="CVE-2023-24537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24538" id="CVE-2023-24538" type="cve" title="CVE-2023-24538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24539" id="CVE-2023-24539" type="cve" title="CVE-2023-24539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24540" id="CVE-2023-24540" type="cve" title="CVE-2023-24540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25173" id="CVE-2023-25173" type="cve" title="CVE-2023-25173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29400" id="CVE-2023-29400" type="cve" title="CVE-2023-29400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29406" id="CVE-2023-29406" type="cve" title="CVE-2023-29406"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3978" id="CVE-2023-3978" type="cve" title="CVE-2023-3978"/>
      <reference href="https://bugzilla.redhat.com/2174485" id="2174485" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178358" id="2178358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178488" id="2178488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178492" id="2178492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184481" id="2184481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184482" id="2184482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184483" id="2184483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184484" id="2184484" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196026" id="2196026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196027" id="2196027" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196029" id="2196029" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222167" id="2222167" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228689" id="2228689" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6474.html" id="ALSA-2023:6474" type="self" title="ALSA-2023:6474"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="podman-remote" version="4.6.1" release="5.el9" epoch="2" arch="s390x" src="podman-4.6.1-5.el9.src.rpm">
          <filename>podman-remote-4.6.1-5.el9.s390x.rpm</filename>
          <sum type="sha256">128193af1bfbb521a26c723bf36502c4c5fd42c023538cb0c716b59f1f4224b8</sum>
        </package>
        <package name="podman-tests" version="4.6.1" release="5.el9" epoch="2" arch="s390x" src="podman-4.6.1-5.el9.src.rpm">
          <filename>podman-tests-4.6.1-5.el9.s390x.rpm</filename>
          <sum type="sha256">1d890173bf8908df21913ac3997c644cfefca81044546187a0058544baa12421</sum>
        </package>
        <package name="podman-docker" version="4.6.1" release="5.el9" epoch="2" arch="noarch" src="podman-4.6.1-5.el9.src.rpm">
          <filename>podman-docker-4.6.1-5.el9.noarch.rpm</filename>
          <sum type="sha256">26f969f6a921d0cce1dc6f9a5627c4710c59afb8598dad1ecc10b200fd5ebf9c</sum>
        </package>
        <package name="podman-gvproxy" version="4.6.1" release="5.el9" epoch="2" arch="s390x" src="podman-4.6.1-5.el9.src.rpm">
          <filename>podman-gvproxy-4.6.1-5.el9.s390x.rpm</filename>
          <sum type="sha256">b51dff75c3a02c46dc3ba41deda364b7a2fc76912e2927a75e0cbb18e74f5549</sum>
        </package>
        <package name="podman" version="4.6.1" release="5.el9" epoch="2" arch="s390x" src="podman-4.6.1-5.el9.src.rpm">
          <filename>podman-4.6.1-5.el9.s390x.rpm</filename>
          <sum type="sha256">bc268eb1b926078b24832e271a5cd55a830e14ea6300e35ceaa3e73c5698d531</sum>
        </package>
        <package name="podman-plugins" version="4.6.1" release="5.el9" epoch="2" arch="s390x" src="podman-4.6.1-5.el9.src.rpm">
          <filename>podman-plugins-4.6.1-5.el9.s390x.rpm</filename>
          <sum type="sha256">f9a7ec6a193287326e5b7ad1ded73f97eaca35c21c5e587d3d87a81b2169d037</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6482</id>
    <title>Moderate: librabbitmq security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:37"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>librabbitmq security update</summary>
    <description>The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1.

Security Fix(es):

* rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6482" id="RHSA-2023:6482" type="rhsa" title="RHSA-2023:6482"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35789" id="CVE-2023-35789" type="cve" title="CVE-2023-35789"/>
      <reference href="https://bugzilla.redhat.com/2215762" id="2215762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6482.html" id="ALSA-2023:6482" type="self" title="ALSA-2023:6482"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="librabbitmq-tools" version="0.11.0" release="7.el9" epoch="0" arch="s390x" src="librabbitmq-0.11.0-7.el9.src.rpm">
          <filename>librabbitmq-tools-0.11.0-7.el9.s390x.rpm</filename>
          <sum type="sha256">742cd67b1f4176bdacfd16f4afa3f18ecd70631b9fe2f999e487ce8716674d8e</sum>
        </package>
        <package name="librabbitmq" version="0.11.0" release="7.el9" epoch="0" arch="s390x" src="librabbitmq-0.11.0-7.el9.src.rpm">
          <filename>librabbitmq-0.11.0-7.el9.s390x.rpm</filename>
          <sum type="sha256">ca6526bc24cda3289256c56cd2c5ba4b5cd3960a73777cd2bb274321377f10b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6492</id>
    <title>Moderate: tang security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tang security update</summary>
    <description>Tang is a server for binding data to network presence. It includes a daemon which provides cryptographic operations for binding to a remote service. The tang package provides the server side of the Network Bound Disk Encryption (NBDE) project.

Security Fix(es):

* tang: Race condition exists in the key generation and rotation functionality (CVE-2023-1672)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6492" id="RHSA-2023:6492" type="rhsa" title="RHSA-2023:6492"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1672" id="CVE-2023-1672" type="cve" title="CVE-2023-1672"/>
      <reference href="https://bugzilla.redhat.com/2180999" id="2180999" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6492.html" id="ALSA-2023:6492" type="self" title="ALSA-2023:6492"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="tang" version="14" release="2.el9" epoch="0" arch="s390x" src="tang-14-2.el9.src.rpm">
          <filename>tang-14-2.el9.s390x.rpm</filename>
          <sum type="sha256">da9d84cb8c5123cab67914e8618c3e47d4a4733c45f8934286d82d8a550275cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6494</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:06:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python3.11 (3.11.5). (BZ#2210785)

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)
* python: file path truncation at \0 characters (CVE-2023-41105)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6494" id="RHSA-2023:6494" type="rhsa" title="RHSA-2023:6494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41105" id="CVE-2023-41105" type="cve" title="CVE-2023-41105"/>
      <reference href="https://bugzilla.redhat.com/2235795" id="2235795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6494.html" id="ALSA-2023:6494" type="self" title="ALSA-2023:6494"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="python3.11" version="3.11.5" release="1.el9_3" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el9_3.src.rpm">
          <filename>python3.11-3.11.5-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">17e443f98b4b2ed83eb87130a602efaf1efe1f35897b37fadd81db455cf7c3fb</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.5" release="1.el9_3" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el9_3.src.rpm">
          <filename>python3.11-tkinter-3.11.5-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">7443a6dde107a5c228991f4eed766400aa1c5c6c86708b1606dfd0a563004d53</sum>
        </package>
        <package name="python3.11-devel" version="3.11.5" release="1.el9_3" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el9_3.src.rpm">
          <filename>python3.11-devel-3.11.5-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">a303c682533a5a4711afa7e1cef5d6821a41158dbb38e144b99ec9fd636cdd84</sum>
        </package>
        <package name="python3.11-libs" version="3.11.5" release="1.el9_3" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el9_3.src.rpm">
          <filename>python3.11-libs-3.11.5-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">e3c09331237cf35e3544e4f9db90633478ced3964b678bc02a02c6cfd03d4803</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2023:6496</id>
    <title>Moderate: haproxy security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>haproxy security and bug fix update</summary>
    <description>The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.

Security Fix(es):

* haproxy: data leak via fcgi requests (CVE-2023-0836)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6496" id="RHSA-2023:6496" type="rhsa" title="RHSA-2023:6496"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0836" id="CVE-2023-0836" type="cve" title="CVE-2023-0836"/>
      <reference href="https://bugzilla.redhat.com/2180746" id="2180746" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6496.html" id="ALSA-2023:6496" type="self" title="ALSA-2023:6496"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="haproxy" version="2.4.22" release="1.el9" epoch="0" arch="s390x" src="haproxy-2.4.22-1.el9.src.rpm">
          <filename>haproxy-2.4.22-1.el9.s390x.rpm</filename>
          <sum type="sha256">abe47794f88d02873a71baf72c9ebc945eee7617735fe571dff351ad30dd1760</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6497</id>
    <title>Moderate: libX11 security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:11:11"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libX11 security update</summary>
    <description>The libX11 packages contain the core X11 protocol client library.

Security Fix(es):

* libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow (CVE-2023-3138)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6497" id="RHSA-2023:6497" type="rhsa" title="RHSA-2023:6497"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3138" id="CVE-2023-3138" type="cve" title="CVE-2023-3138"/>
      <reference href="https://bugzilla.redhat.com/2213748" id="2213748" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6497.html" id="ALSA-2023:6497" type="self" title="ALSA-2023:6497"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libX11-common" version="1.7.0" release="8.el9" epoch="0" arch="noarch" src="libX11-1.7.0-8.el9.src.rpm">
          <filename>libX11-common-1.7.0-8.el9.noarch.rpm</filename>
          <sum type="sha256">0cbe5dfc32d4d9fd68abb0d3e4e891a8dc0382f63aca1d7ba16dc3ee21fa971c</sum>
        </package>
        <package name="libX11-xcb" version="1.7.0" release="8.el9" epoch="0" arch="s390x" src="libX11-1.7.0-8.el9.src.rpm">
          <filename>libX11-xcb-1.7.0-8.el9.s390x.rpm</filename>
          <sum type="sha256">3cc38d473bb53515111de9f45bd802bd54c5fc68cb3d7aa8d8256841b9ffae63</sum>
        </package>
        <package name="libX11" version="1.7.0" release="8.el9" epoch="0" arch="s390x" src="libX11-1.7.0-8.el9.src.rpm">
          <filename>libX11-1.7.0-8.el9.s390x.rpm</filename>
          <sum type="sha256">62724c202fef53d2a81bc626bc799ff10a535b5e1dd9e0b6710b74f023fecd67</sum>
        </package>
        <package name="libX11-devel" version="1.7.0" release="8.el9" epoch="0" arch="s390x" src="libX11-1.7.0-8.el9.src.rpm">
          <filename>libX11-devel-1.7.0-8.el9.s390x.rpm</filename>
          <sum type="sha256">d74ffeb74952731211990c3b4aafac378a50697b7b1b74c18c28455c59002a87</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6508</id>
    <title>Moderate: libreoffice security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:17:33"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Empty entry in Java class path (CVE-2022-38745)
* libreoffice: Array index underflow in Calc formula parsing (CVE-2023-0950)
* libreoffice: Arbitrary file write (CVE-2023-1183)
* libreoffice: Remote documents loaded without prompt via IFrame (CVE-2023-2255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6508" id="RHSA-2023:6508" type="rhsa" title="RHSA-2023:6508"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38745" id="CVE-2022-38745" type="cve" title="CVE-2022-38745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0950" id="CVE-2023-0950" type="cve" title="CVE-2023-0950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1183" id="CVE-2023-1183" type="cve" title="CVE-2023-1183"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2255" id="CVE-2023-2255" type="cve" title="CVE-2023-2255"/>
      <reference href="https://bugzilla.redhat.com/2182044" id="2182044" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2208506" id="2208506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210185" id="2210185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210186" id="2210186" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6508.html" id="ALSA-2023:6508" type="self" title="ALSA-2023:6508"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libreoffice-ogltrans" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-ogltrans-7.1.8.1-11.el9.alma.s390x.rpm</filename>
          <sum type="sha256">1065fa48cf988fae48161cb3157410a9d292d111161dac0b21e4e4837b729431</sum>
        </package>
        <package name="autocorr-it" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-it-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">175366613442c2ede926c09391f3770d8eb7ccb977987d9d20c3e8da9660988d</sum>
        </package>
        <package name="libreoffice-help-en" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-help-en-7.1.8.1-11.el9.alma.s390x.rpm</filename>
          <sum type="sha256">175e2c9893e35f957dec44907190ed81e932b6cea3d3a25971aa3abd5c3ca5f6</sum>
        </package>
        <package name="libreoffice-pdfimport" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-pdfimport-7.1.8.1-11.el9.alma.s390x.rpm</filename>
          <sum type="sha256">180acf338c9f24a88ad3758a7f6846fb85385b7265ce87a0b6a7ee3d8a308380</sum>
        </package>
        <package name="autocorr-sv" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-sv-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">1b7dd0cd6bb741b1562ac7be47182262e78d08c6f2ee20ac115bfde2f7ab8423</sum>
        </package>
        <package name="libreoffice-core" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-core-7.1.8.1-11.el9.alma.s390x.rpm</filename>
          <sum type="sha256">1c0986cc844ba51984e4aee1992969cc7ab61b74a5042acbd3a9bf8ac90d9397</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-graphicfilter-7.1.8.1-11.el9.alma.s390x.rpm</filename>
          <sum type="sha256">1c40c0c1e7f9243efae6a83e7ee1b01d6c4a7f14c5178242ce2c4bce3f711af2</sum>
        </package>
        <package name="libreoffice-calc" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-calc-7.1.8.1-11.el9.alma.s390x.rpm</filename>
          <sum type="sha256">286ddac5c26caae1e405182a28391519b918ac20f5721dd15bb6f9c4d75eaf79</sum>
        </package>
        <package name="libreoffice-data" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-data-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">33ef81fbfdaec7ebca6459a959adfc5c49c9dbb53f751e330fcc3e0ee525602c</sum>
        </package>
        <package name="autocorr-fa" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-fa-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">3469e833acb24319587667bc6104ddc4fc10eb8e0e6d73abdb9f2fe34fe8c0a3</sum>
        </package>
        <package name="libreoffice-ure-common" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-ure-common-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">39f23bab4dd7afbd82b9ec80279ec948c75b5a5eff554c0296bd1f94aa2c4bdd</sum>
        </package>
        <package name="libreoffice-langpack-en" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-langpack-en-7.1.8.1-11.el9.alma.s390x.rpm</filename>
          <sum type="sha256">3d384a5aa85bb7d65a1942f351b05b04e1aeb1b030bab9c98dc4a73bd0adbf1d</sum>
        </package>
        <package name="autocorr-dsb" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-dsb-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">48dcfc54fad03b1e2c99903b276fcafc6c853000db1e1c50e6fa0067b3db25c0</sum>
        </package>
        <package name="autocorr-vro" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-vro-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">4bd307452231df9c79f3d319e8b90a39a6fdfdb9f580064aa55870acfe37c597</sum>
        </package>
        <package name="autocorr-en" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-en-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">4de5a01d8a169ea663b8abc6ce726ccc47687d4c329364934db81179cb50c9a3</sum>
        </package>
        <package name="autocorr-mn" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-mn-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">52ec501acbfc74b8c268aea934283ae1a4e744b6f6074d6922172f041fac1aaa</sum>
        </package>
        <package name="autocorr-hsb" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-hsb-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">530beb7dd3075435af495db66c9aae85735e2d90f02613e5181df1ee93fa4784</sum>
        </package>
        <package name="autocorr-bg" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-bg-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">543673bc32f764072de6dd9d1b705f28fdb12b7371ab80946b0d200ec2aeda1f</sum>
        </package>
        <package name="libreoffice-impress" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-impress-7.1.8.1-11.el9.alma.s390x.rpm</filename>
          <sum type="sha256">5ae35f644fa325fb4e2102a5a476bcbdd85cc72192e2f324bd935d67d584236a</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-opensymbol-fonts-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">5b28f3e4cc56536c59b7ee350ed1842389600a960bbf800f4f95f955fbafb2cf</sum>
        </package>
        <package name="autocorr-ko" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-ko-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">5b700bf1b80045ba9cf77bdba5e96c1bf73d7fb815f735afac33c3257d163bb9</sum>
        </package>
        <package name="autocorr-sk" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-sk-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">63a8bb4eab3dd91cc979d5fe389e4abc614b0fb700531af4350283926635bb19</sum>
        </package>
        <package name="autocorr-tr" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-tr-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">684ceb063ed841f665d74c6925c00fe435b6a98c0a989bc7a9424f44f0c13e6e</sum>
        </package>
        <package name="autocorr-vi" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-vi-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">6d075ef8345ff0d72a6becb9c3f39ee2338d4584f84987d3ac43022b55508628</sum>
        </package>
        <package name="autocorr-nl" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-nl-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">735ec826a1750551969f7c4e0a21f075edb10f73a702e51652b2d662f4ba31a6</sum>
        </package>
        <package name="autocorr-fr" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-fr-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">7b3540e49ba44d6e7bd752c65712e9d669fce10f3d1862411859c6038b4210a0</sum>
        </package>
        <package name="autocorr-pt" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-pt-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">813a8cf68523d78b9eae96c4b264a829af9fbb3f727188332cf2134075c7b873</sum>
        </package>
        <package name="autocorr-zh" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-zh-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">943065ae9e2fa45011926673c7a4c32322022ac35cef6d01519b60de9bcdef3e</sum>
        </package>
        <package name="autocorr-ca" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-ca-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">9eef4bc73d018a2d37117604831513c28c675ae04696516c8fd7ca97d4862199</sum>
        </package>
        <package name="autocorr-ja" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-ja-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">a0c1a4012459a0fba90f97fea21b6090be5dbdddc0d66d484c63934698db01f9</sum>
        </package>
        <package name="libreoffice-ure" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-ure-7.1.8.1-11.el9.alma.s390x.rpm</filename>
          <sum type="sha256">a2db80243ce37da075d31d2c81cd05480604378a538547def5b18a3cda347193</sum>
        </package>
        <package name="autocorr-es" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-es-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">ab9cae4a10acab2dd52902c7273524a42eb5dacd9c95bcc1edc1d967b3a07dc2</sum>
        </package>
        <package name="autocorr-lt" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-lt-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">ac9e9de72308ed585d84a7093e990ea558fcddaa4d0a7b2743cd2639cdab1a31</sum>
        </package>
        <package name="autocorr-ru" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-ru-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">ad20f0ea316d4f4daa91d5cdd9c09c833e6e2a1268f128ca1d143f77875400e8</sum>
        </package>
        <package name="autocorr-ro" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-ro-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">b3521bd527a264ed471153afd472eaaab433c9bdd0e350ddfe1c215aabb049e2</sum>
        </package>
        <package name="autocorr-ga" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-ga-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">bc52fd1e8ce77b0b42f81254f3078f892ad15681ae3426f0586e61c82650ccb7</sum>
        </package>
        <package name="autocorr-da" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-da-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">c29d880be4ff60f317ea011908dbada4f6bb2d3350960c0a0f1e2214805e6529</sum>
        </package>
        <package name="autocorr-hu" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-hu-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">c4d854ae03e2d534b76343f984635b668a4a0cad506c4247fd298bcc26f33ee7</sum>
        </package>
        <package name="libreoffice-pyuno" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-pyuno-7.1.8.1-11.el9.alma.s390x.rpm</filename>
          <sum type="sha256">ca3fa7e1d2666d8c6af54e34dc1662a39d846ff4938f4a556c912e09c1c25037</sum>
        </package>
        <package name="autocorr-fi" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-fi-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">d6d7ddf2c5faa150d7787614b6e9512e1a33ee5dcc22ddbce72b3aa58c3ae9ff</sum>
        </package>
        <package name="autocorr-pl" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-pl-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">d897bd02f9e8e568f98bfe7ea457cf51c1a2bf5b408e1b1fe8e573ef2f83aa7f</sum>
        </package>
        <package name="autocorr-lb" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-lb-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">dec8021dbf8838add15047f1895854db02f93780710ed2d66f6443cec4586601</sum>
        </package>
        <package name="autocorr-de" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-de-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">def31f18bc4602638f92dc8c53943d3d03c143939755578d2d03507d26ee2e68</sum>
        </package>
        <package name="autocorr-sr" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-sr-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">e08fb79399ed02920258871ef350b50d4a765590d51642f477476c67c4199f99</sum>
        </package>
        <package name="autocorr-is" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-is-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">edb227bce18d4470146352cfa9e005c6352aeddee395763053df573d97955551</sum>
        </package>
        <package name="autocorr-cs" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-cs-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">eeb25ecbd3b47032b3ae0fb5ec05c0f7d398355ddaa6bdc6e2200f8e95ac9cf2</sum>
        </package>
        <package name="autocorr-el" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-el-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">f50a89aac67adf16a4a53e31aa8c4202e4e9a3cb578167c45c37a30cc52cd21d</sum>
        </package>
        <package name="autocorr-sl" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-sl-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">f63f30ca38e3c93fc45541c883de0885082f55c94ea3aa6f5a54a7292bd4622b</sum>
        </package>
        <package name="autocorr-af" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-af-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">f97b454dee535efa7fdbd052f774f6d9257f005e30a95bb58530902541af2880</sum>
        </package>
        <package name="autocorr-hr" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>autocorr-hr-7.1.8.1-11.el9.alma.noarch.rpm</filename>
          <sum type="sha256">fbdc82b17b37c124f11c490bc24eff7eb489fcb6c1bb19e4dcbd05c7b97b271b</sum>
        </package>
        <package name="libreoffice-writer" version="7.1.8.1" release="11.el9.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-11.el9.alma.src.rpm">
          <filename>libreoffice-writer-7.1.8.1-11.el9.alma.s390x.rpm</filename>
          <sum type="sha256">fc790709b602be14ca87b78d1f6537a59477472aaeaa3cc560f87377bcb507da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6518</id>
    <title>Moderate: flatpak security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:11:11"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>flatpak security, bug fix, and enhancement update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

The following packages have been upgraded to a later upstream version: flatpak (1.12.8). (BZ#2221792)

Security Fix(es):

* flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console (CVE-2023-28100)
* flatpak: Metadata with ANSI control codes can cause misleading terminal output (CVE-2023-28101)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6518" id="RHSA-2023:6518" type="rhsa" title="RHSA-2023:6518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28100" id="CVE-2023-28100" type="cve" title="CVE-2023-28100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28101" id="CVE-2023-28101" type="cve" title="CVE-2023-28101"/>
      <reference href="https://bugzilla.redhat.com/2179219" id="2179219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179220" id="2179220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6518.html" id="ALSA-2023:6518" type="self" title="ALSA-2023:6518"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="flatpak-libs" version="1.12.8" release="1.el9" epoch="0" arch="s390x" src="flatpak-1.12.8-1.el9.src.rpm">
          <filename>flatpak-libs-1.12.8-1.el9.s390x.rpm</filename>
          <sum type="sha256">364c8e31e15ce968d6a503fc5a9f1af3d254ede4fd6946f1e2e8d4311ce6949f</sum>
        </package>
        <package name="flatpak-selinux" version="1.12.8" release="1.el9" epoch="0" arch="noarch" src="flatpak-1.12.8-1.el9.src.rpm">
          <filename>flatpak-selinux-1.12.8-1.el9.noarch.rpm</filename>
          <sum type="sha256">469a239d4c34eae8e286edb3de5360898eb563a04d20528e0b45360fd1b89d9b</sum>
        </package>
        <package name="flatpak" version="1.12.8" release="1.el9" epoch="0" arch="s390x" src="flatpak-1.12.8-1.el9.src.rpm">
          <filename>flatpak-1.12.8-1.el9.s390x.rpm</filename>
          <sum type="sha256">9e0a0f928f69e5ef126fcda472d27b1a905092871f0261925f81a071caad2c60</sum>
        </package>
        <package name="flatpak-session-helper" version="1.12.8" release="1.el9" epoch="0" arch="s390x" src="flatpak-1.12.8-1.el9.src.rpm">
          <filename>flatpak-session-helper-1.12.8-1.el9.s390x.rpm</filename>
          <sum type="sha256">a7190a909d839bda97fdf33a24c07a5f48860b0dce8348584edea74635305d58</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6523</id>
    <title>Moderate: python-tornado security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-tornado security update</summary>
    <description>Tornado is a Python web framework and asynchronous networking library that provides an open source version of scalable, non-blocking web server and tools.

Security Fix(es):

* python-tornado: open redirect vulnerability in StaticFileHandler under certain configurations (CVE-2023-28370)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6523" id="RHSA-2023:6523" type="rhsa" title="RHSA-2023:6523"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28370" id="CVE-2023-28370" type="cve" title="CVE-2023-28370"/>
      <reference href="https://bugzilla.redhat.com/2210199" id="2210199" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6523.html" id="ALSA-2023:6523" type="self" title="ALSA-2023:6523"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="python3-tornado" version="6.1.0" release="9.el9" epoch="0" arch="s390x" src="python-tornado-6.1.0-9.el9.src.rpm">
          <filename>python3-tornado-6.1.0-9.el9.s390x.rpm</filename>
          <sum type="sha256">32710e95df7bba079c74bd01de777874a718f731f8c51478f70ddfeefc446b1b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6524</id>
    <title>Moderate: dnsmasq security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:40"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dnsmasq security and bug fix update</summary>
    <description>The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

* dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 (CVE-2023-28450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6524" id="RHSA-2023:6524" type="rhsa" title="RHSA-2023:6524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28450" id="CVE-2023-28450" type="cve" title="CVE-2023-28450"/>
      <reference href="https://bugzilla.redhat.com/2178948" id="2178948" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6524.html" id="ALSA-2023:6524" type="self" title="ALSA-2023:6524"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="dnsmasq-utils" version="2.85" release="14.el9" epoch="0" arch="s390x" src="dnsmasq-2.85-14.el9.src.rpm">
          <filename>dnsmasq-utils-2.85-14.el9.s390x.rpm</filename>
          <sum type="sha256">6f95238256f3a77ffa8085ab8551dd164b81160b7801e967b1fc3c6a070043ba</sum>
        </package>
        <package name="dnsmasq" version="2.85" release="14.el9" epoch="0" arch="s390x" src="dnsmasq-2.85-14.el9.src.rpm">
          <filename>dnsmasq-2.85-14.el9.s390x.rpm</filename>
          <sum type="sha256">c7b2f234b2d6e2a58d66ea2e292dc789eae59b2fbd8eeff238604d1fbd77b6c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6535</id>
    <title>Important: webkit2gtk3 security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:06:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security and bug fix update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: arbitrary code execution (CVE-2023-32393)
* webkitgtk: bypass Same Origin Policy (CVE-2023-38572)
* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-38592)
* webkitgtk: arbitrary code execution (CVE-2023-38594)
* webkitgtk: arbitrary code execution (CVE-2023-38595)
* webkitgtk: arbitrary code execution (CVE-2023-38597)
* webkitgtk: arbitrary code execution (CVE-2023-38600)
* webkitgtk: arbitrary code execution (CVE-2023-38611)
* webkitgtk: Memory corruption issue when processing web content (CVE-2022-32885)
* webkitgtk: Same Origin Policy bypass via crafted web content (CVE-2023-27932)
* webkitgtk: Website may be able to track sensitive user information (CVE-2023-27954)
* webkitgtk: use after free vulnerability (CVE-2023-28198)
* webkitgtk: content security policy blacklist failure (CVE-2023-32370)
* webkitgtk: disclose sensitive information (CVE-2023-38133)
* webkitgtk: track sensitive user information (CVE-2023-38599)
* webkitgtk: processing web content may lead to arbitrary code execution (CVE-2023-39434)
* webkitgtk: arbitrary javascript code execution (CVE-2023-40397)
* webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code (CVE-2023-40451)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6535" id="RHSA-2023:6535" type="rhsa" title="RHSA-2023:6535"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32885" id="CVE-2022-32885" type="cve" title="CVE-2022-32885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27932" id="CVE-2023-27932" type="cve" title="CVE-2023-27932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27954" id="CVE-2023-27954" type="cve" title="CVE-2023-27954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28198" id="CVE-2023-28198" type="cve" title="CVE-2023-28198"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32370" id="CVE-2023-32370" type="cve" title="CVE-2023-32370"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32393" id="CVE-2023-32393" type="cve" title="CVE-2023-32393"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38133" id="CVE-2023-38133" type="cve" title="CVE-2023-38133"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38572" id="CVE-2023-38572" type="cve" title="CVE-2023-38572"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38592" id="CVE-2023-38592" type="cve" title="CVE-2023-38592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38594" id="CVE-2023-38594" type="cve" title="CVE-2023-38594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38595" id="CVE-2023-38595" type="cve" title="CVE-2023-38595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38597" id="CVE-2023-38597" type="cve" title="CVE-2023-38597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38599" id="CVE-2023-38599" type="cve" title="CVE-2023-38599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38600" id="CVE-2023-38600" type="cve" title="CVE-2023-38600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38611" id="CVE-2023-38611" type="cve" title="CVE-2023-38611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39434" id="CVE-2023-39434" type="cve" title="CVE-2023-39434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40397" id="CVE-2023-40397" type="cve" title="CVE-2023-40397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40451" id="CVE-2023-40451" type="cve" title="CVE-2023-40451"/>
      <reference href="https://bugzilla.redhat.com/2224608" id="2224608" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231015" id="2231015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231017" id="2231017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231018" id="2231018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231019" id="2231019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231020" id="2231020" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231021" id="2231021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231022" id="2231022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231028" id="2231028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231043" id="2231043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236842" id="2236842" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236843" id="2236843" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236844" id="2236844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238943" id="2238943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238944" id="2238944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238945" id="2238945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241405" id="2241405" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241409" id="2241409" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6535.html" id="ALSA-2023:6535" type="self" title="ALSA-2023:6535"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="webkit2gtk3" version="2.40.5" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el9.src.rpm">
          <filename>webkit2gtk3-2.40.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">1b70f5839e08f24b845be8fb9b7ff2f2cb6fc9d5208c7d73a7cb14650afdfb1a</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.40.5" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el9.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.40.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">2d32bc1890d6aec38f624c3869fd21a6bde56b67e42e1b13d300d2c20e98a2d7</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.40.5" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el9.src.rpm">
          <filename>webkit2gtk3-jsc-2.40.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">521ff6577e922c0aaf4bedd460ac5dbb1573f657e5e313a07ad8b839ceb95aca</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.40.5" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el9.src.rpm">
          <filename>webkit2gtk3-devel-2.40.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">9d74bd036ece28e982f2a5874ca4e3449529e3d3d45bd83d0dca04f9e2eb173a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6539</id>
    <title>Moderate: perl-CPAN security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl-CPAN security update</summary>
    <description>The CPAN module is a tool to query, download and build perl modules from CPAN sites.

Security Fix(es):

* perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS (CVE-2023-31484)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6539" id="RHSA-2023:6539" type="rhsa" title="RHSA-2023:6539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31484" id="CVE-2023-31484" type="cve" title="CVE-2023-31484"/>
      <reference href="https://bugzilla.redhat.com/2218667" id="2218667" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6539.html" id="ALSA-2023:6539" type="self" title="ALSA-2023:6539"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="perl-CPAN" version="2.29" release="3.el9" epoch="0" arch="noarch" src="perl-CPAN-2.29-3.el9.src.rpm">
          <filename>perl-CPAN-2.29-3.el9.noarch.rpm</filename>
          <sum type="sha256">74c55c9829b2161089335da08c942be8fa4c4b1d87fd84aa16e43dce8d99071d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6542</id>
    <title>Moderate: perl-HTTP-Tiny security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl-HTTP-Tiny security update</summary>
    <description>HTTP::Tiny is a small and simple HTTP/1.1 client written in Perl.

Security Fix(es):

* http-tiny: insecure TLS cert default (CVE-2023-31486)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6542" id="RHSA-2023:6542" type="rhsa" title="RHSA-2023:6542"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31486" id="CVE-2023-31486" type="cve" title="CVE-2023-31486"/>
      <reference href="https://bugzilla.redhat.com/2228392" id="2228392" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6542.html" id="ALSA-2023:6542" type="self" title="ALSA-2023:6542"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="perl-HTTP-Tiny" version="0.076" release="461.el9" epoch="0" arch="noarch" src="perl-HTTP-Tiny-0.076-461.el9.src.rpm">
          <filename>perl-HTTP-Tiny-0.076-461.el9.noarch.rpm</filename>
          <sum type="sha256">7bc67a98cd73eb292036741d6e88925e35656650c75416b4c835cc9d61666798</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6544</id>
    <title>Moderate: ghostscript security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-15 12:07:51"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security and bug fix update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: buffer overflow in base/sbcp.c leading to data corruption (CVE-2023-28879)
* ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS (CVE-2023-38559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6544" id="RHSA-2023:6544" type="rhsa" title="RHSA-2023:6544"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28879" id="CVE-2023-28879" type="cve" title="CVE-2023-28879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38559" id="CVE-2023-38559" type="cve" title="CVE-2023-38559"/>
      <reference href="https://bugzilla.redhat.com/2184585" id="2184585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224367" id="2224367" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6544.html" id="ALSA-2023:6544" type="self" title="ALSA-2023:6544"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="ghostscript-tools-fonts" version="9.54.0" release="13.el9" epoch="0" arch="s390x" src="ghostscript-9.54.0-13.el9.src.rpm">
          <filename>ghostscript-tools-fonts-9.54.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">1def60354157960ddddc366e52dfb382fa46fe4c53199d1d926277b0c24907bd</sum>
        </package>
        <package name="ghostscript" version="9.54.0" release="13.el9" epoch="0" arch="s390x" src="ghostscript-9.54.0-13.el9.src.rpm">
          <filename>ghostscript-9.54.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">4ea9d37dc0def2edf7457c49ac2c76f9c53d2add949c061416aef61761e30bac</sum>
        </package>
        <package name="ghostscript-doc" version="9.54.0" release="13.el9" epoch="0" arch="noarch" src="ghostscript-9.54.0-13.el9.src.rpm">
          <filename>ghostscript-doc-9.54.0-13.el9.noarch.rpm</filename>
          <sum type="sha256">6222dc6fd993f4ebb21d1855184a5ec133bcf11a08260984a4cebec91fde644d</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.54.0" release="13.el9" epoch="0" arch="s390x" src="ghostscript-9.54.0-13.el9.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.54.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">85a8d169e34ea2e5f86fec7d91f331ca21997c41384f9b66f9046d8a0add86ea</sum>
        </package>
        <package name="libgs" version="9.54.0" release="13.el9" epoch="0" arch="s390x" src="ghostscript-9.54.0-13.el9.src.rpm">
          <filename>libgs-9.54.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">a0cac8bdcc43710674385bcba8accf106cdac4c6e7b4285fc50010aa8a48884b</sum>
        </package>
        <package name="ghostscript-x11" version="9.54.0" release="13.el9" epoch="0" arch="s390x" src="ghostscript-9.54.0-13.el9.src.rpm">
          <filename>ghostscript-x11-9.54.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">a235153399d2f814bd4f20475902c8698c1e87fd7598354ea34a79460e8eaa98</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.54.0" release="13.el9" epoch="0" arch="s390x" src="ghostscript-9.54.0-13.el9.src.rpm">
          <filename>ghostscript-tools-printing-9.54.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">a38a867d9f675eba1f7c8f59f8d347e413672c5c12493d51976a6667f2b2491c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6549</id>
    <title>Moderate: libreswan security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreswan security update</summary>
    <description>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: Invalid IKEv2 REKEY proposal causes restart (CVE-2023-38710)
* libreswan: Invalid IKEv1 Quick Mode ID causes restart (CVE-2023-38711)
* libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart (CVE-2023-38712)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6549" id="RHSA-2023:6549" type="rhsa" title="RHSA-2023:6549"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38710" id="CVE-2023-38710" type="cve" title="CVE-2023-38710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38711" id="CVE-2023-38711" type="cve" title="CVE-2023-38711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38712" id="CVE-2023-38712" type="cve" title="CVE-2023-38712"/>
      <reference href="https://bugzilla.redhat.com/2215952" id="2215952" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225368" id="2225368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225369" id="2225369" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6549.html" id="ALSA-2023:6549" type="self" title="ALSA-2023:6549"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libreswan" version="4.12" release="1.el9" epoch="0" arch="s390x" src="libreswan-4.12-1.el9.src.rpm">
          <filename>libreswan-4.12-1.el9.s390x.rpm</filename>
          <sum type="sha256">d3a0706c77713032837652c67b7825569a653b52e017d8fac4e0d262aa944fc7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6551</id>
    <title>Moderate: yajl security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>yajl security update</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

Security Fix(es):

* yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6551" id="RHSA-2023:6551" type="rhsa" title="RHSA-2023:6551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33460" id="CVE-2023-33460" type="cve" title="CVE-2023-33460"/>
      <reference href="https://bugzilla.redhat.com/2221249" id="2221249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6551.html" id="ALSA-2023:6551" type="self" title="ALSA-2023:6551"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="yajl" version="2.1.0" release="22.el9" epoch="0" arch="s390x" src="yajl-2.1.0-22.el9.src.rpm">
          <filename>yajl-2.1.0-22.el9.s390x.rpm</filename>
          <sum type="sha256">ca3adb18c24f6f645e4de6d2522e7bcee43980b8bc687f5a5d17928c58b7a30a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6566</id>
    <title>Moderate: libmicrohttpd security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:16"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libmicrohttpd security update</summary>
    <description>GNU libmicrohttpd is a small C library that makes it easy to run an HTTP server as part of another application.

Security Fix(es):

* libmicrohttpd: remote DoS (CVE-2023-27371)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6566" id="RHSA-2023:6566" type="rhsa" title="RHSA-2023:6566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27371" id="CVE-2023-27371" type="cve" title="CVE-2023-27371"/>
      <reference href="https://bugzilla.redhat.com/2174313" id="2174313" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6566.html" id="ALSA-2023:6566" type="self" title="ALSA-2023:6566"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libmicrohttpd" version="0.9.72" release="5.el9" epoch="1" arch="s390x" src="libmicrohttpd-0.9.72-5.el9.src.rpm">
          <filename>libmicrohttpd-0.9.72-5.el9.s390x.rpm</filename>
          <sum type="sha256">1aae5bdf01007f33f3bfde7dbb6a39ddf68bf03ca007adc803766dbfcb194479</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6569</id>
    <title>Moderate: sysstat security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:16"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sysstat security and bug fix update</summary>
    <description>The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity.

Security Fix(es):

* sysstat: check_overflow() function can work incorrectly, which could lead to an overflow (CVE-2023-33204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6569" id="RHSA-2023:6569" type="rhsa" title="RHSA-2023:6569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33204" id="CVE-2023-33204" type="cve" title="CVE-2023-33204"/>
      <reference href="https://bugzilla.redhat.com/2208270" id="2208270" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6569.html" id="ALSA-2023:6569" type="self" title="ALSA-2023:6569"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="sysstat" version="12.5.4" release="7.el9" epoch="0" arch="s390x" src="sysstat-12.5.4-7.el9.src.rpm">
          <filename>sysstat-12.5.4-7.el9.s390x.rpm</filename>
          <sum type="sha256">9e7916648d324cd2b5ce7f893e372c227987faada7b0fe50f758c28e2267f617</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6570</id>
    <title>Moderate: tomcat security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:13:43"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tomcat security and bug fix update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

* Apache Commons FileUpload: FileUpload DoS with excessive parts (CVE-2023-24998)
* tomcat: not including the secure attribute causes information disclosure (CVE-2023-28708)
* tomcat: Fix for CVE-2023-24998 was incomplete (CVE-2023-28709)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6570" id="RHSA-2023:6570" type="rhsa" title="RHSA-2023:6570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24998" id="CVE-2023-24998" type="cve" title="CVE-2023-24998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28708" id="CVE-2023-28708" type="cve" title="CVE-2023-28708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28709" id="CVE-2023-28709" type="cve" title="CVE-2023-28709"/>
      <reference href="https://bugzilla.redhat.com/2172298" id="2172298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2180856" id="2180856" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210321" id="2210321" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6570.html" id="ALSA-2023:6570" type="self" title="ALSA-2023:6570"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="tomcat" version="9.0.62" release="37.el9_3" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.src.rpm">
          <filename>tomcat-9.0.62-37.el9_3.noarch.rpm</filename>
          <sum type="sha256">3243a5704e3756790a643180f73e6db416803a40c8121a29b02b63f7c09f15b4</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.62" release="37.el9_3" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.src.rpm">
          <filename>tomcat-docs-webapp-9.0.62-37.el9_3.noarch.rpm</filename>
          <sum type="sha256">631738483d1c8a4a83ce44a7c2dfbbe6629f04d2ae1669f548f08310077b32dc</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.62" release="37.el9_3" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.src.rpm">
          <filename>tomcat-admin-webapps-9.0.62-37.el9_3.noarch.rpm</filename>
          <sum type="sha256">7dbf1bd58a807f362e68132507b310d6a9d71b02568d2442aa26c7f8d2161d49</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.62" release="37.el9_3" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.62-37.el9_3.noarch.rpm</filename>
          <sum type="sha256">9c937a2e67dd58371fd0ea3f9fdc0505c7fdc3aff6a521207c3ebe86879f7243</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.62" release="37.el9_3" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.src.rpm">
          <filename>tomcat-webapps-9.0.62-37.el9_3.noarch.rpm</filename>
          <sum type="sha256">b2b91cde77fa70d9f73654a89078e535a3d9bce64b1b28a06c3032707dc73089</sum>
        </package>
        <package name="tomcat-lib" version="9.0.62" release="37.el9_3" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.src.rpm">
          <filename>tomcat-lib-9.0.62-37.el9_3.noarch.rpm</filename>
          <sum type="sha256">b88307c078e6c360f31cf6274204b4c117363cd36c0daf1067805a883bd79f34</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.62" release="37.el9_3" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.62-37.el9_3.noarch.rpm</filename>
          <sum type="sha256">c1a61b95274a92645b2a93cb200d35d5b7a06654261aca78c9684364381edfd4</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.62" release="37.el9_3" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.62-37.el9_3.noarch.rpm</filename>
          <sum type="sha256">d4cde5b93ec9345cd3b3d3c8b851be99c6dcb7cdccc234e588f8045c52a56faa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6575</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: null pointer dereference in LZWDecode() in libtiff/tif_lzw.c (CVE-2023-2731)
* libtiff: tiffcrop: null pointer dereference in TIFFClose() (CVE-2023-3316)
* libtiff: memory leak in tiffcrop.c (CVE-2023-3576)
* libtiff: heap-based use after free via a crafted TIFF image in loadImage() in tiffcrop.c (CVE-2023-26965)
* libtiff: Buffer Overflow in uv_encode() (CVE-2023-26966)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6575" id="RHSA-2023:6575" type="rhsa" title="RHSA-2023:6575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-26965" id="CVE-2023-26965" type="cve" title="CVE-2023-26965"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-26966" id="CVE-2023-26966" type="cve" title="CVE-2023-26966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2731" id="CVE-2023-2731" type="cve" title="CVE-2023-2731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3316" id="CVE-2023-3316" type="cve" title="CVE-2023-3316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3576" id="CVE-2023-3576" type="cve" title="CVE-2023-3576"/>
      <reference href="https://bugzilla.redhat.com/2207635" id="2207635" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215206" id="2215206" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2216080" id="2216080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218749" id="2218749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219340" id="2219340" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6575.html" id="ALSA-2023:6575" type="self" title="ALSA-2023:6575"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libtiff-devel" version="4.4.0" release="10.el9" epoch="0" arch="s390x" src="libtiff-4.4.0-10.el9.src.rpm">
          <filename>libtiff-devel-4.4.0-10.el9.s390x.rpm</filename>
          <sum type="sha256">0e49b4a153be42a34b2f4ddb4a5c08f09b44d72f77cc335d024b225484d649c6</sum>
        </package>
        <package name="libtiff" version="4.4.0" release="10.el9" epoch="0" arch="s390x" src="libtiff-4.4.0-10.el9.src.rpm">
          <filename>libtiff-4.4.0-10.el9.s390x.rpm</filename>
          <sum type="sha256">79e0ac0ed2c0bafeb955f97f8186aa681f4beb9c919897cbc28a7680084407fb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6578</id>
    <title>Moderate: libqb security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libqb security update</summary>
    <description>The libqb packages provide a library with the primary purpose of providing high performance client/server reusable features, such as high performance logging, tracing, inter-process communication, and polling.

Security Fix(es):

* libqb: Buffer overflow in log_blackbox.c (CVE-2023-39976)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6578" id="RHSA-2023:6578" type="rhsa" title="RHSA-2023:6578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39976" id="CVE-2023-39976" type="cve" title="CVE-2023-39976"/>
      <reference href="https://bugzilla.redhat.com/2230708" id="2230708" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6578.html" id="ALSA-2023:6578" type="self" title="ALSA-2023:6578"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libqb" version="2.0.6" release="4.el9_3" epoch="0" arch="s390x" src="libqb-2.0.6-4.el9_3.src.rpm">
          <filename>libqb-2.0.6-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">9f057346a14d830f1e7db52089ed444c5a4e0a1799bc1ae37828979d4471fb08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6593</id>
    <title>Moderate: binutils security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>binutils security update</summary>
    <description>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.

Security Fix(es):

* binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6593" id="RHSA-2023:6593" type="rhsa" title="RHSA-2023:6593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4285" id="CVE-2022-4285" type="cve" title="CVE-2022-4285"/>
      <reference href="https://bugzilla.redhat.com/2150768" id="2150768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6593.html" id="ALSA-2023:6593" type="self" title="ALSA-2023:6593"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="binutils-devel" version="2.35.2" release="42.el9" epoch="0" arch="s390x" src="binutils-2.35.2-42.el9.src.rpm">
          <filename>binutils-devel-2.35.2-42.el9.s390x.rpm</filename>
          <sum type="sha256">36d47a7168a1008f92ae68a38a861d74bd24500fc5ef2c8ff20df2f7c83f6703</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6596</id>
    <title>Moderate: cups security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:11:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security and bug fix update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

* cups: heap buffer overflow may lead to DoS (CVE-2023-32324)
* cups: use-after-free in cupsdAcceptClient() in scheduler/client.c (CVE-2023-34241)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6596" id="RHSA-2023:6596" type="rhsa" title="RHSA-2023:6596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32324" id="CVE-2023-32324" type="cve" title="CVE-2023-32324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34241" id="CVE-2023-34241" type="cve" title="CVE-2023-34241"/>
      <reference href="https://bugzilla.redhat.com/2209603" id="2209603" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2214914" id="2214914" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6596.html" id="ALSA-2023:6596" type="self" title="ALSA-2023:6596"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="cups-devel" version="2.3.3op2" release="21.el9" epoch="1" arch="s390x" src="cups-2.3.3op2-21.el9.src.rpm">
          <filename>cups-devel-2.3.3op2-21.el9.s390x.rpm</filename>
          <sum type="sha256">505735ddbf8c5715caafa9a7f0340312e357fe3fd346cda2d840a2b2730667de</sum>
        </package>
        <package name="cups-filesystem" version="2.3.3op2" release="21.el9" epoch="1" arch="noarch" src="cups-2.3.3op2-21.el9.src.rpm">
          <filename>cups-filesystem-2.3.3op2-21.el9.noarch.rpm</filename>
          <sum type="sha256">68962dc1928b74302b651ac4230b67d5a0b12abd55225dd5b8d0ede2c3c1cfe0</sum>
        </package>
        <package name="cups-ipptool" version="2.3.3op2" release="21.el9" epoch="1" arch="s390x" src="cups-2.3.3op2-21.el9.src.rpm">
          <filename>cups-ipptool-2.3.3op2-21.el9.s390x.rpm</filename>
          <sum type="sha256">be4899606f7cf3124fc2758365a0c8bf0495786c61145e8bf84230ac6569989c</sum>
        </package>
        <package name="cups-printerapp" version="2.3.3op2" release="21.el9" epoch="1" arch="s390x" src="cups-2.3.3op2-21.el9.src.rpm">
          <filename>cups-printerapp-2.3.3op2-21.el9.s390x.rpm</filename>
          <sum type="sha256">c898d8af7d2bface1be96c526d6c5e513d478fba909730902af2742e7ac4204a</sum>
        </package>
        <package name="cups-client" version="2.3.3op2" release="21.el9" epoch="1" arch="s390x" src="cups-2.3.3op2-21.el9.src.rpm">
          <filename>cups-client-2.3.3op2-21.el9.s390x.rpm</filename>
          <sum type="sha256">dafc7dd575507f1e135e9396085a6bf7ce4bc3aba30cafe3bcb9e77a6ffc089b</sum>
        </package>
        <package name="cups-lpd" version="2.3.3op2" release="21.el9" epoch="1" arch="s390x" src="cups-2.3.3op2-21.el9.src.rpm">
          <filename>cups-lpd-2.3.3op2-21.el9.s390x.rpm</filename>
          <sum type="sha256">ea04c0cb57c4fd46b0361624d8398b7bdb6e150f962d9fce352f4e70e71aa270</sum>
        </package>
        <package name="cups" version="2.3.3op2" release="21.el9" epoch="1" arch="s390x" src="cups-2.3.3op2-21.el9.src.rpm">
          <filename>cups-2.3.3op2-21.el9.s390x.rpm</filename>
          <sum type="sha256">ea90a848a584de5ceeefc6394e513735024af901ce62c73887af505ce1f13b10</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6631</id>
    <title>Low: glib2 security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:11:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>glib2 security and bug fix update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib: GVariant offset table entry size is not checked in is_normal() (CVE-2023-29499)
* glib: g_variant_byteswap() can take a long time with some non-normal inputs (CVE-2023-32611)
* glib: GVariant deserialisation does not match spec for non-normal data (CVE-2023-32665)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6631" id="RHSA-2023:6631" type="rhsa" title="RHSA-2023:6631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29499" id="CVE-2023-29499" type="cve" title="CVE-2023-29499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32611" id="CVE-2023-32611" type="cve" title="CVE-2023-32611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32665" id="CVE-2023-32665" type="cve" title="CVE-2023-32665"/>
      <reference href="https://bugzilla.redhat.com/2211827" id="2211827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211828" id="2211828" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211829" id="2211829" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6631.html" id="ALSA-2023:6631" type="self" title="ALSA-2023:6631"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="glib2-devel" version="2.68.4" release="11.el9" epoch="0" arch="s390x" src="glib2-2.68.4-11.el9.src.rpm">
          <filename>glib2-devel-2.68.4-11.el9.s390x.rpm</filename>
          <sum type="sha256">4f15a2950b9af4a5917d8a74973832189edd1a058aa60f1ac32f4469263c5231</sum>
        </package>
        <package name="glib2-tests" version="2.68.4" release="11.el9" epoch="0" arch="s390x" src="glib2-2.68.4-11.el9.src.rpm">
          <filename>glib2-tests-2.68.4-11.el9.s390x.rpm</filename>
          <sum type="sha256">5dda6023577ed31872b0d1324851d65865b7ecd123d7d8f49a16425c2475aa29</sum>
        </package>
        <package name="glib2-doc" version="2.68.4" release="11.el9" epoch="0" arch="noarch" src="glib2-2.68.4-11.el9.src.rpm">
          <filename>glib2-doc-2.68.4-11.el9.noarch.rpm</filename>
          <sum type="sha256">9d711ffafd75abebaf87048ec7616c332c8dd24f88398c746a5e8be14f921329</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6635</id>
    <title>Moderate: c-ares security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>c-ares security, bug fix, and enhancement update</summary>
    <description>The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

The following packages have been upgraded to a later upstream version: c-ares (1.19.1). (BZ#2210370)

Security Fix(es):

* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)
* c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)
* c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)
* c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6635" id="RHSA-2023:6635" type="rhsa" title="RHSA-2023:6635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4904" id="CVE-2022-4904" type="cve" title="CVE-2022-4904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31124" id="CVE-2023-31124" type="cve" title="CVE-2023-31124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31130" id="CVE-2023-31130" type="cve" title="CVE-2023-31130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31147" id="CVE-2023-31147" type="cve" title="CVE-2023-31147"/>
      <reference href="https://bugzilla.redhat.com/2168631" id="2168631" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209494" id="2209494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209497" id="2209497" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209501" id="2209501" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6635.html" id="ALSA-2023:6635" type="self" title="ALSA-2023:6635"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="c-ares-devel" version="1.19.1" release="1.el9" epoch="0" arch="s390x" src="c-ares-1.19.1-1.el9.src.rpm">
          <filename>c-ares-devel-1.19.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">24c4eda7837d40e039588634850eb4568d72cbb27c6c8aa851bcb4770d8cbe46</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6643</id>
    <title>Moderate: libssh security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

* libssh: NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667)
* libssh: authorization bypass in pki_verify_data_signature (CVE-2023-2283)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6643" id="RHSA-2023:6643" type="rhsa" title="RHSA-2023:6643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1667" id="CVE-2023-1667" type="cve" title="CVE-2023-1667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2283" id="CVE-2023-2283" type="cve" title="CVE-2023-2283"/>
      <reference href="https://bugzilla.redhat.com/2182199" id="2182199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2189736" id="2189736" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6643.html" id="ALSA-2023:6643" type="self" title="ALSA-2023:6643"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libssh-devel" version="0.10.4" release="11.el9" epoch="0" arch="s390x" src="libssh-0.10.4-11.el9.src.rpm">
          <filename>libssh-devel-0.10.4-11.el9.s390x.rpm</filename>
          <sum type="sha256">074c98cb09f094df18da13936edfe1c6bf12fa21f669f4f34f2fc1eafcd8c29c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6659</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:11:03"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python3.9 (3.9.18). (BZ#2210783)

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6659" id="RHSA-2023:6659" type="rhsa" title="RHSA-2023:6659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6659.html" id="ALSA-2023:6659" type="self" title="ALSA-2023:6659"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="python3-tkinter" version="3.9.18" release="1.el9_3" epoch="0" arch="s390x" src="python3.9-3.9.18-1.el9_3.src.rpm">
          <filename>python3-tkinter-3.9.18-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">1939071d6a6e6461f85e248c1fa7cd265184e2ed9a419e5cc015c99a58d1da56</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.18" release="1.el9_3" epoch="0" arch="noarch" src="python3.9-3.9.18-1.el9_3.src.rpm">
          <filename>python-unversioned-command-3.9.18-1.el9_3.noarch.rpm</filename>
          <sum type="sha256">681d1b2a7e3cb78b4ad8467a5e8a7a406b3d2243b81d782539b45da8aa805088</sum>
        </package>
        <package name="python3-devel" version="3.9.18" release="1.el9_3" epoch="0" arch="s390x" src="python3.9-3.9.18-1.el9_3.src.rpm">
          <filename>python3-devel-3.9.18-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">8bfbd959e1377efe38ce576f83a669958037a9ccda5264d8588777c2d1529626</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6661</id>
    <title>Low: gmp security and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>gmp security and enhancement update</summary>
    <description>The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point numbers. 

Security Fix(es):

* gmp: Integer overflow and resultant buffer overflow via crafted input (CVE-2021-43618)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6661" id="RHSA-2023:6661" type="rhsa" title="RHSA-2023:6661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-43618" id="CVE-2021-43618" type="cve" title="CVE-2021-43618"/>
      <reference href="https://bugzilla.redhat.com/2024904" id="2024904" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6661.html" id="ALSA-2023:6661" type="self" title="ALSA-2023:6661"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="gmp-devel" version="6.2.0" release="13.el9" epoch="1" arch="s390x" src="gmp-6.2.0-13.el9.src.rpm">
          <filename>gmp-devel-6.2.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">a8da50c9d278c087a7f02ec4d9b7d13552d32238d1fc38228d98757d947f9f9f</sum>
        </package>
        <package name="gmp-c++" version="6.2.0" release="13.el9" epoch="1" arch="s390x" src="gmp-6.2.0-13.el9.src.rpm">
          <filename>gmp-c++-6.2.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">dd7098caa7c41f5ccc5051284f46e34dabcadcef5c60924b18cb6f2089ad50ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6667</id>
    <title>Moderate: samba security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-15 11:44:10"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190415)

Security Fix(es):

* samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127)
* samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966)
* samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967)
* samba: spotlight server-side share path disclosure (CVE-2023-34968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6667" id="RHSA-2023:6667" type="rhsa" title="RHSA-2023:6667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2127" id="CVE-2022-2127" type="cve" title="CVE-2022-2127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34966" id="CVE-2023-34966" type="cve" title="CVE-2023-34966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34967" id="CVE-2023-34967" type="cve" title="CVE-2023-34967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34968" id="CVE-2023-34968" type="cve" title="CVE-2023-34968"/>
      <reference href="https://bugzilla.redhat.com/2222791" id="2222791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222793" id="2222793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222794" id="2222794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222795" id="2222795" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6667.html" id="ALSA-2023:6667" type="self" title="ALSA-2023:6667"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="samba-winbind-krb5-locator" version="4.18.6" release="100.el9" epoch="0" arch="s390x" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-winbind-krb5-locator-4.18.6-100.el9.s390x.rpm</filename>
          <sum type="sha256">58b6163df5f58caa64e53f55819aeda60b85a3eb5d4501859e52dc571bcee0cd</sum>
        </package>
        <package name="samba-client" version="4.18.6" release="100.el9" epoch="0" arch="s390x" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-client-4.18.6-100.el9.s390x.rpm</filename>
          <sum type="sha256">715de1fc4be31487c87587ed449e27189c7f7f3bfa28c59cecc438f75b430cf1</sum>
        </package>
        <package name="samba-winbind-clients" version="4.18.6" release="100.el9" epoch="0" arch="s390x" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-winbind-clients-4.18.6-100.el9.s390x.rpm</filename>
          <sum type="sha256">ae98edab6e148e25a3fac944f8ea880d160ebedadc6a2cf0fcd6641c86eba7aa</sum>
        </package>
        <package name="samba-krb5-printing" version="4.18.6" release="100.el9" epoch="0" arch="s390x" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-krb5-printing-4.18.6-100.el9.s390x.rpm</filename>
          <sum type="sha256">b815cc6c8f558a29bb5617333257bbefdfbebc6978b6cbbba940cd2afbfc235c</sum>
        </package>
        <package name="samba-vfs-iouring" version="4.18.6" release="100.el9" epoch="0" arch="s390x" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-vfs-iouring-4.18.6-100.el9.s390x.rpm</filename>
          <sum type="sha256">bf58626d1ff3dfd3fbdd95c0a299d45442cb211dc14780bffa77dde25bde1bf9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6679</id>
    <title>Moderate: curl security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-15 11:24:03"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: GSS delegation too eager connection re-use (CVE-2023-27536)
* curl: TELNET option IAC injection (CVE-2023-27533)
* curl: SFTP path ~ resolving discrepancy (CVE-2023-27534)
* curl: SSH connection too eager reuse still (CVE-2023-27538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6679" id="RHSA-2023:6679" type="rhsa" title="RHSA-2023:6679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27533" id="CVE-2023-27533" type="cve" title="CVE-2023-27533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27534" id="CVE-2023-27534" type="cve" title="CVE-2023-27534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27536" id="CVE-2023-27536" type="cve" title="CVE-2023-27536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27538" id="CVE-2023-27538" type="cve" title="CVE-2023-27538"/>
      <reference href="https://bugzilla.redhat.com/2179062" id="2179062" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179069" id="2179069" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179092" id="2179092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179103" id="2179103" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6679.html" id="ALSA-2023:6679" type="self" title="ALSA-2023:6679"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="libcurl-devel" version="7.76.1" release="26.el9" epoch="0" arch="s390x" src="curl-7.76.1-26.el9.src.rpm">
          <filename>libcurl-devel-7.76.1-26.el9.s390x.rpm</filename>
          <sum type="sha256">19e8475674ff48d86aeeab8ab405be0a6850865254f39dd5626464bc6c57d014</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6694</id>
    <title>Moderate: python-pip security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-pip security update</summary>
    <description>pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python". 

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6694" id="RHSA-2023:6694" type="rhsa" title="RHSA-2023:6694"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6694.html" id="ALSA-2023:6694" type="self" title="ALSA-2023:6694"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="python3-pip" version="21.2.3" release="7.el9" epoch="0" arch="noarch" src="python-pip-21.2.3-7.el9.src.rpm">
          <filename>python3-pip-21.2.3-7.el9.noarch.rpm</filename>
          <sum type="sha256">0de03acbbb820b2371a37ac544cd894a921d1682dbfe94c8441c44172607f09c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6698</id>
    <title>Moderate: ncurses security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:11:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ncurses security and bug fix update</summary>
    <description>The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo.

Security Fix(es):

* ncurses: Local users can trigger security-relevant memory corruption via malformed data (CVE-2023-29491)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6698" id="RHSA-2023:6698" type="rhsa" title="RHSA-2023:6698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29491" id="CVE-2023-29491" type="cve" title="CVE-2023-29491"/>
      <reference href="https://bugzilla.redhat.com/2191704" id="2191704" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6698.html" id="ALSA-2023:6698" type="self" title="ALSA-2023:6698"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="ncurses-c++-libs" version="6.2" release="10.20210508.el9" epoch="0" arch="s390x" src="ncurses-6.2-10.20210508.el9.src.rpm">
          <filename>ncurses-c++-libs-6.2-10.20210508.el9.s390x.rpm</filename>
          <sum type="sha256">19f6a73969c819731b2b7e06a893a71194cde1343f288c3e5d9d82e70d25d171</sum>
        </package>
        <package name="ncurses-devel" version="6.2" release="10.20210508.el9" epoch="0" arch="s390x" src="ncurses-6.2-10.20210508.el9.src.rpm">
          <filename>ncurses-devel-6.2-10.20210508.el9.s390x.rpm</filename>
          <sum type="sha256">1f7177a5213dd98a946857a80e264522d9bd7215fdaa93736e0d103ec896176e</sum>
        </package>
        <package name="ncurses-term" version="6.2" release="10.20210508.el9" epoch="0" arch="noarch" src="ncurses-6.2-10.20210508.el9.src.rpm">
          <filename>ncurses-term-6.2-10.20210508.el9.noarch.rpm</filename>
          <sum type="sha256">35e1bd78bb33c310be53e5163f4e464607de7423cb31515685d7239383c49596</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6699</id>
    <title>Moderate: krb5 security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>krb5 security and bug fix update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

* krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054)
* krb5: double-free in KDC TGS processing (CVE-2023-39975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6699" id="RHSA-2023:6699" type="rhsa" title="RHSA-2023:6699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36054" id="CVE-2023-36054" type="cve" title="CVE-2023-36054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39975" id="CVE-2023-39975" type="cve" title="CVE-2023-39975"/>
      <reference href="https://bugzilla.redhat.com/2230178" id="2230178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2232682" id="2232682" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6699.html" id="ALSA-2023:6699" type="self" title="ALSA-2023:6699"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="krb5-devel" version="1.21.1" release="1.el9" epoch="0" arch="s390x" src="krb5-1.21.1-1.el9.src.rpm">
          <filename>krb5-devel-1.21.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">ee035006c89d7fadb0a99aa3f6c85ea34ea77e19de468c0badfc4b8b51c63a01</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6707</id>
    <title>Moderate: avahi security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468)
* avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames (CVE-2021-3502)
* avahi: avahi-daemon can be crashed via DBus (CVE-2023-1981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6707" id="RHSA-2023:6707" type="rhsa" title="RHSA-2023:6707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3468" id="CVE-2021-3468" type="cve" title="CVE-2021-3468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3502" id="CVE-2021-3502" type="cve" title="CVE-2021-3502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1981" id="CVE-2023-1981" type="cve" title="CVE-2023-1981"/>
      <reference href="https://bugzilla.redhat.com/1939614" id="1939614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1946914" id="1946914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2185911" id="2185911" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6707.html" id="ALSA-2023:6707" type="self" title="ALSA-2023:6707"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="avahi-tools" version="0.8" release="15.el9" epoch="0" arch="s390x" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-tools-0.8-15.el9.s390x.rpm</filename>
          <sum type="sha256">0cfa50a8b45376affbfe699b2f2b412e61efc2c686302b0981cffe0c7de0c950</sum>
        </package>
        <package name="avahi-glib" version="0.8" release="15.el9" epoch="0" arch="s390x" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-glib-0.8-15.el9.s390x.rpm</filename>
          <sum type="sha256">c6a388ea09fbc191b4bfaabbf1f6fb18683bb7187cc79a9de50f854231e5d92c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6732</id>
    <title>Important: ghostscript security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:11:40"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents (CVE-2023-43115)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6732" id="RHSA-2023:6732" type="rhsa" title="RHSA-2023:6732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43115" id="CVE-2023-43115" type="cve" title="CVE-2023-43115"/>
      <reference href="https://bugzilla.redhat.com/2241108" id="2241108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6732.html" id="ALSA-2023:6732" type="self" title="ALSA-2023:6732"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="ghostscript" version="9.54.0" release="14.el9_3" epoch="0" arch="s390x" src="ghostscript-9.54.0-14.el9_3.src.rpm">
          <filename>ghostscript-9.54.0-14.el9_3.s390x.rpm</filename>
          <sum type="sha256">21aab645768f3053dd9ec23f96a6e52b9153437b752c27f8ad19e39b44c97d8f</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.54.0" release="14.el9_3" epoch="0" arch="s390x" src="ghostscript-9.54.0-14.el9_3.src.rpm">
          <filename>ghostscript-tools-printing-9.54.0-14.el9_3.s390x.rpm</filename>
          <sum type="sha256">5e4e41e9aadc3105ff419cf65476669cb67f9730869757d1143ea48a74d2557f</sum>
        </package>
        <package name="ghostscript-x11" version="9.54.0" release="14.el9_3" epoch="0" arch="s390x" src="ghostscript-9.54.0-14.el9_3.src.rpm">
          <filename>ghostscript-x11-9.54.0-14.el9_3.s390x.rpm</filename>
          <sum type="sha256">83609dd5951742caf72dbe96fca2ef4840eea1c65ab4b59d4b4d86ce44600db9</sum>
        </package>
        <package name="libgs" version="9.54.0" release="14.el9_3" epoch="0" arch="s390x" src="ghostscript-9.54.0-14.el9_3.src.rpm">
          <filename>libgs-9.54.0-14.el9_3.s390x.rpm</filename>
          <sum type="sha256">906e1fb775095d19b41b4d5179dc10e00e15f97fc06558b05da8d92d0247f56b</sum>
        </package>
        <package name="ghostscript-doc" version="9.54.0" release="14.el9_3" epoch="0" arch="noarch" src="ghostscript-9.54.0-14.el9_3.src.rpm">
          <filename>ghostscript-doc-9.54.0-14.el9_3.noarch.rpm</filename>
          <sum type="sha256">9479e1053be3d3d0a781bce60d6ffe0f971c920018f73bc35ee04d29fd63322e</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.54.0" release="14.el9_3" epoch="0" arch="s390x" src="ghostscript-9.54.0-14.el9_3.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.54.0-14.el9_3.s390x.rpm</filename>
          <sum type="sha256">c042a3ecf3e80983a120abaf469b09613cc83e7e51966442d042102d448d6f90</sum>
        </package>
        <package name="ghostscript-tools-fonts" version="9.54.0" release="14.el9_3" epoch="0" arch="s390x" src="ghostscript-9.54.0-14.el9_3.src.rpm">
          <filename>ghostscript-tools-fonts-9.54.0-14.el9_3.s390x.rpm</filename>
          <sum type="sha256">cffabfb7a99a45d9f8f86bae51a3856b217f86a85a8d18568563a93ec631e8f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6738</id>
    <title>Moderate: java-21-openjdk security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:08:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security and bug fix update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 21.0.0 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 21.0.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true.
* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 20.0.0 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 20.0.1, increases it to 16 MB. (AlmaLinux-14954)
* When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-14962)
* Installing the same java-21-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-21-openjdk-headless package. This prevented the use of the dynamic dump feature, because the checksum in the archive would be different on each system. This release resolves this issue by using the .jsa files generated during the initial build. (AlmaLinux-14946)
* The /usr/bin/jfr alternative is now owned by the java-21-openjdk package. (AlmaLinux-14959)
* The jcmd tool is now provided by the java-21-openjdk-headless package, rather than java-21-openjdk-devel, to make it more accessible. (AlmaLinux-14948)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6738" id="RHSA-2023:6738" type="rhsa" title="RHSA-2023:6738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22025" id="CVE-2023-22025" type="cve" title="CVE-2023-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243805" id="2243805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6738.html" id="ALSA-2023:6738" type="self" title="ALSA-2023:6738"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="java-21-openjdk-static-libs" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">07dc0cf762125ca17862c108af7db5ce309267edbaaabf60d65b74c9a12e8da4</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">42a1fcc906eecc63948adbba2268e7c56fbec690fa90eea39c993ab181089e8b</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">53a5b935fdd0b920f4258b7325095f1ce6fb6df1b796093b6aaa104a6c6ad74d</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">685a2dc95c3397ca856d8bb2a7c520e847e60592ae934069f30cbc3930403a2a</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">833a992b884835072ed0ae4cbcf6dfee769372146c051c1139d2582bbd83dc5d</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ca612cd8dcbe79c2fcc48f9c4182072ccdab720839bb91a3720b7532d3295c30</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d7385226de23088ed3af66ba9333c92776e4243a1deaeaf0d06ca1b65f236bbc</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">df80e9e539533af76864e7a9983b70200ee6ccc5b525f2459fc7697b2829b50e</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ee339ff3f2eddc47e89919e9da2be85addc9e8e759933d0cd0fa163c124a3444</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6744</id>
    <title>Moderate: samba security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:07:33"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)
* samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)
* samba: "rpcecho" development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6744" id="RHSA-2023:6744" type="rhsa" title="RHSA-2023:6744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3961" id="CVE-2023-3961" type="cve" title="CVE-2023-3961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4091" id="CVE-2023-4091" type="cve" title="CVE-2023-4091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42669" id="CVE-2023-42669" type="cve" title="CVE-2023-42669"/>
      <reference href="https://bugzilla.redhat.com/2241881" id="2241881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241882" id="2241882" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241884" id="2241884" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6744.html" id="ALSA-2023:6744" type="self" title="ALSA-2023:6744"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="samba-winbind-krb5-locator" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-winbind-krb5-locator-4.18.6-101.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">52147d0d2ba79af9c70a8a16eb5d91ea196a4ee2695bcdcaa51ecc37820367be</sum>
        </package>
        <package name="samba-vfs-iouring" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-vfs-iouring-4.18.6-101.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">6e77f6fd9544d4bb0a2105d4102cb6ab65ec3091ed2abc41b64096c30549fa7b</sum>
        </package>
        <package name="samba-winbind-clients" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-winbind-clients-4.18.6-101.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">8157afb545d3d0ff6d8d96eb3990ad5a3e477f48e70901c73dbd22dd3ab8d12f</sum>
        </package>
        <package name="samba-client" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-client-4.18.6-101.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">94b5dd8ce17699d6334bcdf70351d705b4901774c4f0e07f60fffdd801505a71</sum>
        </package>
        <package name="samba-krb5-printing" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-krb5-printing-4.18.6-101.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">e6d705a46fb8677325b75ea676999229adf597a0134e1701bfa850d0191edbe9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6745</id>
    <title>Important: curl security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545)
* curl: cookie injection with none file (CVE-2023-38546)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6745" id="RHSA-2023:6745" type="rhsa" title="RHSA-2023:6745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38545" id="CVE-2023-38545" type="cve" title="CVE-2023-38545"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38546" id="CVE-2023-38546" type="cve" title="CVE-2023-38546"/>
      <reference href="https://bugzilla.redhat.com/2241933" id="2241933" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241938" id="2241938" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6745.html" id="ALSA-2023:6745" type="self" title="ALSA-2023:6745"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="libcurl-devel" version="7.76.1" release="26.el9_3.2" epoch="0" arch="s390x" src="curl-7.76.1-26.el9_3.2.src.rpm">
          <filename>libcurl-devel-7.76.1-26.el9_3.2.s390x.rpm</filename>
          <sum type="sha256">edbf15f591c8701946437045308d253a1fb5256d58e1b029073f34edd44a7b14</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6748</id>
    <title>Critical: squid security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>squid security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
* squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)
* squid: denial of Service in FTP (CVE-2023-46848)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6748" id="RHSA-2023:6748" type="rhsa" title="RHSA-2023:6748"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46846" id="CVE-2023-46846" type="cve" title="CVE-2023-46846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46847" id="CVE-2023-46847" type="cve" title="CVE-2023-46847"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46848" id="CVE-2023-46848" type="cve" title="CVE-2023-46848"/>
      <reference href="https://bugzilla.redhat.com/2245910" id="2245910" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245916" id="2245916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245919" id="2245919" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6748.html" id="ALSA-2023:6748" type="self" title="ALSA-2023:6748"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_2_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_2_default</name>
        <package name="squid" version="5.5" release="6.el9_3.1" epoch="7" arch="s390x" src="squid-5.5-6.el9_3.1.src.rpm">
          <filename>squid-5.5-6.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">5e7c56c6f155663f4a664394a04ffa2c554ecb91ae4afd98efcb31786e11d878</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7253</id>
    <title>Moderate: dotnet8.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-16 16:42:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7253" id="RHSA-2023:7253" type="rhsa" title="RHSA-2023:7253"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7253.html" id="ALSA-2023:7253" type="self" title="ALSA-2023:7253"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="dotnet-targeting-pack-8.0" version="8.0.0" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el9_3.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.0-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">2297a091f9c80ade8b3cc0c001e4a71c1c00046fa3da644a1a31fc3574ed907f</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.0" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el9_3.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.0-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">3f5162b47c3878a3103b8d33250c897c1b3d89cef840c84017a4dd1316666150</sum>
        </package>
        <package name="dotnet-host" version="8.0.0" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el9_3.src.rpm">
          <filename>dotnet-host-8.0.0-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">40173c5dd3b27a001b54c690e796d7f60485fafe141dd4374ca904c001104f69</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.0" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el9_3.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.0-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">8378bab51751c174b2c09e24ba23ca482a35711a9fd1da887a6ee65a99fc82b7</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.100" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el9_3.src.rpm">
          <filename>dotnet-templates-8.0-8.0.100-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">9550c7417b52438029a9ac86ca561ca1bc44fd2590e9e49c34f9d454f5ae4a4a</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.100" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el9_3.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.100-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">ad4c1a0dca8fd08911101909273fb27f9fa3aec05a609d9d8846098a253e86d8</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.0" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el9_3.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.0-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">d8a49e92b7542be539c86e00c2368620a93402088d26834673327f19d87a16b0</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.0" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el9_3.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.0-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">dd534a96c79637b544c1a533baf283c8441d792b22abf6cd1694a3ffc84798e1</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="8.0.100" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el9_3.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.100-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">e1cbf015d6c1dfe1aa6c0c6978d91214e8ac0420c37a230432bb63271f960360</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.0" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el9_3.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.0-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">e3ccaaa025f8cffd9cc143009da0f412bdeef0ee54141cc77ffbbf63d1532d3d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7255</id>
    <title>Moderate: dotnet7.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-16 14:30:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.114 and .NET Runtime 7.0.14.
  

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7255" id="RHSA-2023:7255" type="rhsa" title="RHSA-2023:7255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7255.html" id="ALSA-2023:7255" type="self" title="ALSA-2023:7255"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.14" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el9_3.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">03680507814c5cbf455950dfd1ee2f6c947540bda86965d04f36b8a92cc46651</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.14" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el9_3.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">2860c404883eb25932d59fa1de7929a07e55933e65d57aaff3f713468a9d00b3</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.14" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el9_3.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">2e730ce504e4edd54e085e3dbaf86b65ef25192e36d4034f98b4d663593e675d</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.14" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el9_3.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">696318795cd381332d56cbfb21c49fbfe43adc9284068304b2bd7e57cc27653e</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.114" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el9_3.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.114-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">b0a6ccae12dbbd1ea3ceb9319b7a30fa61084212778b33a8b304075276e809df</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.14" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el9_3.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">b6f1623d59fa9018e603c441b7d2532acfc921857707eaeddb7ec989f3998c1a</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.114" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el9_3.src.rpm">
          <filename>dotnet-templates-7.0-7.0.114-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">d905dffe50be64ec00ffc0af5554e773f664b929eb76902e94c747adb1c06bb2</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.14" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el9_3.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">e709ae65410cdee0763c78cc0103dcfc85c52c28ceb14c159d1aacd5201881ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7257</id>
    <title>Moderate: dotnet6.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-16 16:32:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.125 and .NET Runtime 6.0.25.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7257" id="RHSA-2023:7257" type="rhsa" title="RHSA-2023:7257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7257.html" id="ALSA-2023:7257" type="self" title="ALSA-2023:7257"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="dotnet-apphost-pack-6.0" version="6.0.25" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el9_3.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.25-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">576b37f41e8eb147b715f9400729929ca09a957427616e4e9901c6a57b9b81d2</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.125" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el9_3.src.rpm">
          <filename>dotnet-templates-6.0-6.0.125-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">73248944dbede1d997398f2eb685fbc36dba2f84aeb87f591f4de31e8c70e583</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.25" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el9_3.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.25-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">8a20f1a93690457c6d8a1ad83135f90380f907479b56a200dda75034b07b1e79</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.25" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el9_3.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.25-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">97f742cea27291323f71eb234d01864c654ba9914d23e30cc959cb416cf41125</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.25" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el9_3.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.25-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">abf35ce0129c1af628b653a44036acc26110d75d92d3e9b7772abeedcddfc781</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.25" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el9_3.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.25-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">b14e2293c238bc924490b409917109bad1182a58585bd4ad2eb64083c850f972</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.25" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el9_3.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.25-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">d16a5dd2e29c940e0e095cb47b4c843c4e939417c4ba6aea31a955d90b62260e</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.125" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el9_3.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.125-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">e0e75978652a2a4c21bdc3598edb31e5c40acef35cb8da25ed5d3f40f34ae466</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7465</id>
    <title>Important: squid security update</title>
    <issued date="2023-11-22 00:00:00"/>
    <updated date="2023-11-23 08:38:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: DoS against HTTP and HTTPS (CVE-2023-5824)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7465" id="RHSA-2023:7465" type="rhsa" title="RHSA-2023:7465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5824" id="CVE-2023-5824" type="cve" title="CVE-2023-5824"/>
      <reference href="https://bugzilla.redhat.com/2245914" id="2245914" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7465.html" id="ALSA-2023:7465" type="self" title="ALSA-2023:7465"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="squid" version="5.5" release="6.el9_3.2" epoch="7" arch="s390x" src="squid-5.5-6.el9_3.2.src.rpm">
          <filename>squid-5.5-6.el9_3.2.s390x.rpm</filename>
          <sum type="sha256">2622fd6b595278887d67d5033f24f22bf63aeb18ecc71f4b3c8474c2688e52cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7501</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-11-27 00:00:00"/>
    <updated date="2023-11-29 17:32:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.5.0.

Security Fix(es):

* Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer (CVE-2023-6204)
* Mozilla: Use-after-free in MessagePort::Entangled (CVE-2023-6205)
* Mozilla: Clickjacking permission prompts using the fullscreen transition (CVE-2023-6206)
* Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (CVE-2023-6207)
* Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 (CVE-2023-6212)
* Mozilla: Using Selection API would copy contents into X11 primary selection. (CVE-2023-6208)
* Mozilla: Incorrect parsing of relative URLs starting with "///" (CVE-2023-6209)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7501" id="RHSA-2023:7501" type="rhsa" title="RHSA-2023:7501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6204" id="CVE-2023-6204" type="cve" title="CVE-2023-6204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6205" id="CVE-2023-6205" type="cve" title="CVE-2023-6205"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6206" id="CVE-2023-6206" type="cve" title="CVE-2023-6206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6207" id="CVE-2023-6207" type="cve" title="CVE-2023-6207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6208" id="CVE-2023-6208" type="cve" title="CVE-2023-6208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6209" id="CVE-2023-6209" type="cve" title="CVE-2023-6209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6212" id="CVE-2023-6212" type="cve" title="CVE-2023-6212"/>
      <reference href="https://bugzilla.redhat.com/2250896" id="2250896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250897" id="2250897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250898" id="2250898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250899" id="2250899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250900" id="2250900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250901" id="2250901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250902" id="2250902" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7501.html" id="ALSA-2023:7501" type="self" title="ALSA-2023:7501"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="thunderbird" version="115.5.0" release="1.el9_3.alma" epoch="0" arch="s390x" src="thunderbird-115.5.0-1.el9_3.alma.src.rpm">
          <filename>thunderbird-115.5.0-1.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">f48d10c3f7af0953cf150d6be03763849eeb2c92aa6d196e019ab1fad478f5a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7507</id>
    <title>Important: firefox security update</title>
    <issued date="2023-11-27 00:00:00"/>
    <updated date="2023-11-29 17:30:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.5.0 ESR.

Security Fix(es):

* Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer (CVE-2023-6204)
* Mozilla: Use-after-free in MessagePort::Entangled (CVE-2023-6205)
* Mozilla: Clickjacking permission prompts using the fullscreen transition (CVE-2023-6206)
* Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (CVE-2023-6207)
* Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 (CVE-2023-6212)
* Mozilla: Using Selection API would copy contents into X11 primary selection. (CVE-2023-6208)
* Mozilla: Incorrect parsing of relative URLs starting with "///" (CVE-2023-6209)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7507" id="RHSA-2023:7507" type="rhsa" title="RHSA-2023:7507"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6204" id="CVE-2023-6204" type="cve" title="CVE-2023-6204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6205" id="CVE-2023-6205" type="cve" title="CVE-2023-6205"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6206" id="CVE-2023-6206" type="cve" title="CVE-2023-6206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6207" id="CVE-2023-6207" type="cve" title="CVE-2023-6207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6208" id="CVE-2023-6208" type="cve" title="CVE-2023-6208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6209" id="CVE-2023-6209" type="cve" title="CVE-2023-6209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6212" id="CVE-2023-6212" type="cve" title="CVE-2023-6212"/>
      <reference href="https://bugzilla.redhat.com/2250896" id="2250896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250897" id="2250897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250898" id="2250898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250899" id="2250899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250900" id="2250900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250901" id="2250901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250902" id="2250902" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7507.html" id="ALSA-2023:7507" type="self" title="ALSA-2023:7507"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="firefox" version="115.5.0" release="1.el9_3.alma.1" epoch="0" arch="s390x" src="firefox-115.5.0-1.el9_3.alma.1.src.rpm">
          <filename>firefox-115.5.0-1.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">8628f05509e05e3b500eb31236b6d410c9f5b98bcd62089b39fbc5befe2cd101</sum>
        </package>
        <package name="firefox-x11" version="115.5.0" release="1.el9_3.alma.1" epoch="0" arch="s390x" src="firefox-115.5.0-1.el9_3.alma.1.src.rpm">
          <filename>firefox-x11-115.5.0-1.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">a61e9b6d3d98056f863dab95e3bc72dfe2be6a05b50df5d1fbc90d3fc465789b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7711</id>
    <title>Moderate: apr security update</title>
    <issued date="2023-12-11 00:00:00"/>
    <updated date="2023-12-11 13:16:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>apr security update</summary>
    <description>The Apache Portable Runtime (APR) is a portability library used by the Apache HTTP Server and other projects. It provides a free library of C data structures and routines.

Security Fix(es):

* apr: integer overflow/wraparound in apr_encode (CVE-2022-24963)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7711" id="RHSA-2023:7711" type="rhsa" title="RHSA-2023:7711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24963" id="CVE-2022-24963" type="cve" title="CVE-2022-24963"/>
      <reference href="https://bugzilla.redhat.com/2169465" id="2169465" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7711.html" id="ALSA-2023:7711" type="self" title="ALSA-2023:7711"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="apr-devel" version="1.7.0" release="12.el9_3" epoch="0" arch="s390x" src="apr-1.7.0-12.el9_3.src.rpm">
          <filename>apr-devel-1.7.0-12.el9_3.s390x.rpm</filename>
          <sum type="sha256">6aac13dcbf258bb1689c88edeb61a911329ffdc8c567793f80eddefb95b5c2a1</sum>
        </package>
        <package name="apr" version="1.7.0" release="12.el9_3" epoch="0" arch="s390x" src="apr-1.7.0-12.el9_3.src.rpm">
          <filename>apr-1.7.0-12.el9_3.s390x.rpm</filename>
          <sum type="sha256">b0061fd109e411313ce7c9dee754b0a918a23e361f1ef5fb622b464933cc2ae0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7712</id>
    <title>Important: tracker-miners security update</title>
    <issued date="2023-12-11 00:00:00"/>
    <updated date="2023-12-12 07:53:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tracker-miners security update</summary>
    <description>Tracker is a powerful desktop-neutral first class object database, tag/metadata database and search tool. This package contains various miners and metadata extractors for tracker.

Security Fix(es):

* tracker-miners: sandbox escape (CVE-2023-5557)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7712" id="RHSA-2023:7712" type="rhsa" title="RHSA-2023:7712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5557" id="CVE-2023-5557" type="cve" title="CVE-2023-5557"/>
      <reference href="https://bugzilla.redhat.com/2243096" id="2243096" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7712.html" id="ALSA-2023:7712" type="self" title="ALSA-2023:7712"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="tracker-miners" version="3.1.2" release="4.el9_3" epoch="0" arch="s390x" src="tracker-miners-3.1.2-4.el9_3.src.rpm">
          <filename>tracker-miners-3.1.2-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">24d2a83d93823945b983c449b46b4190881b763c7f545bb85e51a4b974d1ee1d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7715</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-12-11 00:00:00"/>
    <updated date="2023-12-12 07:49:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7715" id="RHSA-2023:7715" type="rhsa" title="RHSA-2023:7715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42917" id="CVE-2023-42917" type="cve" title="CVE-2023-42917"/>
      <reference href="https://bugzilla.redhat.com/2253058" id="2253058" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7715.html" id="ALSA-2023:7715" type="self" title="ALSA-2023:7715"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="webkit2gtk3" version="2.40.5" release="1.el9_3.1" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el9_3.1.src.rpm">
          <filename>webkit2gtk3-2.40.5-1.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">043d599f817dec8417c1a281d30c7b0efbc021621f58faa9d6c7bc073f6aeb83</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.40.5" release="1.el9_3.1" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el9_3.1.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.40.5-1.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">580cc14c7aecb2505d3bb22f5f43ae526d37b387253db275c7e5333508a42325</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.40.5" release="1.el9_3.1" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el9_3.1.src.rpm">
          <filename>webkit2gtk3-jsc-2.40.5-1.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">96c2171a2584b826002d67a20f356fba93772b407d3b234b8c1e4b7fdadeeb41</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.40.5" release="1.el9_3.1" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el9_3.1.src.rpm">
          <filename>webkit2gtk3-devel-2.40.5-1.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">a33a78f766f7cd026bb39240dc9249acd52b0564b5f17e9546a47ef313ec728d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7747</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2023-12-12 00:00:00"/>
    <updated date="2023-12-14 09:39:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7747" id="RHSA-2023:7747" type="rhsa" title="RHSA-2023:7747"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39615" id="CVE-2023-39615" type="cve" title="CVE-2023-39615"/>
      <reference href="https://bugzilla.redhat.com/2235864" id="2235864" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7747.html" id="ALSA-2023:7747" type="self" title="ALSA-2023:7747"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="libxml2-devel" version="2.9.13" release="5.el9_3" epoch="0" arch="s390x" src="libxml2-2.9.13-5.el9_3.src.rpm">
          <filename>libxml2-devel-2.9.13-5.el9_3.s390x.rpm</filename>
          <sum type="sha256">fed0af2a10cd84d0448300ae1c2c773ab26a17ce253fd01f00d1f9191bf83608</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7753</id>
    <title>Moderate: fence-agents security update</title>
    <issued date="2023-12-12 00:00:00"/>
    <updated date="2023-12-15 09:46:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. 

Security Fix(es):

* python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920)
* python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7753" id="RHSA-2023:7753" type="rhsa" title="RHSA-2023:7753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37920" id="CVE-2023-37920" type="cve" title="CVE-2023-37920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43804" id="CVE-2023-43804" type="cve" title="CVE-2023-43804"/>
      <reference href="https://bugzilla.redhat.com/2226586" id="2226586" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242493" id="2242493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7753.html" id="ALSA-2023:7753" type="self" title="ALSA-2023:7753"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="fence-agents-kubevirt" version="4.10.0" release="55.el9_3.2.alma.1" epoch="0" arch="s390x" src="fence-agents-4.10.0-55.el9_3.2.alma.1.src.rpm">
          <filename>fence-agents-kubevirt-4.10.0-55.el9_3.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">1c990ca2b2187755d8c2aa4304c75ebcbc714bebbfb688273094709334b998fc</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.10.0" release="55.el9_3.2.alma.1" epoch="0" arch="noarch" src="fence-agents-4.10.0-55.el9_3.2.alma.1.src.rpm">
          <filename>fence-agents-ibm-vpc-4.10.0-55.el9_3.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">7945b340fe328494dd4f3e89fb3ceb0c36fb0a70648bc9bbbf1a938ff741b364</sum>
        </package>
        <package name="fence-agents-ibm-powervs" version="4.10.0" release="55.el9_3.2.alma.1" epoch="0" arch="noarch" src="fence-agents-4.10.0-55.el9_3.2.alma.1.src.rpm">
          <filename>fence-agents-ibm-powervs-4.10.0-55.el9_3.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">80eff58a1a89b97995a951a4efcecc45eefbbc90757a0c4d7d1024bae7fa2edf</sum>
        </package>
        <package name="fence-agents-common" version="4.10.0" release="55.el9_3.2.alma.1" epoch="0" arch="noarch" src="fence-agents-4.10.0-55.el9_3.2.alma.1.src.rpm">
          <filename>fence-agents-common-4.10.0-55.el9_3.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">dc2d621180d9db27968919115009987ddf187fba19a3589f99e1186e8040865b</sum>
        </package>
        <package name="fence-agents-virsh" version="4.10.0" release="55.el9_3.2.alma.1" epoch="0" arch="noarch" src="fence-agents-4.10.0-55.el9_3.2.alma.1.src.rpm">
          <filename>fence-agents-virsh-4.10.0-55.el9_3.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">ef5db45357e983592d039b048539ec273e77876282975353eb099a6599f9b9c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7754</id>
    <title>Moderate: pixman security update</title>
    <issued date="2023-12-12 00:00:00"/>
    <updated date="2023-12-14 09:39:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>pixman security update</summary>
    <description>Pixman is a pixel manipulation library for the X Window System and Cairo.

Security Fix(es):

* pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (CVE-2022-44638)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7754" id="RHSA-2023:7754" type="rhsa" title="RHSA-2023:7754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-44638" id="CVE-2022-44638" type="cve" title="CVE-2022-44638"/>
      <reference href="https://bugzilla.redhat.com/2139988" id="2139988" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7754.html" id="ALSA-2023:7754" type="self" title="ALSA-2023:7754"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="pixman-devel" version="0.40.0" release="6.el9_3" epoch="0" arch="s390x" src="pixman-0.40.0-6.el9_3.src.rpm">
          <filename>pixman-devel-0.40.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">bc18de8eb8ef9b86bd91067a7dffa3986abb32ee9558599c08a11857679fc306</sum>
        </package>
        <package name="pixman" version="0.40.0" release="6.el9_3" epoch="0" arch="s390x" src="pixman-0.40.0-6.el9_3.src.rpm">
          <filename>pixman-0.40.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">fcfb86a1c84f16e1f4c217b1d5fe6b32a05b4a6db0a2d8f99213ea4fb0d44e4a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7762</id>
    <title>Moderate: skopeo security update</title>
    <issued date="2023-12-12 00:00:00"/>
    <updated date="2023-12-14 09:39:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>skopeo security update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. 

Security Fix(es):

* golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409)
* golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318)
* golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319)
* golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)
* golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7762" id="RHSA-2023:7762" type="rhsa" title="RHSA-2023:7762"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29409" id="CVE-2023-29409" type="cve" title="CVE-2023-29409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39318" id="CVE-2023-39318" type="cve" title="CVE-2023-39318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39319" id="CVE-2023-39319" type="cve" title="CVE-2023-39319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39321" id="CVE-2023-39321" type="cve" title="CVE-2023-39321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39322" id="CVE-2023-39322" type="cve" title="CVE-2023-39322"/>
      <reference href="https://bugzilla.redhat.com/2228743" id="2228743" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237773" id="2237773" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237776" id="2237776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237777" id="2237777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237778" id="2237778" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7762.html" id="ALSA-2023:7762" type="self" title="ALSA-2023:7762"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="skopeo-tests" version="1.13.3" release="3.el9_3" epoch="2" arch="s390x" src="skopeo-1.13.3-3.el9_3.src.rpm">
          <filename>skopeo-tests-1.13.3-3.el9_3.s390x.rpm</filename>
          <sum type="sha256">40f439741f357957f1fde35deaf4914fbb87ea994963b978177ead40be4e797d</sum>
        </package>
        <package name="skopeo" version="1.13.3" release="3.el9_3" epoch="2" arch="s390x" src="skopeo-1.13.3-3.el9_3.src.rpm">
          <filename>skopeo-1.13.3-3.el9_3.s390x.rpm</filename>
          <sum type="sha256">a8d4d1b803e3d37b3194585ec118385721f25e500adda6b088e4312abd5ba172</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7763</id>
    <title>Moderate: runc security update</title>
    <issued date="2023-12-12 00:00:00"/>
    <updated date="2023-12-14 09:39:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>runc security update</summary>
    <description>The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.

Security Fix(es):

* golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409)
* golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)
* golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7763" id="RHSA-2023:7763" type="rhsa" title="RHSA-2023:7763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29409" id="CVE-2023-29409" type="cve" title="CVE-2023-29409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39321" id="CVE-2023-39321" type="cve" title="CVE-2023-39321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39322" id="CVE-2023-39322" type="cve" title="CVE-2023-39322"/>
      <reference href="https://bugzilla.redhat.com/2228743" id="2228743" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237777" id="2237777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237778" id="2237778" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7763.html" id="ALSA-2023:7763" type="self" title="ALSA-2023:7763"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="runc" version="1.1.9" release="2.el9_3" epoch="4" arch="s390x" src="runc-1.1.9-2.el9_3.src.rpm">
          <filename>runc-1.1.9-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">940f6140a2213d5d8a89c85c2481b38190cd4f460eb795ffffc9ee3159a74251</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7764</id>
    <title>Moderate: buildah security update</title>
    <issued date="2023-12-12 00:00:00"/>
    <updated date="2023-12-14 09:39:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. 

Security Fix(es):

* golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409)
* golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318)
* golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319)
* golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)
* golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7764" id="RHSA-2023:7764" type="rhsa" title="RHSA-2023:7764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29409" id="CVE-2023-29409" type="cve" title="CVE-2023-29409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39318" id="CVE-2023-39318" type="cve" title="CVE-2023-39318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39319" id="CVE-2023-39319" type="cve" title="CVE-2023-39319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39321" id="CVE-2023-39321" type="cve" title="CVE-2023-39321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39322" id="CVE-2023-39322" type="cve" title="CVE-2023-39322"/>
      <reference href="https://bugzilla.redhat.com/2228743" id="2228743" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237773" id="2237773" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237776" id="2237776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237777" id="2237777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237778" id="2237778" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7764.html" id="ALSA-2023:7764" type="self" title="ALSA-2023:7764"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="buildah" version="1.31.3" release="2.el9_3" epoch="1" arch="s390x" src="buildah-1.31.3-2.el9_3.src.rpm">
          <filename>buildah-1.31.3-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">6b009a5bf2c56599e7fb9ec0bf92e7b2f6558418068511dbd139594da1d2664b</sum>
        </package>
        <package name="buildah-tests" version="1.31.3" release="2.el9_3" epoch="1" arch="s390x" src="buildah-1.31.3-2.el9_3.src.rpm">
          <filename>buildah-tests-1.31.3-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">f76889fa2b08aa9717122e68d644aeedaec9a8f9769ef0920670c2d964bbd691</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7765</id>
    <title>Moderate: podman security update</title>
    <issued date="2023-12-12 00:00:00"/>
    <updated date="2023-12-14 09:39:38"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

* golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409)
* golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318)
* golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319)
* golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)
* golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7765" id="RHSA-2023:7765" type="rhsa" title="RHSA-2023:7765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29409" id="CVE-2023-29409" type="cve" title="CVE-2023-29409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39318" id="CVE-2023-39318" type="cve" title="CVE-2023-39318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39319" id="CVE-2023-39319" type="cve" title="CVE-2023-39319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39321" id="CVE-2023-39321" type="cve" title="CVE-2023-39321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39322" id="CVE-2023-39322" type="cve" title="CVE-2023-39322"/>
      <reference href="https://bugzilla.redhat.com/2228743" id="2228743" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237773" id="2237773" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237776" id="2237776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237777" id="2237777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237778" id="2237778" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7765.html" id="ALSA-2023:7765" type="self" title="ALSA-2023:7765"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="podman-remote" version="4.6.1" release="7.el9_3" epoch="2" arch="s390x" src="podman-4.6.1-7.el9_3.src.rpm">
          <filename>podman-remote-4.6.1-7.el9_3.s390x.rpm</filename>
          <sum type="sha256">339e0993591f16c2fc02d6c9ed519f79142b36cc76696a1f77f5b2fa8acf3e5f</sum>
        </package>
        <package name="podman-tests" version="4.6.1" release="7.el9_3" epoch="2" arch="s390x" src="podman-4.6.1-7.el9_3.src.rpm">
          <filename>podman-tests-4.6.1-7.el9_3.s390x.rpm</filename>
          <sum type="sha256">59b6325d0517a23b95cfed12cb6ace1d8934f999d1745748d18cd8928953aed1</sum>
        </package>
        <package name="podman-gvproxy" version="4.6.1" release="7.el9_3" epoch="2" arch="s390x" src="podman-4.6.1-7.el9_3.src.rpm">
          <filename>podman-gvproxy-4.6.1-7.el9_3.s390x.rpm</filename>
          <sum type="sha256">88a3462c563ea6f1da699c698ac078a08618256ed18ea767fa8c43a1c7ebd969</sum>
        </package>
        <package name="podman-plugins" version="4.6.1" release="7.el9_3" epoch="2" arch="s390x" src="podman-4.6.1-7.el9_3.src.rpm">
          <filename>podman-plugins-4.6.1-7.el9_3.s390x.rpm</filename>
          <sum type="sha256">be7f57edbb4d5126be2592eaebf38e798e9c9ed61440036e745add79f20333a9</sum>
        </package>
        <package name="podman-docker" version="4.6.1" release="7.el9_3" epoch="2" arch="noarch" src="podman-4.6.1-7.el9_3.src.rpm">
          <filename>podman-docker-4.6.1-7.el9_3.noarch.rpm</filename>
          <sum type="sha256">e04db657a2b32f8ed6237a285a6a374c16fa32b0c4359d0aaaf7473b962e109d</sum>
        </package>
        <package name="podman" version="4.6.1" release="7.el9_3" epoch="2" arch="s390x" src="podman-4.6.1-7.el9_3.src.rpm">
          <filename>podman-4.6.1-7.el9_3.s390x.rpm</filename>
          <sum type="sha256">fb112135cae5ad1e014edfca99315279cfc0958331aa4dc979212b1e8a268392</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7766</id>
    <title>Moderate: containernetworking-plugins security update</title>
    <issued date="2023-12-12 00:00:00"/>
    <updated date="2023-12-14 09:39:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>containernetworking-plugins security update</summary>
    <description>The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. 

Security Fix(es):

* golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409)
* golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318)
* golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319)
* golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)
* golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7766" id="RHSA-2023:7766" type="rhsa" title="RHSA-2023:7766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29409" id="CVE-2023-29409" type="cve" title="CVE-2023-29409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39318" id="CVE-2023-39318" type="cve" title="CVE-2023-39318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39319" id="CVE-2023-39319" type="cve" title="CVE-2023-39319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39321" id="CVE-2023-39321" type="cve" title="CVE-2023-39321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39322" id="CVE-2023-39322" type="cve" title="CVE-2023-39322"/>
      <reference href="https://bugzilla.redhat.com/2228743" id="2228743" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237773" id="2237773" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237776" id="2237776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237777" id="2237777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237778" id="2237778" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7766.html" id="ALSA-2023:7766" type="self" title="ALSA-2023:7766"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="containernetworking-plugins" version="1.3.0" release="6.el9_3" epoch="1" arch="s390x" src="containernetworking-plugins-1.3.0-6.el9_3.src.rpm">
          <filename>containernetworking-plugins-1.3.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">13c571102b6d3809d40603f6c993666f4980fe22f8c1a73498d3ffee7c3aff8f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7784</id>
    <title>Important: postgresql security update</title>
    <issued date="2023-12-13 00:00:00"/>
    <updated date="2023-12-14 11:47:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869)
* postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868)
* postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417)
* postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7784" id="RHSA-2023:7784" type="rhsa" title="RHSA-2023:7784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39417" id="CVE-2023-39417" type="cve" title="CVE-2023-39417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5868" id="CVE-2023-5868" type="cve" title="CVE-2023-5868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5869" id="CVE-2023-5869" type="cve" title="CVE-2023-5869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5870" id="CVE-2023-5870" type="cve" title="CVE-2023-5870"/>
      <reference href="https://bugzilla.redhat.com/2228111" id="2228111" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247168" id="2247168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247169" id="2247169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247170" id="2247170" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7784.html" id="ALSA-2023:7784" type="self" title="ALSA-2023:7784"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="postgresql-contrib" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-contrib-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">294596072827da1618f9d38631a7b7854f376b520d81032ac009e6327158fc67</sum>
        </package>
        <package name="postgresql-plperl" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-plperl-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">307d6a221ee6cc5b52467ef383a5e2c24ef5c07c2f6a484904fb60c48f81e437</sum>
        </package>
        <package name="postgresql-upgrade" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-upgrade-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">55fefa49345afaa7a26137e5f4c0e4fa3935e7f384f69085d3e1f606969ae422</sum>
        </package>
        <package name="postgresql-plpython3" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-plpython3-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">569436fcda3da23c0a37923e087e81a48fadaab7e137d7f21953ae332b26fced</sum>
        </package>
        <package name="postgresql-pltcl" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-pltcl-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">5dba871dae5eb2ada0d4885cdc3b705be6c5275b7609f8a11bc17d8c494140ac</sum>
        </package>
        <package name="postgresql-private-libs" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-private-libs-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">61e69f3d98b1c8cb9b63c442329535e98a77a477cfb877563384d9d4ab312177</sum>
        </package>
        <package name="postgresql-server" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-server-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">999c92b54032f90c20ce2e2e8779d0afcffa04e8b1a0eb5fa30d9d9ace77febb</sum>
        </package>
        <package name="postgresql" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">dffa89fd6d0fef59e31fd50c607ff1048d475d0a567794d9fc6cba5cd57bc2c8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7785</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2023-12-13 00:00:00"/>
    <updated date="2023-12-22 09:57:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869)
* postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868)
* postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417)
* postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870)
* postgresql: MERGE fails to enforce UPDATE or SELECT row security policies (CVE-2023-39418)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7785" id="RHSA-2023:7785" type="rhsa" title="RHSA-2023:7785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39417" id="CVE-2023-39417" type="cve" title="CVE-2023-39417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39418" id="CVE-2023-39418" type="cve" title="CVE-2023-39418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5868" id="CVE-2023-5868" type="cve" title="CVE-2023-5868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5869" id="CVE-2023-5869" type="cve" title="CVE-2023-5869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5870" id="CVE-2023-5870" type="cve" title="CVE-2023-5870"/>
      <reference href="https://bugzilla.redhat.com/2228111" id="2228111" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228112" id="2228112" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247168" id="2247168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247169" id="2247169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247170" id="2247170" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7785.html" id="ALSA-2023:7785" type="self" title="ALSA-2023:7785"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <module name="postgresql" stream="15" version="9030020231221121048" context="8cf767d6" arch="s390x"/>
        <package name="postgresql" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">2879f1dbc378bf4db97f6e58943e806336fa8481e8de62114472aec32f994677</sum>
        </package>
        <package name="postgresql-upgrade" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-upgrade-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">34f9f78460d33972f0163a50ccd45eed7b64b778cfa48de860e5bb8774903904</sum>
        </package>
        <package name="postgresql-private-devel" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-private-devel-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">35ad49573e821591ab76c54b29e8724da2f7052304489f5eb6d98fb3aa756bbb</sum>
        </package>
        <package name="postgresql-plperl" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-plperl-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">3b46e886f0cc6d6aa1b7ac8de7d59796dc3723ef44fec61a457757950c6ca4a2</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-upgrade-devel-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">5ae6b6957cc6d4ecb9b21b9aa4ea89e5b243833c6a4aa7362c4593aa55897f87</sum>
        </package>
        <package name="postgresql-plpython3" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-plpython3-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">80c732422029056d13819cf4762cc8a41e16d693908071c20c0924dc08ca972b</sum>
        </package>
        <package name="postgresql-contrib" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-contrib-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">834048c115b9e189b79eec889599fcb20c824c7711a1af8e9b33cffcb8cee158</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el9.2.0+22+09653793" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el9.2.0+22+09653793.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el9.2.0+22+09653793.s390x.rpm</filename>
          <sum type="sha256">8aa663b5c2ff175148a949b30c8b031b034134291fa2b86fad010de3264ce975</sum>
        </package>
        <package name="postgresql-pltcl" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-pltcl-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">912e7eda25884a096342de363e04d9ee7a85307601ed7b9f89cc5b9c2a7a87c2</sum>
        </package>
        <package name="postgresql-private-libs" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-private-libs-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">a1632d9d7f9176fd998a39e8eff9fc8356928a4803a89dca548bc5c2ba681845</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el9.2.0+22+09653793" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el9.2.0+22+09653793.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el9.2.0+22+09653793.s390x.rpm</filename>
          <sum type="sha256">aae4db5a7b2a459bedc06107e043df328af5aba310f7377482a759ca6f274258</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="noarch" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-test-rpm-macros-15.5-1.module_el9.3.0+52+21733919.noarch.rpm</filename>
          <sum type="sha256">af65d718e2abe6c7280c9eabb0ca53120f62f0c2941b6d1c76bc6dd9aef13a19</sum>
        </package>
        <package name="postgresql-server-devel" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-server-devel-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">b517ea727f893220a2f3fd7a573602c9ac33a689028a081dfc20344e1a63c5de</sum>
        </package>
        <package name="postgresql-docs" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-docs-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">c0de91ee13afda6ec068ccffee80c9a5135d2a341911958c7391a3bdec615a3c</sum>
        </package>
        <package name="postgresql-test" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-test-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">e24a62f50d5d1b23684fbe40d4afc3f2ea2044033c2e6d25a2579897a9626bcc</sum>
        </package>
        <package name="postgresql-static" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-static-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">e97bf6b8bfb3cb1c5799eba11d004933b63b31d75d651091ee7f5a8e2cf2a51e</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el9.2.0+22+09653793" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el9.2.0+22+09653793.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el9.2.0+22+09653793.s390x.rpm</filename>
          <sum type="sha256">ed411af5e135cda227ddf7b810e4e04e1e6d923ead9a5300a03d167542d996c9</sum>
        </package>
        <package name="postgresql-server" version="15.5" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgresql-server-15.5-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">f92159624c4189caa16e70dc9055043f3632113708df8a6e72b79e3273857153</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7791</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2023-12-13 00:00:00"/>
    <updated date="2023-12-14 09:39:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer: AV1 codec parser heap-based buffer overflow (CVE-2023-44429)
* gstreamer: MXF demuxer use-after-free vulnerability (CVE-2023-44446)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7791" id="RHSA-2023:7791" type="rhsa" title="RHSA-2023:7791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44429" id="CVE-2023-44429" type="cve" title="CVE-2023-44429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44446" id="CVE-2023-44446" type="cve" title="CVE-2023-44446"/>
      <reference href="https://bugzilla.redhat.com/2250247" id="2250247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250249" id="2250249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7791.html" id="ALSA-2023:7791" type="self" title="ALSA-2023:7791"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="gstreamer1-plugins-bad-free" version="1.22.1" release="2.el9_3" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.1-2.el9_3.src.rpm">
          <filename>gstreamer1-plugins-bad-free-1.22.1-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">fe35fca090b17447e3f46fe5cc6bdebf083dfb275945ead106a42e5c7bc388b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0001</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-01-02 00:00:00"/>
    <updated date="2024-01-03 17:21:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.6.0.

Security Fix(es):

* Mozilla: Heap-buffer-overflow affecting WebGL &lt;code&gt;DrawElementsInstanced&lt;/code&gt; method with Mesa VM driver (CVE-2023-6856)
* Mozilla: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6 (CVE-2023-6864)
* Mozilla: S/MIME signature accepted despite mismatching message date (CVE-2023-50761)
* Mozilla: Truncated signed text was shown with a valid OpenPGP signature (CVE-2023-50762)
* Mozilla: Symlinks may resolve to smaller than expected buffers (CVE-2023-6857)
* Mozilla: Heap buffer overflow in &lt;code&gt;nsTextFragment&lt;/code&gt; (CVE-2023-6858)
* Mozilla: Use-after-free in PR_GetIdentitiesLayer (CVE-2023-6859)
* Mozilla: Potential sandbox escape due to &lt;code&gt;VideoBridge&lt;/code&gt; lack of texture validation (CVE-2023-6860)
* Mozilla: Heap buffer overflow affected &lt;code&gt;nsWindow::PickerOpen(void)&lt;/code&gt; in headless mode (CVE-2023-6861)
* Mozilla: Use-after-free in &lt;code&gt;nsDNSService&lt;/code&gt; (CVE-2023-6862)
* Mozilla: Undefined behavior in &lt;code&gt;ShutdownObserver()&lt;/code&gt; (CVE-2023-6863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0001" id="RHSA-2024:0001" type="rhsa" title="RHSA-2024:0001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50761" id="CVE-2023-50761" type="cve" title="CVE-2023-50761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50762" id="CVE-2023-50762" type="cve" title="CVE-2023-50762"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6856" id="CVE-2023-6856" type="cve" title="CVE-2023-6856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6857" id="CVE-2023-6857" type="cve" title="CVE-2023-6857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6858" id="CVE-2023-6858" type="cve" title="CVE-2023-6858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6859" id="CVE-2023-6859" type="cve" title="CVE-2023-6859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6860" id="CVE-2023-6860" type="cve" title="CVE-2023-6860"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6861" id="CVE-2023-6861" type="cve" title="CVE-2023-6861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6862" id="CVE-2023-6862" type="cve" title="CVE-2023-6862"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6863" id="CVE-2023-6863" type="cve" title="CVE-2023-6863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6864" id="CVE-2023-6864" type="cve" title="CVE-2023-6864"/>
      <reference href="https://bugzilla.redhat.com/2255360" id="2255360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255362" id="2255362" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255363" id="2255363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255364" id="2255364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255365" id="2255365" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255367" id="2255367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255368" id="2255368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255369" id="2255369" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255370" id="2255370" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255378" id="2255378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255379" id="2255379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0001.html" id="ALSA-2024:0001" type="self" title="ALSA-2024:0001"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="thunderbird" version="115.6.0" release="1.el9_3.alma" epoch="0" arch="s390x" src="thunderbird-115.6.0-1.el9_3.alma.src.rpm">
          <filename>thunderbird-115.6.0-1.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">e5cc9d50f0d3a997a88461ab422eff1f8a6b606237de698c08fca6b1bcebed9b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0010</id>
    <title>Important: tigervnc security update</title>
    <issued date="2024-01-02 00:00:00"/>
    <updated date="2024-01-03 17:17:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
* xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
* xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0010" id="RHSA-2024:0010" type="rhsa" title="RHSA-2024:0010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5367" id="CVE-2023-5367" type="cve" title="CVE-2023-5367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6377" id="CVE-2023-6377" type="cve" title="CVE-2023-6377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6478" id="CVE-2023-6478" type="cve" title="CVE-2023-6478"/>
      <reference href="https://bugzilla.redhat.com/2243091" id="2243091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253291" id="2253291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253298" id="2253298" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0010.html" id="ALSA-2024:0010" type="self" title="ALSA-2024:0010"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="tigervnc-server-module" version="1.13.1" release="3.el9_3.3.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-3.el9_3.3.alma.1.src.rpm">
          <filename>tigervnc-server-module-1.13.1-3.el9_3.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">24430a8537d7b994f88520239d1b932eadba811b109399893a8cbfae5d10d213</sum>
        </package>
        <package name="tigervnc-license" version="1.13.1" release="3.el9_3.3.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-3.el9_3.3.alma.1.src.rpm">
          <filename>tigervnc-license-1.13.1-3.el9_3.3.alma.1.noarch.rpm</filename>
          <sum type="sha256">24e7c7b936310a7431a75cd4667a29a921adf4498d6b590d9d39f8bfc6b04e4d</sum>
        </package>
        <package name="tigervnc-icons" version="1.13.1" release="3.el9_3.3.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-3.el9_3.3.alma.1.src.rpm">
          <filename>tigervnc-icons-1.13.1-3.el9_3.3.alma.1.noarch.rpm</filename>
          <sum type="sha256">3a9e687b068bc354e443cf57ab3543461ec41d8cb40b8746dd3c3582b55ca406</sum>
        </package>
        <package name="tigervnc-server" version="1.13.1" release="3.el9_3.3.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-3.el9_3.3.alma.1.src.rpm">
          <filename>tigervnc-server-1.13.1-3.el9_3.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">6666f3ead3262d4e1fe03f04afd01bbc9a09885b57e1a7e5cb0dd840e45c1f65</sum>
        </package>
        <package name="tigervnc" version="1.13.1" release="3.el9_3.3.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-3.el9_3.3.alma.1.src.rpm">
          <filename>tigervnc-1.13.1-3.el9_3.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">9ccc182315dfc34d5a11b5fea2179cf96237a98038c069f88e8e2c9a5ab4db48</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.13.1" release="3.el9_3.3.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-3.el9_3.3.alma.1.src.rpm">
          <filename>tigervnc-server-minimal-1.13.1-3.el9_3.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">d031d1345a831a91338dd165a0989e3ee59a92419a41998506e985820283d608</sum>
        </package>
        <package name="tigervnc-selinux" version="1.13.1" release="3.el9_3.3.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-3.el9_3.3.alma.1.src.rpm">
          <filename>tigervnc-selinux-1.13.1-3.el9_3.3.alma.1.noarch.rpm</filename>
          <sum type="sha256">ff518f13e65a4aca8f744ae459296109897598014a61b9acfb792901d7f37af7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0025</id>
    <title>Important: firefox security update</title>
    <issued date="2024-01-02 00:00:00"/>
    <updated date="2024-01-03 17:14:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.6.0 ESR.

Security Fix(es):

* Mozilla: Heap-buffer-overflow affecting WebGL &lt;code&gt;DrawElementsInstanced&lt;/code&gt; method with Mesa VM driver (CVE-2023-6856)
* Mozilla: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6 (CVE-2023-6864)
* Mozilla: Potential exposure of uninitialized data in &lt;code&gt;EncryptingOutputStream&lt;/code&gt; (CVE-2023-6865)
* Mozilla: Symlinks may resolve to smaller than expected buffers (CVE-2023-6857)
* Mozilla: Heap buffer overflow in &lt;code&gt;nsTextFragment&lt;/code&gt; (CVE-2023-6858)
* Mozilla: Use-after-free in PR_GetIdentitiesLayer (CVE-2023-6859)
* Mozilla: Potential sandbox escape due to &lt;code&gt;VideoBridge&lt;/code&gt; lack of texture validation (CVE-2023-6860)
* Mozilla: Heap buffer overflow affected &lt;code&gt;nsWindow::PickerOpen(void)&lt;/code&gt; in headless mode (CVE-2023-6861)
* Mozilla: Use-after-free in &lt;code&gt;nsDNSService&lt;/code&gt; (CVE-2023-6862)
* Mozilla: Clickjacking permission prompts using the popup transition (CVE-2023-6867)
* Mozilla: Undefined behavior in &lt;code&gt;ShutdownObserver()&lt;/code&gt; (CVE-2023-6863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0025" id="RHSA-2024:0025" type="rhsa" title="RHSA-2024:0025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6856" id="CVE-2023-6856" type="cve" title="CVE-2023-6856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6857" id="CVE-2023-6857" type="cve" title="CVE-2023-6857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6858" id="CVE-2023-6858" type="cve" title="CVE-2023-6858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6859" id="CVE-2023-6859" type="cve" title="CVE-2023-6859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6860" id="CVE-2023-6860" type="cve" title="CVE-2023-6860"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6861" id="CVE-2023-6861" type="cve" title="CVE-2023-6861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6862" id="CVE-2023-6862" type="cve" title="CVE-2023-6862"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6863" id="CVE-2023-6863" type="cve" title="CVE-2023-6863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6864" id="CVE-2023-6864" type="cve" title="CVE-2023-6864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6865" id="CVE-2023-6865" type="cve" title="CVE-2023-6865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6867" id="CVE-2023-6867" type="cve" title="CVE-2023-6867"/>
      <reference href="https://bugzilla.redhat.com/2255360" id="2255360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255361" id="2255361" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255362" id="2255362" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255363" id="2255363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255364" id="2255364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255365" id="2255365" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255366" id="2255366" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255367" id="2255367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255368" id="2255368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255369" id="2255369" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255370" id="2255370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0025.html" id="ALSA-2024:0025" type="self" title="ALSA-2024:0025"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="firefox" version="115.6.0" release="1.el9_3.alma" epoch="0" arch="s390x" src="firefox-115.6.0-1.el9_3.alma.src.rpm">
          <filename>firefox-115.6.0-1.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">a84e655a1f8277d5728c7123dd8e6e68f1f341a5879043d8efb430de6f2bd60a</sum>
        </package>
        <package name="firefox-x11" version="115.6.0" release="1.el9_3.alma" epoch="0" arch="s390x" src="firefox-115.6.0-1.el9_3.alma.src.rpm">
          <filename>firefox-x11-115.6.0-1.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">bf21182d18c786589b2db6c94ae979ddc6f1d0a4041cd1bb0228324c25e104de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0071</id>
    <title>Important: squid security update</title>
    <issued date="2024-01-08 00:00:00"/>
    <updated date="2024-01-08 13:54:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)
* squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)
* squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285)
* squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0071" id="RHSA-2024:0071" type="rhsa" title="RHSA-2024:0071"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46724" id="CVE-2023-46724" type="cve" title="CVE-2023-46724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46728" id="CVE-2023-46728" type="cve" title="CVE-2023-46728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-49285" id="CVE-2023-49285" type="cve" title="CVE-2023-49285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-49286" id="CVE-2023-49286" type="cve" title="CVE-2023-49286"/>
      <reference href="https://bugzilla.redhat.com/2247567" id="2247567" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248521" id="2248521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2252923" id="2252923" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2252926" id="2252926" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0071.html" id="ALSA-2024:0071" type="self" title="ALSA-2024:0071"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="squid" version="5.5" release="6.el9_3.5" epoch="7" arch="s390x" src="squid-5.5-6.el9_3.5.src.rpm">
          <filename>squid-5.5-6.el9_3.5.s390x.rpm</filename>
          <sum type="sha256">dd8737333807da668cef93da10cfc91ab380b473e6874efb2898331e1ef06e23</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0108</id>
    <title>Moderate: nss security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 16:32:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nss security update</summary>
    <description>Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

* nss: timing attack against RSA decryption (CVE-2023-5388)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0108" id="RHSA-2024:0108" type="rhsa" title="RHSA-2024:0108"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5388" id="CVE-2023-5388" type="cve" title="CVE-2023-5388"/>
      <reference href="https://bugzilla.redhat.com/2243644" id="2243644" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0108.html" id="ALSA-2024:0108" type="self" title="ALSA-2024:0108"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="nss-softokn-devel" version="3.90.0" release="4.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-4.el9_3.src.rpm">
          <filename>nss-softokn-devel-3.90.0-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">10cf4c3074e51654f8ffc951f4bc2f8d752216809fcd63926d149c3aad5c4524</sum>
        </package>
        <package name="nss-softokn" version="3.90.0" release="4.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-4.el9_3.src.rpm">
          <filename>nss-softokn-3.90.0-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">24f41673fb2b1f9767419553d248985fb581df82197a5a52e2ac43e36d5174c6</sum>
        </package>
        <package name="nss-util-devel" version="3.90.0" release="4.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-4.el9_3.src.rpm">
          <filename>nss-util-devel-3.90.0-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">33eda343ec1781f9d14c956915a84b52247be3cd378b6909446c502cda53368f</sum>
        </package>
        <package name="nss-softokn-freebl-devel" version="3.90.0" release="4.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-4.el9_3.src.rpm">
          <filename>nss-softokn-freebl-devel-3.90.0-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">3c5e8d86748839204c5aa5aeb3b6040a904a256817efbb3095aabbf54bf444d7</sum>
        </package>
        <package name="nspr-devel" version="4.35.0" release="4.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-4.el9_3.src.rpm">
          <filename>nspr-devel-4.35.0-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">408ce6714c7ab7da1529d1b8fad4c5c5f9c09e8f3f4e309fba52fdb253038016</sum>
        </package>
        <package name="nss" version="3.90.0" release="4.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-4.el9_3.src.rpm">
          <filename>nss-3.90.0-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">4948d8dde0c40b93d01d4ad800cd0e8d75cde346e210179999fc8007af5586c2</sum>
        </package>
        <package name="nss-softokn-freebl" version="3.90.0" release="4.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-4.el9_3.src.rpm">
          <filename>nss-softokn-freebl-3.90.0-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">4af1f4457748c80abd183c58d86f9074e9098262193f621ae33ce179119e61c2</sum>
        </package>
        <package name="nss-sysinit" version="3.90.0" release="4.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-4.el9_3.src.rpm">
          <filename>nss-sysinit-3.90.0-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">4d7c415ab94af57b04ffe1de1cab4cb6e2cc808855ebf8fd75773efec57e6f35</sum>
        </package>
        <package name="nss-devel" version="3.90.0" release="4.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-4.el9_3.src.rpm">
          <filename>nss-devel-3.90.0-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">7b52c53c249d7506efe26f00f00c9cd863fc6d1f230986c7757b48d1e8e5a140</sum>
        </package>
        <package name="nss-tools" version="3.90.0" release="4.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-4.el9_3.src.rpm">
          <filename>nss-tools-3.90.0-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">9504655dff7ffe5f915aa302eaac1820b7e98754c1986f5551498bcd8f46740c</sum>
        </package>
        <package name="nss-util" version="3.90.0" release="4.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-4.el9_3.src.rpm">
          <filename>nss-util-3.90.0-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">993e780d7d7c32c57c72e1859eee84216716d6fcb6e1e5589372d5166b25f8d9</sum>
        </package>
        <package name="nspr" version="4.35.0" release="4.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-4.el9_3.src.rpm">
          <filename>nspr-4.35.0-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">ea740e2d51c2705e858ccf0d3cbddae103b7f57d3ead1db3c4d3ff6e739ce4c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0141</id>
    <title>Moderate: ipa security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 22:26:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* ipa: Invalid CSRF protection (CVE-2023-5455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0141" id="RHSA-2024:0141" type="rhsa" title="RHSA-2024:0141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5455" id="CVE-2023-5455" type="cve" title="CVE-2023-5455"/>
      <reference href="https://bugzilla.redhat.com/2242828" id="2242828" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0141.html" id="ALSA-2024:0141" type="self" title="ALSA-2024:0141"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="ipa-client-epn" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="s390x" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>ipa-client-epn-4.10.2-5.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">0652b6c278782b35765e09c990fc32f3561344a50f2987a34a4504be786455c7</sum>
        </package>
        <package name="python3-ipaserver" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="noarch" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>python3-ipaserver-4.10.2-5.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">16ba8eee5c0d9852ed9e72219f584538341dee5ea25bb6516795a45ace760256</sum>
        </package>
        <package name="ipa-server" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="s390x" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>ipa-server-4.10.2-5.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">3362f4ca5ca0197a77209317336747047140b733229b6f2fd4845ba16842a6c5</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="s390x" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>ipa-server-trust-ad-4.10.2-5.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">36548d8a86a8675b3d2289b9b08dfb5695d61525ec77c8acdd672aa9dd7a396f</sum>
        </package>
        <package name="ipa-client-common" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="noarch" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>ipa-client-common-4.10.2-5.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">47e408569d39979a7e0bc85876446739514c22e803b2adb110ab4989fc748081</sum>
        </package>
        <package name="ipa-client-samba" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="s390x" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>ipa-client-samba-4.10.2-5.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">4cbb5be5196e1bfa8901a23d9773df75d523e8405fd972a660efcf206c708e0d</sum>
        </package>
        <package name="python3-ipaclient" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="noarch" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>python3-ipaclient-4.10.2-5.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">5c9cfe33c8f5a6d616229f3751b5326b564f1f638c39c9cdd906066c12eed42f</sum>
        </package>
        <package name="ipa-common" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="noarch" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>ipa-common-4.10.2-5.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">899c686d45b06648513fd66138046fe952364dabd24625e1016c7049f8e8cc35</sum>
        </package>
        <package name="ipa-client" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="s390x" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>ipa-client-4.10.2-5.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">a4796df99bb529d42a6a7b631922a5efaa27474ee66143a4cc82f77cb3acf8f1</sum>
        </package>
        <package name="ipa-server-common" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="noarch" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>ipa-server-common-4.10.2-5.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">aa2e06c49a204f9b9a9ac830153f944aa52e4885106b843e9f13c2cc53ba889c</sum>
        </package>
        <package name="ipa-server-dns" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="noarch" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>ipa-server-dns-4.10.2-5.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">b7125da0a7b970fb6faf006f057b98d45136c632a0043b06e122ffeae16eab25</sum>
        </package>
        <package name="ipa-selinux" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="noarch" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>ipa-selinux-4.10.2-5.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">b9a988d8af1d65976cbf6e2ce80a35d0e094d530f2d34afc08bc4f245fa4c0c4</sum>
        </package>
        <package name="python3-ipalib" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="noarch" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>python3-ipalib-4.10.2-5.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">f0238ad6d6803455fc358a90a251128f1954518357c0e811d1fa3b91ffccbea9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0151</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 16:35:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0151" id="RHSA-2024:0151" type="rhsa" title="RHSA-2024:0151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0151.html" id="ALSA-2024:0151" type="self" title="ALSA-2024:0151"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.15" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el9_3.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.15-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">394d0c886d2b33a448fa87c9de47a5d6afe2ba0b359c207cb58f26d7992c4496</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.115" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el9_3.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.115-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">4395acb6a1b29456307fe9c3412cc8e0dfcc0d40056b09196538fad092268d4d</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.15" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el9_3.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.15-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">47b33f0e623bae00b5726b7623b015db1309b720a41e1a8802574c3fadfd00ad</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.15" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el9_3.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.15-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">94e9e0e7a4db496a850aa3b941a753b22520c729684934a524edfeeee82c05a0</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.115" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el9_3.src.rpm">
          <filename>dotnet-templates-7.0-7.0.115-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">b00a7ad02cd1d6220258bf0785fc97d45fed3597e03244fead69f5e3e5cf751d</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.15" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el9_3.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.15-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">bfed8275e78015412539680afd4d2f3231f7ce40eefd450c1135e327e7011fb5</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.15" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el9_3.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.15-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">cc2ff8b8b978c476b6ad24074fc53824f8ac74c3e26a53118085e9953a48d9e6</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.15" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el9_3.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.15-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">e9eef27539a36e95924ae1decbaa477841db1c729afadc8f9baa3ac5a95f32b1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0152</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 16:40:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.101 and .NET Runtime 8.0.1.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0152" id="RHSA-2024:0152" type="rhsa" title="RHSA-2024:0152"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0152.html" id="ALSA-2024:0152" type="self" title="ALSA-2024:0152"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="netstandard-targeting-pack-2.1" version="8.0.101" release="1.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el9_3.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.101-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">060445aa0e0988e3f74224e68066e2f3f300d9fafb174d165e1db1e90b927850</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.1" release="1.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el9_3.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.1-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">0ae7b714906609d576d8dd5539b2e18709b9aa6648e528d6a2364299d84aedb0</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.1" release="1.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el9_3.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.1-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">494f77818ca15e113a8b5c8c02187113a169f0e49b3832a83dec2be59629e988</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.101" release="1.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el9_3.src.rpm">
          <filename>dotnet-templates-8.0-8.0.101-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">5d21078ee63555b2bacd76df6c5823323aaadad83c14d573e43f660c375c7c67</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.1" release="1.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el9_3.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.1-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">62789b8244e45f841ebe2947cae71f0188a4f9d2a50e6e028b4e984e5e41c71b</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.1" release="1.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el9_3.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.1-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">63c6bac817419e16c9104761a8ee8773474501f2034b8214645d0fe9ee0cfb0a</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.101" release="1.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el9_3.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.101-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">74466088490c4cc9beb20bd0b35eecc20ccfaf2979630b55df1282794bf757d5</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.1" release="1.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el9_3.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.1-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">935d7bb006b99739ff595b96f8b439e9421f3292a40e3b71c2ff516c01cc51d2</sum>
        </package>
        <package name="dotnet-host" version="8.0.1" release="1.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el9_3.src.rpm">
          <filename>dotnet-host-8.0.1-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">e2531bc817d08043a90c4c139979bed31bd203ed6bce9af069ca36ddbf58512e</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.1" release="1.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el9_3.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.1-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">e426606dbbc47b41e4c1b7ff43fdd3e0bed40e875dd63a7e786db73699629b62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0156</id>
    <title>Important: .NET 6.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 22:19:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0156" id="RHSA-2024:0156" type="rhsa" title="RHSA-2024:0156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0156.html" id="ALSA-2024:0156" type="self" title="ALSA-2024:0156"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="aspnetcore-runtime-6.0" version="6.0.26" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el9_3.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.26-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">1270e9cf6f2c8179f4c7f2f608b43c7d79418b082600688fb2fe4bb1bab5d79a</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.126" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el9_3.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.126-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">16ad29398b5a8ad92f3c6c1c6188c73feca505c3078f54387fe7f57891d260cf</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.26" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el9_3.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.26-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">1bc837ed902508ba6e6b92ea2c815a6b15a0c05550c22fde8de50bd020bfc0bc</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.126" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el9_3.src.rpm">
          <filename>dotnet-templates-6.0-6.0.126-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">23720ad807e59dea12d9e8007451bb98940eeb8fd1cd62ed311d7ce096c6389c</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.26" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el9_3.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.26-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">27f8b6a473bbfc69e980740ea5418d0ec5e31411cd6b05a773becc5317e8d290</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.26" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el9_3.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.26-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">512d436fb7d96000d9428af71a482808322e07aa9cdca5283b8a1698a1f5ed09</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.26" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el9_3.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.26-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">58b660302039b1d67ec0065f4d2f14d6590167dc3f9395c1e8f2abe4ae06622b</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.26" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el9_3.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.26-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">7407734b814d0faea44e6c8ebe4fdf158f8e34c3b49979716471891b28d350c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0249</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2024-01-17 00:00:00"/>
    <updated date="2024-01-20 14:58:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0249" id="RHSA-2024:0249" type="rhsa" title="RHSA-2024:0249"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0249.html" id="ALSA-2024:0249" type="self" title="ALSA-2024:0249"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="java-21-openjdk-jmods" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">28a5ed1683865626b7ef8ac01dcf454cb7f911b99b2006f59f2633de812fde50</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">7e8bd374ba2988018d6cd6118bf54daa98eaa7076d405a2a6820efdd5a5de671</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">bf789ee695b6bd0c91545d845399e3edbfc2adfcad155df3da24de3a797b0a44</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ca4ab58c14a7b345bce5392aef18a218460c1c37ce768a61e03ffee8c6ba5b61</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ce04fc2fc6a7a865bfa55499a48e0e4e3168ae855d3759f80e9d42754d39f761</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d6fe2041b3f362cdfdbce0ffc38dccdd9c72bd976a0e9880b72217ea8fe1537e</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e02f946ab2f1dce757078a7777faccdf1e5a9cac466ab5da30c18bc04294542b</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e984a04adbf1f6baa5b63fed7b2c87c3ff662e73b1abd9bee1630700cbecf6c2</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ec7c3bb03da4f655ddf04703969787275da59c0d2b345172a7da005847428016</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0265</id>
    <title>Important: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2024-01-17 00:00:00"/>
    <updated date="2024-01-20 14:52:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In the previous release in October 2023 (8u392), the RPMs on AlmaLinux 8 were changed to use Provides for java, jre, java-headless, jre-headless, java-devel and java-sdk which included the full RPM version. This prevented the Provides being used to resolve a dependency on Java 1.8.0 (for example, "Requires: java-headless 1:1.8.0"). This change has now been reverted to the old "1:1.8.0" value. (AlmaLinux-19636, AlmaLinux-19637)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0265" id="RHSA-2024:0265" type="rhsa" title="RHSA-2024:0265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20926" id="CVE-2024-20926" type="cve" title="CVE-2024-20926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257850" id="2257850" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0265.html" id="ALSA-2024:0265" type="self" title="ALSA-2024:0265"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.402.b06-2.el9.noarch.rpm</filename>
          <sum type="sha256">321e6f480c0e0a8bcd4df7d6e262158acc423c387414d1af3fb522afb0d25532</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.402.b06-2.el9.s390x.rpm</filename>
          <sum type="sha256">5d120bb166e0ffd28bdd20da783c62bb4628f2c469ef513d4c8b7a0aee139951</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.402.b06-2.el9.noarch.rpm</filename>
          <sum type="sha256">7dc4b796bf3a7f0012edb49e48b4fa8ee46fc26d795c45d7bf4852fd0af34dd7</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.402.b06-2.el9.s390x.rpm</filename>
          <sum type="sha256">95ded1b0ae1c8d4914dcbeb0bd8398915d34b5afb3357cbb4ace7c87255b057c</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.402.b06-2.el9.s390x.rpm</filename>
          <sum type="sha256">db7fe94df7b73ce894ad8699c6dfb94ce92b8f5bf4b8d29b85bfaec9df7ee378</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.402.b06-2.el9.s390x.rpm</filename>
          <sum type="sha256">ed62bdf20c657032bce93e9b98328c4d96819512cba80816510bd3a4eccde322</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.402.b06" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.402.b06-2.el9.s390x.rpm</filename>
          <sum type="sha256">ff1330194488787336212b484fd5fd96dfcc7c5c28533eaa2abc367572e51d72</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0266</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2024-01-18 00:00:00"/>
    <updated date="2024-01-20 14:46:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0266" id="RHSA-2024:0266" type="rhsa" title="RHSA-2024:0266"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20926" id="CVE-2024-20926" type="cve" title="CVE-2024-20926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257850" id="2257850" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0266.html" id="ALSA-2024:0266" type="self" title="ALSA-2024:0266"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="java-11-openjdk-devel" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">241cc46f8c2a86a9ebb7e7ee8b00b754a8fd9794f1d5a9bb433cc550ad3c6321</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">758e19b26f15f2a26f59382d0998cff432971a22c0b0a8b5ffc48053b7bad5b1</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">8f7ec2d048d26313e63a373abab5e5a577c0e2faf6fca275c643a31430345daa</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">99c568f175b0e4732b766e41d9bec112cc4bac8df364140b7b7aeac8686fabcc</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">c1b209b655f01b5e72d01e94a760642f6f9b8e6016e3b4fbce1a17243527a014</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">c985a2b0312bc6aa5f4397cf69b97ea738180f0ad9a4fc58c09f0c5a59bcdbbf</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">f3d3ea95b4bb02b5bd628554b85302d7c9d1ce823b4f7654d89b9c41af238aa3</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-src-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">f8b814a76278bc39079f09a6737e7f9a05ed4d815f5960f0fc3e8d1c560f75c5</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">fac2530467acc5d4077e75d5e51f619451a6db4edd9432803e36b34afffec191</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0267</id>
    <title>Important: java-17-openjdk security and bug fix update</title>
    <issued date="2024-01-17 00:00:00"/>
    <updated date="2024-01-20 14:39:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: incorrect handling of ZIP files with duplicate entries (8276123) (CVE-2024-20932)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-13930, AlmaLinux-13931, AlmaLinux-13934, AlmaLinux-13935)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0267" id="RHSA-2024:0267" type="rhsa" title="RHSA-2024:0267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20932" id="CVE-2024-20932" type="cve" title="CVE-2024-20932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257720" id="2257720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0267.html" id="ALSA-2024:0267" type="self" title="ALSA-2024:0267"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="java-17-openjdk-jmods" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">151eb2bf954d3945c083a6d72b9fe095d50a9e2e6400beedc2d69cab8c5d8e6a</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-src-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">24dae19b0bd1d31b783907309598f29f2c70d16038d40afe66573d56e9481168</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">48618cacb689bf7c28d30d69e16d96f594ea484516258ff2235db28fcc4fd335</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">7ad753ea3b6722b6f4ce6540a79de14fe7a2f367592f157729be1caa7eec8bb8</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">91ea29db3dfd45087c0652ee1bf06e227cfb5f8fec977d2be1de4a4587d313b1</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">b0526a384355817f9275cc5f47094cca3fb1a899b817acb07663218e1cb3b6a3</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">bbd41b44cce9893d3216cbfcee5e3b7eee6d5b42251803414b7e3bff6af8734e</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">d36c534ce31cf3ced69a66076fb10132004e8a268fc6f52291505da66e9803dc</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">eef5183f037cad4e4cce46a160f77f87b20191fae9ea1913ab3d9bec03d3d24e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0310</id>
    <title>Moderate: openssl security update</title>
    <issued date="2024-01-22 00:00:00"/>
    <updated date="2024-01-22 08:01:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: Incorrect cipher key and IV length processing (CVE-2023-5363)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0310" id="RHSA-2024:0310" type="rhsa" title="RHSA-2024:0310"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5363" id="CVE-2023-5363" type="cve" title="CVE-2023-5363"/>
      <reference href="https://bugzilla.redhat.com/2243839" id="2243839" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0310.html" id="ALSA-2024:0310" type="self" title="ALSA-2024:0310"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="openssl-perl" version="3.0.7" release="25.el9_3" epoch="1" arch="s390x" src="openssl-3.0.7-25.el9_3.src.rpm">
          <filename>openssl-perl-3.0.7-25.el9_3.s390x.rpm</filename>
          <sum type="sha256">5a9c27629956d793a8ef64a4bb69e32931c7bde73f775a7b781643ca227a259f</sum>
        </package>
        <package name="openssl-devel" version="3.0.7" release="25.el9_3" epoch="1" arch="s390x" src="openssl-3.0.7-25.el9_3.src.rpm">
          <filename>openssl-devel-3.0.7-25.el9_3.s390x.rpm</filename>
          <sum type="sha256">d56cb83e9dbfc7631d799ece200124f30bc176edbe1f6dd115f211d485090a45</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0387</id>
    <title>Moderate: php:8.1 security update</title>
    <issued date="2024-01-24 00:00:00"/>
    <updated date="2024-01-25 22:02:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:8.1 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

* php: 1-byte array overrun in common path resolve code (CVE-2023-0568)
* php: DoS vulnerability when parsing multipart request body (CVE-2023-0662)
* php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (CVE-2023-3247)
* php: XML loading external entity without being enabled (CVE-2023-3823)
* php: phar Buffer mismanagement (CVE-2023-3824)
* php: Password_verify() always return true with some hash (CVE-2023-0567)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0387" id="RHSA-2024:0387" type="rhsa" title="RHSA-2024:0387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0567" id="CVE-2023-0567" type="cve" title="CVE-2023-0567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0568" id="CVE-2023-0568" type="cve" title="CVE-2023-0568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0662" id="CVE-2023-0662" type="cve" title="CVE-2023-0662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3247" id="CVE-2023-3247" type="cve" title="CVE-2023-3247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3823" id="CVE-2023-3823" type="cve" title="CVE-2023-3823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3824" id="CVE-2023-3824" type="cve" title="CVE-2023-3824"/>
      <reference href="https://bugzilla.redhat.com/2170761" id="2170761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170770" id="2170770" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170771" id="2170771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219290" id="2219290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2229396" id="2229396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230101" id="2230101" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0387.html" id="ALSA-2024:0387" type="self" title="ALSA-2024:0387"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <module name="php" stream="8.1" version="9030020240124164610" context="8cf767d6" arch="s390x"/>
        <package name="php-fpm" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-fpm-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">038edf2bb31574b7f2585c9fe4480b80eac47b88b9bd4ec963845db3f60c4884</sum>
        </package>
        <package name="php-opcache" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-opcache-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">05435a6e0202ae09e4aa729871a48f0c160b506762bfe73737317a74e0e0da1b</sum>
        </package>
        <package name="php-snmp" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-snmp-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">08e37355625b7f85b99ae429bfdf171072bb922fe727720c2fd08931593c2357</sum>
        </package>
        <package name="php-ldap" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-ldap-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">0c4e2e3ee649caefb98ad0452362ef9fde816527a7bcd2aab4603cf2dfbea3ae</sum>
        </package>
        <package name="php-bcmath" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-bcmath-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">153e21360363bcd9526f6fdc1132b416de1ae0ed345446f958b1126d70706537</sum>
        </package>
        <package name="php-devel" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-devel-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">217829075e2e99d1c7f2a772a369466182c3b091bc5b13e8b74fb145d74e3a88</sum>
        </package>
        <package name="php-cli" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-cli-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">27ff5820f539fba34b5af2a0ec7425d5c7f05b7d4448d20e30b2b33a7be463a4</sum>
        </package>
        <package name="php-gd" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-gd-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">3a0e120efc5db8ea975e355cac55b91020290f9cde8e869fcc18d17d388586cc</sum>
        </package>
        <package name="php-pgsql" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-pgsql-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">4553ed8f0554036768af5ebe723afefa68e1d4ace29c94a1455e30cd178faa21</sum>
        </package>
        <package name="php-soap" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-soap-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">62e01e03f2a9e97349fd3a00456f908a887bc3042544a796cc546c7ab2cd7b9c</sum>
        </package>
        <package name="php-pecl-zip" version="1.20.1" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">6c89933d8e8153ed39764877e9c07501f556ba5057a9695bfefcfc75649f5734</sum>
        </package>
        <package name="php-pdo" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-pdo-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">6f551978fe404a7e2324b7a6c8e3517099e2510d0b5b650e70888ca3949459df</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.21" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">74c41c08148fce005bb18c75bcfafc1e739cc84b6cac297b5ef955172eff0b69</sum>
        </package>
        <package name="php-process" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-process-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">78ebd7b740a2d78139e10618c22406a1c1c198e127140aefadca3d0cfb0650eb</sum>
        </package>
        <package name="php-ffi" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-ffi-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">8b72b0ae256c0907c78644730cd0290ad3d2225c054a1a02025be66f00a7344d</sum>
        </package>
        <package name="php-intl" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-intl-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">a271f38cefd6c022eb3cc74bed840ae02281afdeef5b48e500306c52c76a27ca</sum>
        </package>
        <package name="php-enchant" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-enchant-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">a440487e3dfdc12f5182c69799d02de6606eaf96390e39e8e2a12dc338d4df3f</sum>
        </package>
        <package name="php-common" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-common-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">ae067abe58dd0a687b546b34d77aec01d3af78e9112757e867fed44f7242b487</sum>
        </package>
        <package name="php-dbg" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-dbg-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">b5f7241f67633d495fc680d0553c0bc9c2ef2f395c014a144843452b9d3b9454</sum>
        </package>
        <package name="php-xml" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-xml-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">bad46e217a0e146df4e5944fa3b7364cf64d68a120e877d5ed29294560fd05c3</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.21" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">bd0093fac304470cea776e43f28256fbfa317c192bb6bd8762cc1ec00db6f9e1</sum>
        </package>
        <package name="php-mysqlnd" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-mysqlnd-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">be3029313feda186dec3fcae82d6cdeb67ae43f25c95986352ddfde96ebf570b</sum>
        </package>
        <package name="php-dba" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-dba-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">d7e0d0aaf0512964cda1b9a922510d9d85142114b5e45c9e4aa5562e0e02822b</sum>
        </package>
        <package name="php-embedded" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-embedded-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">e0d900efe0635075b6f68d4bac3ce4a39165f8aee11359fde12991681eb69b3d</sum>
        </package>
        <package name="php" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">e1488f5a4bb41f0858102e8f1bd03a530ce4450c9d6a4845b1d3b6b0533815c6</sum>
        </package>
        <package name="apcu-panel" version="5.1.21" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>apcu-panel-5.1.21-1.module_el9.1.0+15+94ba28e4.noarch.rpm</filename>
          <sum type="sha256">e27a86b0afd898fe4401096cadb01c89fd2b39150e0cbfb4ebd82bc9822a3cbf</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.1.4" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">e97fdc0e54c4a5d2084a375f0ff31f551c9dc8c1f4c2012f2e453b1a031a1328</sum>
        </package>
        <package name="php-odbc" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-odbc-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">ea628b0786671bf70c2ed9db38b06651b0a2b659aa0d77630263396542bca397</sum>
        </package>
        <package name="php-mbstring" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-mbstring-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">eaa065a26c42904a4a7aa41f88cb0c9421442a8299dd1655bc381af78824f2dd</sum>
        </package>
        <package name="php-gmp" version="8.1.27" release="1.module_el9.3.0+53+44872dd1" epoch="0" arch="s390x" src="php-8.1.27-1.module_el9.3.0+53+44872dd1.src.rpm">
          <filename>php-gmp-8.1.27-1.module_el9.3.0+53+44872dd1.s390x.rpm</filename>
          <sum type="sha256">ec9cc28e501883b9cc81753ec868ef631d27c0d2217557a1bf6461279b456364</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="4.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-4.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-rrd-2.0.3-4.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">fa41ac765cb61c3ac39608e29ace6064489a59257504df4cac926a261c7d392b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0463</id>
    <title>Moderate: rpm security update</title>
    <issued date="2024-01-25 00:00:00"/>
    <updated date="2024-01-25 21:52:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rpm security update</summary>
    <description>The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.

Security Fix(es):

* rpm: TOCTOU race in checks for unsafe symlinks (CVE-2021-35937)
* rpm: races with chown/chmod/capabilities calls during installation (CVE-2021-35938)
* rpm: checks for unsafe symlinks are not performed for intermediary directories (CVE-2021-35939)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0463" id="RHSA-2024:0463" type="rhsa" title="RHSA-2024:0463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35937" id="CVE-2021-35937" type="cve" title="CVE-2021-35937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35938" id="CVE-2021-35938" type="cve" title="CVE-2021-35938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35939" id="CVE-2021-35939" type="cve" title="CVE-2021-35939"/>
      <reference href="https://bugzilla.redhat.com/1964114" id="1964114" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1964125" id="1964125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1964129" id="1964129" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0463.html" id="ALSA-2024:0463" type="self" title="ALSA-2024:0463"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="rpm-apidocs" version="4.16.1.3" release="27.el9_3" epoch="0" arch="noarch" src="rpm-4.16.1.3-27.el9_3.src.rpm">
          <filename>rpm-apidocs-4.16.1.3-27.el9_3.noarch.rpm</filename>
          <sum type="sha256">67e8f8b71bc7a80e8ed58a470d3a1c8b10f2d0e8cbf9ba1d201eebd28fe06644</sum>
        </package>
        <package name="rpm-plugin-syslog" version="4.16.1.3" release="27.el9_3" epoch="0" arch="s390x" src="rpm-4.16.1.3-27.el9_3.src.rpm">
          <filename>rpm-plugin-syslog-4.16.1.3-27.el9_3.s390x.rpm</filename>
          <sum type="sha256">68bc0614d96f728cd29422ff8113afd192b8c6d815e0f11f002a047afe30728f</sum>
        </package>
        <package name="rpm-plugin-systemd-inhibit" version="4.16.1.3" release="27.el9_3" epoch="0" arch="s390x" src="rpm-4.16.1.3-27.el9_3.src.rpm">
          <filename>rpm-plugin-systemd-inhibit-4.16.1.3-27.el9_3.s390x.rpm</filename>
          <sum type="sha256">91b2bc3f3d493a5c1cf69b58c83ba15236b7c53b910419a159fd032725214442</sum>
        </package>
        <package name="rpm-plugin-fapolicyd" version="4.16.1.3" release="27.el9_3" epoch="0" arch="s390x" src="rpm-4.16.1.3-27.el9_3.src.rpm">
          <filename>rpm-plugin-fapolicyd-4.16.1.3-27.el9_3.s390x.rpm</filename>
          <sum type="sha256">a35293bb87ae5ee09f64a71f06c1ee96e5cf18e9e80a10bbc78b6880885ce80c</sum>
        </package>
        <package name="rpm-build" version="4.16.1.3" release="27.el9_3" epoch="0" arch="s390x" src="rpm-4.16.1.3-27.el9_3.src.rpm">
          <filename>rpm-build-4.16.1.3-27.el9_3.s390x.rpm</filename>
          <sum type="sha256">bdfe9be3cfdc27fa2cac461fe1e661f8496805dae2a1141f8f102d0bd8bd94ff</sum>
        </package>
        <package name="rpm-plugin-ima" version="4.16.1.3" release="27.el9_3" epoch="0" arch="s390x" src="rpm-4.16.1.3-27.el9_3.src.rpm">
          <filename>rpm-plugin-ima-4.16.1.3-27.el9_3.s390x.rpm</filename>
          <sum type="sha256">e3ec9b7583c88b877358ef2715031be45630e9d31ea004561ded2187279d5427</sum>
        </package>
        <package name="rpm-cron" version="4.16.1.3" release="27.el9_3" epoch="0" arch="noarch" src="rpm-4.16.1.3-27.el9_3.src.rpm">
          <filename>rpm-cron-4.16.1.3-27.el9_3.noarch.rpm</filename>
          <sum type="sha256">e9685fd6dfc5db1d769b202635c622a6b4204c7abfbb2d676f0194d433b36990</sum>
        </package>
        <package name="rpm-devel" version="4.16.1.3" release="27.el9_3" epoch="0" arch="s390x" src="rpm-4.16.1.3-27.el9_3.src.rpm">
          <filename>rpm-devel-4.16.1.3-27.el9_3.s390x.rpm</filename>
          <sum type="sha256">e9abb1f626d79f60fefebde8ca7a8abbcde3c47142ad374a18704cf93abf45dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0465</id>
    <title>Moderate: sqlite security update</title>
    <issued date="2024-01-25 00:00:00"/>
    <updated date="2024-01-25 21:37:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.

Security Fix(es):

* sqlite: heap-buffer-overflow at sessionfuzz (CVE-2023-7104)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0465" id="RHSA-2024:0465" type="rhsa" title="RHSA-2024:0465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-7104" id="CVE-2023-7104" type="cve" title="CVE-2023-7104"/>
      <reference href="https://bugzilla.redhat.com/2256194" id="2256194" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0465.html" id="ALSA-2024:0465" type="self" title="ALSA-2024:0465"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="sqlite" version="3.34.1" release="7.el9_3" epoch="0" arch="s390x" src="sqlite-3.34.1-7.el9_3.src.rpm">
          <filename>sqlite-3.34.1-7.el9_3.s390x.rpm</filename>
          <sum type="sha256">121936a28b42f1167f6000b55414fa12725eb5115034121a9ca47d8d1c2c558e</sum>
        </package>
        <package name="sqlite-devel" version="3.34.1" release="7.el9_3" epoch="0" arch="s390x" src="sqlite-3.34.1-7.el9_3.src.rpm">
          <filename>sqlite-devel-3.34.1-7.el9_3.s390x.rpm</filename>
          <sum type="sha256">94f578ac4972d02bd9aa24928f1fc1151c8925a3697f3eb35da6843fa24132b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0466</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-01-25 00:00:00"/>
    <updated date="2024-01-25 21:26:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0466" id="RHSA-2024:0466" type="rhsa" title="RHSA-2024:0466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0466.html" id="ALSA-2024:0466" type="self" title="ALSA-2024:0466"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="python-unversioned-command" version="3.9.18" release="1.el9_3.1" epoch="0" arch="noarch" src="python3.9-3.9.18-1.el9_3.1.src.rpm">
          <filename>python-unversioned-command-3.9.18-1.el9_3.1.noarch.rpm</filename>
          <sum type="sha256">1c2b78fa731c304752a4c4529ee0fa14111f20108bab5b5ac8d6c956e7a4879b</sum>
        </package>
        <package name="python3-tkinter" version="3.9.18" release="1.el9_3.1" epoch="0" arch="s390x" src="python3.9-3.9.18-1.el9_3.1.src.rpm">
          <filename>python3-tkinter-3.9.18-1.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">e4536d4b0cf6264382060aab67f7cd5cfaf8faedf2fb6873a29e7a0727252db8</sum>
        </package>
        <package name="python3-devel" version="3.9.18" release="1.el9_3.1" epoch="0" arch="s390x" src="python3.9-3.9.18-1.el9_3.1.src.rpm">
          <filename>python3-devel-3.9.18-1.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">f16faf28f5c0f9d1846640c0cc207711cf60edcee18d444418e00d66eab7844b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0474</id>
    <title>Moderate: tomcat security update</title>
    <issued date="2024-01-25 00:00:00"/>
    <updated date="2024-01-25 21:22:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

* tomcat: Open Redirect vulnerability in FORM authentication (CVE-2023-41080)
* tomcat: FileUpload: DoS due to accumulation of temporary files on Windows (CVE-2023-42794)
* tomcat: improper cleaning of recycled objects could lead to information leak (CVE-2023-42795)
* tomcat: incorrectly parsed http trailer headers can cause request smuggling (CVE-2023-45648)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0474" id="RHSA-2024:0474" type="rhsa" title="RHSA-2024:0474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41080" id="CVE-2023-41080" type="cve" title="CVE-2023-41080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42794" id="CVE-2023-42794" type="cve" title="CVE-2023-42794"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42795" id="CVE-2023-42795" type="cve" title="CVE-2023-42795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45648" id="CVE-2023-45648" type="cve" title="CVE-2023-45648"/>
      <reference href="https://bugzilla.redhat.com/2235370" id="2235370" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243749" id="2243749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243751" id="2243751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243752" id="2243752" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0474.html" id="ALSA-2024:0474" type="self" title="ALSA-2024:0474"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="tomcat-jsp-2.3-api" version="9.0.62" release="37.el9_3.1" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.1.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.62-37.el9_3.1.noarch.rpm</filename>
          <sum type="sha256">0740bf8f9f669285ab9f32acbd00c60ffdac9f643ec7ca257797f3878748a606</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.62" release="37.el9_3.1" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.1.src.rpm">
          <filename>tomcat-docs-webapp-9.0.62-37.el9_3.1.noarch.rpm</filename>
          <sum type="sha256">0f6fcc41fecfff1c5e74ab45f73d3c93f3b1b8e15f08198de22581f7ea5de756</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.62" release="37.el9_3.1" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.1.src.rpm">
          <filename>tomcat-webapps-9.0.62-37.el9_3.1.noarch.rpm</filename>
          <sum type="sha256">1054d85fbdd1f970e62f81799df523b5dd9fb5e86bff51f2601a8f227150082d</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.62" release="37.el9_3.1" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.1.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.62-37.el9_3.1.noarch.rpm</filename>
          <sum type="sha256">1883c285bd8f86d8e5937477b56d687bc781b12c01195108be1b7586b4a2e786</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.62" release="37.el9_3.1" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.1.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.62-37.el9_3.1.noarch.rpm</filename>
          <sum type="sha256">2629dc7851140c221fa3f6c19cb521e5b4ae5e17120c92a84370d043d45395c7</sum>
        </package>
        <package name="tomcat-lib" version="9.0.62" release="37.el9_3.1" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.1.src.rpm">
          <filename>tomcat-lib-9.0.62-37.el9_3.1.noarch.rpm</filename>
          <sum type="sha256">bb84943939e62408a8f8c11586a47d1d715b85c5b38eeb8227b6f8eabd3ff37b</sum>
        </package>
        <package name="tomcat" version="9.0.62" release="37.el9_3.1" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.1.src.rpm">
          <filename>tomcat-9.0.62-37.el9_3.1.noarch.rpm</filename>
          <sum type="sha256">fb4fad075c4f5f58f1840ba3f384c5716ed00ca0bc5e64780f0502acdd08e1a6</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.62" release="37.el9_3.1" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.1.src.rpm">
          <filename>tomcat-admin-webapps-9.0.62-37.el9_3.1.noarch.rpm</filename>
          <sum type="sha256">fb6cdc5d8a141074745d75390ee119a99b6f7727246c901d2128b8f6ecd0271f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0477</id>
    <title>Moderate: frr security update</title>
    <issued date="2024-01-25 00:00:00"/>
    <updated date="2024-01-25 21:18:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>frr security update</summary>
    <description>FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. 

Security Fix(es):

* ffr: Flowspec overflow in bgpd/bgp_flowspec.c (CVE-2023-38406)
* ffr: Out of bounds read in bgpd/bgp_label.c (CVE-2023-38407)
* frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message (CVE-2023-47234)
* frr: crash from malformed EOR-containing BGP UPDATE message (CVE-2023-47235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0477" id="RHSA-2024:0477" type="rhsa" title="RHSA-2024:0477"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38406" id="CVE-2023-38406" type="cve" title="CVE-2023-38406"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38407" id="CVE-2023-38407" type="cve" title="CVE-2023-38407"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-47234" id="CVE-2023-47234" type="cve" title="CVE-2023-47234"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-47235" id="CVE-2023-47235" type="cve" title="CVE-2023-47235"/>
      <reference href="https://bugzilla.redhat.com/2248207" id="2248207" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248208" id="2248208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248526" id="2248526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248528" id="2248528" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0477.html" id="ALSA-2024:0477" type="self" title="ALSA-2024:0477"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="frr-selinux" version="8.3.1" release="11.el9_3.2.alma.1" epoch="0" arch="noarch" src="frr-8.3.1-11.el9_3.2.alma.1.src.rpm">
          <filename>frr-selinux-8.3.1-11.el9_3.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">8160c36eea1ef7ad5822f3878e2c4208786dd99887b0e1526e97519743d5ad4d</sum>
        </package>
        <package name="frr" version="8.3.1" release="11.el9_3.2.alma.1" epoch="0" arch="s390x" src="frr-8.3.1-11.el9_3.2.alma.1.src.rpm">
          <filename>frr-8.3.1-11.el9_3.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">cbbdb09e7ee75f4d7acbd5dbcc5d8a8d8bf88134796478c6feb09c5c38415e91</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0533</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2024-01-29 00:00:00"/>
    <updated date="2024-01-29 16:57:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981)
* gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)
* gnutls: rejects certificate chain with distributed trust (CVE-2024-0567)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0533" id="RHSA-2024:0533" type="rhsa" title="RHSA-2024:0533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5981" id="CVE-2023-5981" type="cve" title="CVE-2023-5981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0553" id="CVE-2024-0553" type="cve" title="CVE-2024-0553"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0567" id="CVE-2024-0567" type="cve" title="CVE-2024-0567"/>
      <reference href="https://bugzilla.redhat.com/2248445" id="2248445" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258412" id="2258412" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258544" id="2258544" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0533.html" id="ALSA-2024:0533" type="self" title="ALSA-2024:0533"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="gnutls-devel" version="3.7.6" release="23.el9_3.3" epoch="0" arch="s390x" src="gnutls-3.7.6-23.el9_3.3.src.rpm">
          <filename>gnutls-devel-3.7.6-23.el9_3.3.s390x.rpm</filename>
          <sum type="sha256">4579af9ab635ab3281fe125b5f465a1bfd6b5cb1c1221f47340fab2605b99c49</sum>
        </package>
        <package name="gnutls-dane" version="3.7.6" release="23.el9_3.3" epoch="0" arch="s390x" src="gnutls-3.7.6-23.el9_3.3.src.rpm">
          <filename>gnutls-dane-3.7.6-23.el9_3.3.s390x.rpm</filename>
          <sum type="sha256">64b4f828c6cfd44c8f9cf70efeaead8b13d9ad888cd3388d5f73468ae33a76ed</sum>
        </package>
        <package name="gnutls-utils" version="3.7.6" release="23.el9_3.3" epoch="0" arch="s390x" src="gnutls-3.7.6-23.el9_3.3.src.rpm">
          <filename>gnutls-utils-3.7.6-23.el9_3.3.s390x.rpm</filename>
          <sum type="sha256">807743077141845f2027f2d54566ff90cef3e2aaf86a6a86d0b036c571f19d26</sum>
        </package>
        <package name="gnutls-c++" version="3.7.6" release="23.el9_3.3" epoch="0" arch="s390x" src="gnutls-3.7.6-23.el9_3.3.src.rpm">
          <filename>gnutls-c++-3.7.6-23.el9_3.3.s390x.rpm</filename>
          <sum type="sha256">8cb8969b811129475ef345a8f83a9c61507a4466a5cb71976c8016f8965b4b3f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0557</id>
    <title>Important: tigervnc security update</title>
    <issued date="2024-01-30 00:00:00"/>
    <updated date="2024-01-31 11:00:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)
* xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
* xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
* xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0557" id="RHSA-2024:0557" type="rhsa" title="RHSA-2024:0557"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6816" id="CVE-2023-6816" type="cve" title="CVE-2023-6816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0229" id="CVE-2024-0229" type="cve" title="CVE-2024-0229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21885" id="CVE-2024-21885" type="cve" title="CVE-2024-21885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21886" id="CVE-2024-21886" type="cve" title="CVE-2024-21886"/>
      <reference href="https://bugzilla.redhat.com/2256540" id="2256540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256542" id="2256542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256690" id="2256690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257691" id="2257691" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0557.html" id="ALSA-2024:0557" type="self" title="ALSA-2024:0557"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="tigervnc-server-minimal" version="1.13.1" release="3.el9_3.6.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-3.el9_3.6.alma.1.src.rpm">
          <filename>tigervnc-server-minimal-1.13.1-3.el9_3.6.alma.1.s390x.rpm</filename>
          <sum type="sha256">37a7e49a4ec628e53a1c6565a241f42b668dafa4a94e9eeb382feb9582902cfc</sum>
        </package>
        <package name="tigervnc-server-module" version="1.13.1" release="3.el9_3.6.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-3.el9_3.6.alma.1.src.rpm">
          <filename>tigervnc-server-module-1.13.1-3.el9_3.6.alma.1.s390x.rpm</filename>
          <sum type="sha256">38b9f15bd0dd8c2ccbffd78e6782f48955e1b677abd4631df54a3f579158d699</sum>
        </package>
        <package name="tigervnc-license" version="1.13.1" release="3.el9_3.6.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-3.el9_3.6.alma.1.src.rpm">
          <filename>tigervnc-license-1.13.1-3.el9_3.6.alma.1.noarch.rpm</filename>
          <sum type="sha256">4c5f5ac26ea3fd5c86eb2a2ead5617a4c3afeab2d61239ba0e4144a6fc242cf9</sum>
        </package>
        <package name="tigervnc" version="1.13.1" release="3.el9_3.6.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-3.el9_3.6.alma.1.src.rpm">
          <filename>tigervnc-1.13.1-3.el9_3.6.alma.1.s390x.rpm</filename>
          <sum type="sha256">92ab66d538f7f9d3624d325038fcbc68517e1a50cd45dc7296732f4372e8bc26</sum>
        </package>
        <package name="tigervnc-server" version="1.13.1" release="3.el9_3.6.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-3.el9_3.6.alma.1.src.rpm">
          <filename>tigervnc-server-1.13.1-3.el9_3.6.alma.1.s390x.rpm</filename>
          <sum type="sha256">b01643eeeba766695c35591505be40bcd0a16772baab2b4ed4712dc5b074035a</sum>
        </package>
        <package name="tigervnc-icons" version="1.13.1" release="3.el9_3.6.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-3.el9_3.6.alma.1.src.rpm">
          <filename>tigervnc-icons-1.13.1-3.el9_3.6.alma.1.noarch.rpm</filename>
          <sum type="sha256">e1af8361e82b513ee2f2fbbbd88156a499467cba27ddc1423e92d94293cbe255</sum>
        </package>
        <package name="tigervnc-selinux" version="1.13.1" release="3.el9_3.6.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-3.el9_3.6.alma.1.src.rpm">
          <filename>tigervnc-selinux-1.13.1-3.el9_3.6.alma.1.noarch.rpm</filename>
          <sum type="sha256">fec12fd04cc7d5cc50381ca18c190ad46a5cc938f296f16e3b6aa24d17e75b07</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0602</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-01-30 00:00:00"/>
    <updated date="2024-02-01 10:12:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.7.0.

Security Fix(es):

* Mozilla: Out of bounds write in ANGLE (CVE-2024-0741)
* Mozilla: Failure to update user input timestamp (CVE-2024-0742)
* Mozilla: Crash when listing printers on Linux (CVE-2024-0746)
* Mozilla: Bypass of Content Security Policy when directive unsafe-inline was set (CVE-2024-0747)
* Mozilla: Phishing site popup could show local origin in address bar (CVE-2024-0749)
* Mozilla: Potential permissions request bypass via clickjacking (CVE-2024-0750)
* Mozilla: Privilege escalation through devtools (CVE-2024-0751)
* Mozilla: HSTS policy on subdomain could bypass policy of upper domain (CVE-2024-0753)
* Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 (CVE-2024-0755)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0602" id="RHSA-2024:0602" type="rhsa" title="RHSA-2024:0602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0741" id="CVE-2024-0741" type="cve" title="CVE-2024-0741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0742" id="CVE-2024-0742" type="cve" title="CVE-2024-0742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0746" id="CVE-2024-0746" type="cve" title="CVE-2024-0746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0747" id="CVE-2024-0747" type="cve" title="CVE-2024-0747"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0749" id="CVE-2024-0749" type="cve" title="CVE-2024-0749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0750" id="CVE-2024-0750" type="cve" title="CVE-2024-0750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0751" id="CVE-2024-0751" type="cve" title="CVE-2024-0751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0753" id="CVE-2024-0753" type="cve" title="CVE-2024-0753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0755" id="CVE-2024-0755" type="cve" title="CVE-2024-0755"/>
      <reference href="https://bugzilla.redhat.com/2259926" id="2259926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259927" id="2259927" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259928" id="2259928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259929" id="2259929" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259930" id="2259930" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259931" id="2259931" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259932" id="2259932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259933" id="2259933" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259934" id="2259934" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0602.html" id="ALSA-2024:0602" type="self" title="ALSA-2024:0602"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="thunderbird" version="115.7.0" release="1.el9_3.alma" epoch="0" arch="s390x" src="thunderbird-115.7.0-1.el9_3.alma.src.rpm">
          <filename>thunderbird-115.7.0-1.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">5f95146cb536f7bd21fa676f0555a8b23533fb2a48e705c7463d6a03cfbdead2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0603</id>
    <title>Important: firefox security update</title>
    <issued date="2024-01-30 00:00:00"/>
    <updated date="2024-02-01 10:06:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.7.0 ESR.

Security Fix(es):

* Mozilla: Out of bounds write in ANGLE (CVE-2024-0741)
* Mozilla: Failure to update user input timestamp (CVE-2024-0742)
* Mozilla: Crash when listing printers on Linux (CVE-2024-0746)
* Mozilla: Bypass of Content Security Policy when directive unsafe-inline was set (CVE-2024-0747)
* Mozilla: Phishing site popup could show local origin in address bar (CVE-2024-0749)
* Mozilla: Potential permissions request bypass via clickjacking (CVE-2024-0750)
* Mozilla: Privilege escalation through devtools (CVE-2024-0751)
* Mozilla: HSTS policy on subdomain could bypass policy of upper domain (CVE-2024-0753)
* Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 (CVE-2024-0755)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0603" id="RHSA-2024:0603" type="rhsa" title="RHSA-2024:0603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0741" id="CVE-2024-0741" type="cve" title="CVE-2024-0741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0742" id="CVE-2024-0742" type="cve" title="CVE-2024-0742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0746" id="CVE-2024-0746" type="cve" title="CVE-2024-0746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0747" id="CVE-2024-0747" type="cve" title="CVE-2024-0747"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0749" id="CVE-2024-0749" type="cve" title="CVE-2024-0749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0750" id="CVE-2024-0750" type="cve" title="CVE-2024-0750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0751" id="CVE-2024-0751" type="cve" title="CVE-2024-0751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0753" id="CVE-2024-0753" type="cve" title="CVE-2024-0753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0755" id="CVE-2024-0755" type="cve" title="CVE-2024-0755"/>
      <reference href="https://bugzilla.redhat.com/2259926" id="2259926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259927" id="2259927" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259928" id="2259928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259929" id="2259929" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259930" id="2259930" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259931" id="2259931" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259932" id="2259932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259933" id="2259933" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259934" id="2259934" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0603.html" id="ALSA-2024:0603" type="self" title="ALSA-2024:0603"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="firefox-x11" version="115.7.0" release="1.el9_3.alma" epoch="0" arch="s390x" src="firefox-115.7.0-1.el9_3.alma.src.rpm">
          <filename>firefox-x11-115.7.0-1.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">096fd35b51b3ebc162fb9f05584c9b706ccdbd4a726489c44d8b1c121fb2b6d9</sum>
        </package>
        <package name="firefox" version="115.7.0" release="1.el9_3.alma" epoch="0" arch="s390x" src="firefox-115.7.0-1.el9_3.alma.src.rpm">
          <filename>firefox-115.7.0-1.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">6f585401036e31b1013f43f0c5e948caa84d6075f96a9e22ec8f421acba17fbd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0670</id>
    <title>Important: runc security update</title>
    <issued date="2024-02-02 00:00:00"/>
    <updated date="2024-02-06 05:57:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>runc security update</summary>
    <description>The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.

Security Fix(es):

* runc: file descriptor leak (CVE-2024-21626)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0670" id="RHSA-2024:0670" type="rhsa" title="RHSA-2024:0670"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21626" id="CVE-2024-21626" type="cve" title="CVE-2024-21626"/>
      <reference href="https://bugzilla.redhat.com/2258725" id="2258725" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0670.html" id="ALSA-2024:0670" type="self" title="ALSA-2024:0670"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="runc" version="1.1.12" release="1.el9_3" epoch="4" arch="s390x" src="runc-1.1.12-1.el9_3.src.rpm">
          <filename>runc-1.1.12-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">f8c331ea18cacefc669223a486131daeb5db5675c134933f068c79322ac173ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0675</id>
    <title>Important: gimp security update</title>
    <issued date="2024-02-05 00:00:00"/>
    <updated date="2024-02-09 15:50:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gimp security update</summary>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

* gimp: dds buffer overflow RCE (CVE-2023-44441)
* gimp: PSD buffer overflow RCE (CVE-2023-44442)
* gimp: psp integer overflow RCE (CVE-2023-44443)
* gimp: psp off-by-one RCE (CVE-2023-44444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0675" id="RHSA-2024:0675" type="rhsa" title="RHSA-2024:0675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44441" id="CVE-2023-44441" type="cve" title="CVE-2023-44441"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44442" id="CVE-2023-44442" type="cve" title="CVE-2023-44442"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44443" id="CVE-2023-44443" type="cve" title="CVE-2023-44443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44444" id="CVE-2023-44444" type="cve" title="CVE-2023-44444"/>
      <reference href="https://bugzilla.redhat.com/2249938" id="2249938" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249942" id="2249942" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249944" id="2249944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249946" id="2249946" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0675.html" id="ALSA-2024:0675" type="self" title="ALSA-2024:0675"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="gimp-libs" version="2.99.8" release="4.el9_3" epoch="2" arch="s390x" src="gimp-2.99.8-4.el9_3.src.rpm">
          <filename>gimp-libs-2.99.8-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">691ab03de7ee0314fc535b3ec7f0ccac439f5e6d9e2a7407781f7597ddb763bd</sum>
        </package>
        <package name="gimp" version="2.99.8" release="4.el9_3" epoch="2" arch="s390x" src="gimp-2.99.8-4.el9_3.src.rpm">
          <filename>gimp-2.99.8-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">d417ffd61711e32b2dffc479a640ff3046e7b8cdd4b2fc25a0f257214b3be13b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0790</id>
    <title>Moderate: nss security update</title>
    <issued date="2024-02-12 00:00:00"/>
    <updated date="2024-02-14 10:34:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nss security update</summary>
    <description>Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

* nss: vulnerable to Minerva side-channel information leak (CVE-2023-6135)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0790" id="RHSA-2024:0790" type="rhsa" title="RHSA-2024:0790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6135" id="CVE-2023-6135" type="cve" title="CVE-2023-6135"/>
      <reference href="https://bugzilla.redhat.com/2249906" id="2249906" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0790.html" id="ALSA-2024:0790" type="self" title="ALSA-2024:0790"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="nspr" version="4.35.0" release="6.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-6.el9_3.src.rpm">
          <filename>nspr-4.35.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">08cb7d7d1ea372451fe378cd0f024772c8b0585051ad8debab4bae5d7131079a</sum>
        </package>
        <package name="nss" version="3.90.0" release="6.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-6.el9_3.src.rpm">
          <filename>nss-3.90.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">0eb378e8301dc6b310aaff399d3abc7c618361902b2d9557db19639b379733e3</sum>
        </package>
        <package name="nss-util-devel" version="3.90.0" release="6.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-6.el9_3.src.rpm">
          <filename>nss-util-devel-3.90.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">1557be632e627858eb77b23ef69e50979b7a3667b42d58b7d333c3ae92d82d94</sum>
        </package>
        <package name="nss-softokn-devel" version="3.90.0" release="6.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-6.el9_3.src.rpm">
          <filename>nss-softokn-devel-3.90.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">2880df8ffae0464a0806752bf2cc40e854dda347f8b79c546fa8b6eb6bac2f0e</sum>
        </package>
        <package name="nss-softokn-freebl" version="3.90.0" release="6.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-6.el9_3.src.rpm">
          <filename>nss-softokn-freebl-3.90.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">31c11973f9e73c94e23b6d4879b272122c7f2c9e592c230c2f2280789334ee70</sum>
        </package>
        <package name="nss-softokn-freebl-devel" version="3.90.0" release="6.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-6.el9_3.src.rpm">
          <filename>nss-softokn-freebl-devel-3.90.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">3b1e4c779724d74f6dcd3eef6411547501f9a1d48804faf3284be7d77a4057da</sum>
        </package>
        <package name="nss-sysinit" version="3.90.0" release="6.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-6.el9_3.src.rpm">
          <filename>nss-sysinit-3.90.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">47f40249ab9b35759c0596a4876c00ecd249301eb2d9e3401cd09a668dc2f0e8</sum>
        </package>
        <package name="nss-softokn" version="3.90.0" release="6.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-6.el9_3.src.rpm">
          <filename>nss-softokn-3.90.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">48e347cb38343cece6015106a085be8727cf0517e570b3c902007fcdfb6a7e63</sum>
        </package>
        <package name="nss-tools" version="3.90.0" release="6.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-6.el9_3.src.rpm">
          <filename>nss-tools-3.90.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">854f73f18f97e17d214adbf321d2f510901a67f7f4f88ef13e86f3ab148f4227</sum>
        </package>
        <package name="nss-devel" version="3.90.0" release="6.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-6.el9_3.src.rpm">
          <filename>nss-devel-3.90.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">8f3e49714af67977fb39ab9664a4b7b2547861ab8d1bfa29fedad28a9a4b8706</sum>
        </package>
        <package name="nspr-devel" version="4.35.0" release="6.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-6.el9_3.src.rpm">
          <filename>nspr-devel-4.35.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">ce4cf5a810013d9f7653621eb0bb27cbb87594e42d5cf1ff278d59d7fdb027bb</sum>
        </package>
        <package name="nss-util" version="3.90.0" release="6.el9_3" epoch="0" arch="s390x" src="nss-3.90.0-6.el9_3.src.rpm">
          <filename>nss-util-3.90.0-6.el9_3.s390x.rpm</filename>
          <sum type="sha256">e037256078f31c1d9afa159570e3b9ddf917eeee28659728d6428b2a367d9d8c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0805</id>
    <title>Important: dotnet7.0 security update</title>
    <issued date="2024-02-13 00:00:00"/>
    <updated date="2024-02-15 09:17:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0805" id="RHSA-2024:0805" type="rhsa" title="RHSA-2024:0805"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0805.html" id="ALSA-2024:0805" type="self" title="ALSA-2024:0805"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="dotnet-hostfxr-7.0" version="7.0.16" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el9_3.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.16-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">032ed24ae6dff85750cae3b37cb545c965895e2b9e86f6ae086ecbfc8fa6ab78</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.116" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el9_3.src.rpm">
          <filename>dotnet-templates-7.0-7.0.116-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">0acafd5b7db92540f55f90998314add214d3af17637325443aac6fa7179bb82d</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.16" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el9_3.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.16-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">37771bbdf891e7051ac0bd203abdaec3f0a918440f800a5a44d2dd3ad7060e55</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.16" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el9_3.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.16-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">5d02eeb54bd30ab1101936ccea31e6e1e4d5025562050e7cac64f87da8f06495</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.16" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el9_3.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.16-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">b2e41b04c93ca86cc0ad37a3712f936ab9eb978cf734552617ac79e9222f6570</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.16" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el9_3.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.16-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">e306c59d0daee1404ed7aa09f5fb82d49befb92cf6a10665da6d63a2c253975d</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.16" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el9_3.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.16-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">f10485c05485638b5c255e9e457bc3b2de625d82df577bc34580b20b88a43c2c</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.116" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el9_3.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.116-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">fb76c56aba2877e572544e73c0067365cf09d2b14653127a2428510cb901b8b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0807</id>
    <title>Important: dotnet6.0 security update</title>
    <issued date="2024-02-13 00:00:00"/>
    <updated date="2024-02-15 09:13:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.127 and .NET Runtime 6.0.27.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0807" id="RHSA-2024:0807" type="rhsa" title="RHSA-2024:0807"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0807.html" id="ALSA-2024:0807" type="self" title="ALSA-2024:0807"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="dotnet-templates-6.0" version="6.0.127" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el9_3.src.rpm">
          <filename>dotnet-templates-6.0-6.0.127-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">03961a88d021c1bb4450fcd66ce0e1eb917ae5509e7172284bb84b367cf254b6</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.127" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el9_3.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.127-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">33eb3913f86d164e58de34571801ddafd2cfa67bfee05d2bec6a194d9f83e592</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.27" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el9_3.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.27-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">64301bef5deec03cfb855ac422940c6df137069d139b37f8d601ed50156d5aec</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.27" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el9_3.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.27-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">6ce45026ce681a6602ac772398b1ebd650558ff6b06322dbedde02b738758838</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.27" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el9_3.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.27-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">bdfcac243d074e59443c7d8d12e700c766621a47e42a0b2c4e565ac4fc985d00</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.27" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el9_3.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.27-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">c8cab26d9ab026640d9960f92d83ba5baf505420291cec6d1d8adf88eb130c97</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.27" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el9_3.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.27-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">e4856a48d8ec348fe40c9b6cffbe86824202a9affe6bcaf489789aaa67119be6</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.27" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el9_3.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.27-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">ebe8733f921d587696580db1da384fafa21e4e5c7906161e5906d323cfd17669</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0811</id>
    <title>Moderate: sudo security update</title>
    <issued date="2024-02-14 00:00:00"/>
    <updated date="2024-02-14 10:26:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sudo security update</summary>
    <description>The sudo packages contain the sudo utility which allows system
administrators to provide certain users with the permission to execute
privileged commands, which are used for system management purposes, without
having to log in as root.

Bug Fix(es) and Enhancement(s):

* CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
* CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
* CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0811" id="RHSA-2024:0811" type="rhsa" title="RHSA-2024:0811"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28486" id="CVE-2023-28486" type="cve" title="CVE-2023-28486"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28487" id="CVE-2023-28487" type="cve" title="CVE-2023-28487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42465" id="CVE-2023-42465" type="cve" title="CVE-2023-42465"/>
      <reference href="https://bugzilla.redhat.com/2179272" id="2179272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179273" id="2179273" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255568" id="2255568" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0811.html" id="ALSA-2024:0811" type="self" title="ALSA-2024:0811"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="sudo-python-plugin" version="1.9.5p2" release="10.el9_3" epoch="0" arch="s390x" src="sudo-1.9.5p2-10.el9_3.src.rpm">
          <filename>sudo-python-plugin-1.9.5p2-10.el9_3.s390x.rpm</filename>
          <sum type="sha256">192048338afdf4067804d1258514a5c76388c648b11a5f9f3ed9ec290c8738bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0848</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-02-15 00:00:00"/>
    <updated date="2024-02-16 11:50:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0848" id="RHSA-2024:0848" type="rhsa" title="RHSA-2024:0848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0848.html" id="ALSA-2024:0848" type="self" title="ALSA-2024:0848"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="dotnet-templates-8.0" version="8.0.102" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>dotnet-templates-8.0-8.0.102-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">0c7450dbef296ee6024ea769416e8530febb4fa0efa1cc452d4d97e937a44b58</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.2" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.2-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">0cd2c5ee1c9b2a40189bc43986f442486f0ab02e21df91cfa922a852e9848266</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.2" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.2-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">46270979f4c093d060a8ba0540bdb7a0d51dde24ae980ed7751a6845a267099e</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.2" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.2-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">532ab6c11e7e6c0a870f9aac90354b0e3900f5e351232c47102c0d6fc3027ea7</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.102" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.102-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">7945190d1d789afbac390326e3822b4380e72710c7e53e13861dcc4c22d05bab</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.2" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.2-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">81d19eeda9f250acaebc8af9964be044e8cfaefb7c2202be2d085671ac15a57d</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.2" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.2-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">9a195eecefbfb8c8909e55b61b501d4adc954303b7b02940b47f866d8581dfe0</sum>
        </package>
        <package name="dotnet-host" version="8.0.2" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>dotnet-host-8.0.2-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">b923aae2cf9a79042fe5af80b327bfec33c921836cbad28595ac5f0ff0e5bba5</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="8.0.102" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.102-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">beb776bd1ca10d6467fd130eec54bd69d2f03cffc5609c94e7c1a97667cb92e8</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.2" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.2-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">d571ae276646b849046af7d03627f25edff326efb2843c18c261ab899990a2eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0950</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2024-02-22 00:00:00"/>
    <updated date="2024-02-28 16:18:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0950" id="RHSA-2024:0950" type="rhsa" title="RHSA-2024:0950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0985" id="CVE-2024-0985" type="cve" title="CVE-2024-0985"/>
      <reference href="https://bugzilla.redhat.com/2263384" id="2263384" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0950.html" id="ALSA-2024:0950" type="self" title="ALSA-2024:0950"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <module name="postgresql" stream="15" version="9030020240227081546" context="8cf767d6" arch="s390x"/>
        <package name="postgresql-private-devel" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-private-devel-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">025c791121a4ea4ad00e6ac0747008ba8f3791a61ca8f2c38933fa3d03b54e96</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-upgrade-devel-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">0b76df695721e8b2514f20c5cdd7ca1f0b3d7ca2e30f4f76761086cccfa03b04</sum>
        </package>
        <package name="postgresql-upgrade" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-upgrade-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">31ff0e051c9d144f03baa9d226962f5e706967253ac2268fdb8282b597a91cc7</sum>
        </package>
        <package name="postgresql-server-devel" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-server-devel-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">3b345555baac21e55f9d6441b4ed15f33e5ca1a11ae0dffd635aab14b547f84c</sum>
        </package>
        <package name="postgresql" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">3fb7a8b8966ecb3fa0b7d424c337961e37e3c5341c65ddde5c9675140d468ffe</sum>
        </package>
        <package name="postgresql-test" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-test-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">4af42c28d8e62612564fd794de648ec7b09e9d95b084d73aaf54454d910a951f</sum>
        </package>
        <package name="postgresql-server" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-server-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">607adc388e75223a7ff8d5c987b4f49791628679a66926b5c45db2ecb89c4b3b</sum>
        </package>
        <package name="postgresql-pltcl" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-pltcl-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">76a0dc5c6c499a9fd0282d4788948c30386b67f6c3084c48c6c622ef2539e06b</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el9.2.0+22+09653793" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el9.2.0+22+09653793.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el9.2.0+22+09653793.s390x.rpm</filename>
          <sum type="sha256">8aa663b5c2ff175148a949b30c8b031b034134291fa2b86fad010de3264ce975</sum>
        </package>
        <package name="postgresql-contrib" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-contrib-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">9afde100a50b31886936d08a341c30d1bd3cbe810a81f577e3d32474152d0e98</sum>
        </package>
        <package name="postgresql-static" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-static-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">a09586551ecbc9f16777b777cb3784ce6592704972b7805194d2db0a79135d1c</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="noarch" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-test-rpm-macros-15.6-1.module_el9.3.0+55+d62f4779.noarch.rpm</filename>
          <sum type="sha256">a99959d67d3f83cfd6d4631d8925639ef28bee0a0709e6101740776712f3e5bf</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el9.2.0+22+09653793" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el9.2.0+22+09653793.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el9.2.0+22+09653793.s390x.rpm</filename>
          <sum type="sha256">aae4db5a7b2a459bedc06107e043df328af5aba310f7377482a759ca6f274258</sum>
        </package>
        <package name="postgresql-docs" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-docs-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">bd6681dddbf58c2c70c460c0a724c9a6eae0be3d46b50793f3f8a3cd35baeccb</sum>
        </package>
        <package name="postgresql-plperl" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-plperl-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">c853c7e7ec445c8db253e8653ce5ea5a9d26d6af9c9bbe9f0688885ca09aac8f</sum>
        </package>
        <package name="postgresql-plpython3" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-plpython3-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">dd4591c4bcb7cc1965f41bcf38aca118fda83769233760b246d12360b7d27f19</sum>
        </package>
        <package name="postgresql-private-libs" version="15.6" release="1.module_el9.3.0+55+d62f4779" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el9.3.0+55+d62f4779.src.rpm">
          <filename>postgresql-private-libs-15.6-1.module_el9.3.0+55+d62f4779.s390x.rpm</filename>
          <sum type="sha256">e8fa9aa585e0885b837458bc873fa0decb49502d9ab14f42eb0a3284a4147367</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el9.2.0+22+09653793" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el9.2.0+22+09653793.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el9.2.0+22+09653793.s390x.rpm</filename>
          <sum type="sha256">ed411af5e135cda227ddf7b810e4e04e1e6d923ead9a5300a03d167542d996c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0951</id>
    <title>Important: postgresql security update</title>
    <issued date="2024-02-22 00:00:00"/>
    <updated date="2024-02-28 16:06:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0951" id="RHSA-2024:0951" type="rhsa" title="RHSA-2024:0951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0985" id="CVE-2024-0985" type="cve" title="CVE-2024-0985"/>
      <reference href="https://bugzilla.redhat.com/2263384" id="2263384" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0951.html" id="ALSA-2024:0951" type="self" title="ALSA-2024:0951"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="postgresql-plperl" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-plperl-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">05fc0b8d5e7c3a6d09346e96db03a4d923acb1bddee7e7fe408528a4ea9e0038</sum>
        </package>
        <package name="postgresql-private-libs" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-private-libs-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">22d1097fc167a142ed14ee959e5affd5948201859a59c8b1f9872e8149ec4281</sum>
        </package>
        <package name="postgresql" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">2f4d4179c508c06f6b660aab5f3f055764c089685f60e28c4b5bef6f716a3ede</sum>
        </package>
        <package name="postgresql-plpython3" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-plpython3-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">5682a73cd43911060dbeabb04fee6e3fbd502d6c9f405bdc0470055d054300b2</sum>
        </package>
        <package name="postgresql-upgrade" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-upgrade-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">d3ee2441dc9182fd5e9ccf95f2cf955d4626a8c0830ef66315c892a61103e8bc</sum>
        </package>
        <package name="postgresql-pltcl" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-pltcl-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">dbcc7436fa336cf76dfbf97c2d634cba07c41548afa66a9229355cf6c7c6f54f</sum>
        </package>
        <package name="postgresql-contrib" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-contrib-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">e6d634b02b217e950681215b52990fd7bfcc80054f0601dfdfb9176c30d797be</sum>
        </package>
        <package name="postgresql-server" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-server-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">fc92611b30bcb7898c7c4393f9f5d4865051f9f3cc836bc2f949fa4e70364570</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0952</id>
    <title>Important: firefox security update</title>
    <issued date="2024-02-22 00:00:00"/>
    <updated date="2024-02-28 15:59:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.8.0 ESR.

Security Fix(es):

* Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546)
* Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547)
* Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553)
* Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548)
* Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549)
* Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550)
* Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551)
* Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0952" id="RHSA-2024:0952" type="rhsa" title="RHSA-2024:0952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1546" id="CVE-2024-1546" type="cve" title="CVE-2024-1546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1547" id="CVE-2024-1547" type="cve" title="CVE-2024-1547"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1548" id="CVE-2024-1548" type="cve" title="CVE-2024-1548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1549" id="CVE-2024-1549" type="cve" title="CVE-2024-1549"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1550" id="CVE-2024-1550" type="cve" title="CVE-2024-1550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1551" id="CVE-2024-1551" type="cve" title="CVE-2024-1551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1552" id="CVE-2024-1552" type="cve" title="CVE-2024-1552"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1553" id="CVE-2024-1553" type="cve" title="CVE-2024-1553"/>
      <reference href="https://bugzilla.redhat.com/2265349" id="2265349" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265350" id="2265350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265351" id="2265351" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265352" id="2265352" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265353" id="2265353" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265354" id="2265354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265355" id="2265355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265356" id="2265356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0952.html" id="ALSA-2024:0952" type="self" title="ALSA-2024:0952"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="firefox-x11" version="115.8.0" release="1.el9_3.alma" epoch="0" arch="s390x" src="firefox-115.8.0-1.el9_3.alma.src.rpm">
          <filename>firefox-x11-115.8.0-1.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">87adf4e689ea29d6ccb0e7364a1bd59b6b31d1075457364f93d4191b479e5639</sum>
        </package>
        <package name="firefox" version="115.8.0" release="1.el9_3.alma" epoch="0" arch="s390x" src="firefox-115.8.0-1.el9_3.alma.src.rpm">
          <filename>firefox-115.8.0-1.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">8c4b8374769726b01a916aef475c7f5aed79b5129b2b5f69cbb014af1603bc7e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0963</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-02-26 00:00:00"/>
    <updated date="2024-02-28 15:36:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.8.0.

Security Fix(es):

* Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546)
* Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547)
* Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553)
* Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548)
* Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549)
* Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550)
* Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551)
* Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0963" id="RHSA-2024:0963" type="rhsa" title="RHSA-2024:0963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1546" id="CVE-2024-1546" type="cve" title="CVE-2024-1546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1547" id="CVE-2024-1547" type="cve" title="CVE-2024-1547"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1548" id="CVE-2024-1548" type="cve" title="CVE-2024-1548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1549" id="CVE-2024-1549" type="cve" title="CVE-2024-1549"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1550" id="CVE-2024-1550" type="cve" title="CVE-2024-1550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1551" id="CVE-2024-1551" type="cve" title="CVE-2024-1551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1552" id="CVE-2024-1552" type="cve" title="CVE-2024-1552"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1553" id="CVE-2024-1553" type="cve" title="CVE-2024-1553"/>
      <reference href="https://bugzilla.redhat.com/2265349" id="2265349" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265350" id="2265350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265351" id="2265351" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265352" id="2265352" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265353" id="2265353" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265354" id="2265354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265355" id="2265355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265356" id="2265356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0963.html" id="ALSA-2024:0963" type="self" title="ALSA-2024:0963"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="thunderbird" version="115.8.0" release="1.el9_3.alma" epoch="0" arch="s390x" src="thunderbird-115.8.0-1.el9_3.alma.src.rpm">
          <filename>thunderbird-115.8.0-1.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">a55928bed8677be281530ed99b6b9c5a261a2277a83ecdbe3bd29ee521d42db4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0977</id>
    <title>Important: unbound security update</title>
    <issued date="2024-02-26 00:00:00"/>
    <updated date="2024-02-28 14:41:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

Security Fix(es):

* bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0977" id="RHSA-2024:0977" type="rhsa" title="RHSA-2024:0977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0977.html" id="ALSA-2024:0977" type="self" title="ALSA-2024:0977"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="python3-unbound" version="1.16.2" release="3.el9_3.1" epoch="0" arch="s390x" src="unbound-1.16.2-3.el9_3.1.src.rpm">
          <filename>python3-unbound-1.16.2-3.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">a0c257c029784c7165fc349afd7141d4258af018917623cc59bccde68f0d1585</sum>
        </package>
        <package name="unbound" version="1.16.2" release="3.el9_3.1" epoch="0" arch="s390x" src="unbound-1.16.2-3.el9_3.1.src.rpm">
          <filename>unbound-1.16.2-3.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">d24d48e87b96294936054f2a10e71f79a1c3de3a25a40e7bf78cb2ad334cedfa</sum>
        </package>
        <package name="unbound-libs" version="1.16.2" release="3.el9_3.1" epoch="0" arch="s390x" src="unbound-1.16.2-3.el9_3.1.src.rpm">
          <filename>unbound-libs-1.16.2-3.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">e2358731ae118187900ec1ced92462974301ee1c4f3179400aaf259771930835</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10090</id>
    <title>Important: tigervnc security update</title>
    <issued date="2024-11-20 00:00:00"/>
    <updated date="2024-12-02 10:47:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.  

Security Fix(es):  

  * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10090" id="RHSA-2024:10090" type="rhsa" title="RHSA-2024:10090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9632" id="CVE-2024-9632" type="cve" title="CVE-2024-9632"/>
      <reference href="https://bugzilla.redhat.com/2317233" id="2317233" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10090.html" id="ALSA-2024:10090" type="self" title="ALSA-2024:10090"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="tigervnc-selinux" version="1.14.1" release="1.el9_5" epoch="0" arch="noarch" src="tigervnc-1.14.1-1.el9_5.src.rpm">
          <filename>tigervnc-selinux-1.14.1-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">49a61a3344e8e4098d4df30e2e8aa25437cb433d2f58ddc65cfe1302368fc24a</sum>
        </package>
        <package name="tigervnc-server-module" version="1.14.1" release="1.el9_5" epoch="0" arch="s390x" src="tigervnc-1.14.1-1.el9_5.src.rpm">
          <filename>tigervnc-server-module-1.14.1-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">9912b6f49fb609ece0e46140caa7a9e279148ad4bf65c7929d99499f34be52c0</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.14.1" release="1.el9_5" epoch="0" arch="s390x" src="tigervnc-1.14.1-1.el9_5.src.rpm">
          <filename>tigervnc-server-minimal-1.14.1-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">c77c2e08e9352a219ff5910225dd91022e91b5a8d2e1a4953600767053b9238a</sum>
        </package>
        <package name="tigervnc-icons" version="1.14.1" release="1.el9_5" epoch="0" arch="noarch" src="tigervnc-1.14.1-1.el9_5.src.rpm">
          <filename>tigervnc-icons-1.14.1-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">ee26e357ff2d42b1bd2468655eaa404b092d080495fd1d96787bca99a536a9af</sum>
        </package>
        <package name="tigervnc" version="1.14.1" release="1.el9_5" epoch="0" arch="s390x" src="tigervnc-1.14.1-1.el9_5.src.rpm">
          <filename>tigervnc-1.14.1-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">eeed8ab8bd623a26851646801802307e4f6dc4ca369447ea84b67687470ac833</sum>
        </package>
        <package name="tigervnc-license" version="1.14.1" release="1.el9_5" epoch="0" arch="noarch" src="tigervnc-1.14.1-1.el9_5.src.rpm">
          <filename>tigervnc-license-1.14.1-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">f1165f116f4ccbd8f20aa8dd69405fc83c427289b86364cf455f6bb6b3ddd498</sum>
        </package>
        <package name="tigervnc-server" version="1.14.1" release="1.el9_5" epoch="0" arch="s390x" src="tigervnc-1.14.1-1.el9_5.src.rpm">
          <filename>tigervnc-server-1.14.1-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">fa2064d8c87f099273d0e1578d75b3a09b2bfc0d36c7da6c0b72762558f932df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10218</id>
    <title>Moderate: perl-App-cpanminus security update</title>
    <issued date="2024-11-25 00:00:00"/>
    <updated date="2024-12-02 10:45:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl-App-cpanminus security update</summary>
    <description>Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell scripting. When running, it requires only 10 MB of RAM.  

Security Fix(es):  

  * perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability (CVE-2024-45321)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10218" id="RHSA-2024:10218" type="rhsa" title="RHSA-2024:10218"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45321" id="CVE-2024-45321" type="cve" title="CVE-2024-45321"/>
      <reference href="https://bugzilla.redhat.com/2308078" id="2308078" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10218.html" id="ALSA-2024:10218" type="self" title="ALSA-2024:10218"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="perl-App-cpanminus" version="1.7044" release="14.1.el9_5" epoch="0" arch="noarch" src="perl-App-cpanminus-1.7044-14.1.el9_5.src.rpm">
          <filename>perl-App-cpanminus-1.7044-14.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">1bb7350c514fdbde975c47b1ce48c2769919fd326b413281eff367cc12a2d05c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10244</id>
    <title>Important: pam:1.5.1 security update</title>
    <issued date="2024-11-25 00:00:00"/>
    <updated date="2024-12-02 10:41:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pam:1.5.1 security update</summary>
    <description>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  

Security Fix(es):  

  * pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10244" id="RHSA-2024:10244" type="rhsa" title="RHSA-2024:10244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10963" id="CVE-2024-10963" type="cve" title="CVE-2024-10963"/>
      <reference href="https://bugzilla.redhat.com/2324291" id="2324291" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10244.html" id="ALSA-2024:10244" type="self" title="ALSA-2024:10244"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="pam-devel" version="1.5.1" release="22.el9_5" epoch="0" arch="s390x" src="pam-1.5.1-22.el9_5.src.rpm">
          <filename>pam-devel-1.5.1-22.el9_5.s390x.rpm</filename>
          <sum type="sha256">68fabdd88f988d5752c07e5978c0c84acb63dc0cbc2e0d4eaa0929f11c500212</sum>
        </package>
        <package name="pam-docs" version="1.5.1" release="22.el9_5" epoch="0" arch="s390x" src="pam-1.5.1-22.el9_5.src.rpm">
          <filename>pam-docs-1.5.1-22.el9_5.s390x.rpm</filename>
          <sum type="sha256">a34ead546c4f4efcc4dd78578ccc18e9fce591ca05b06429a508ceb27ee9f47d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10274</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-11-26 00:00:00"/>
    <updated date="2024-12-03 07:57:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009)
  * kernel: USB: serial: mos7840: fix crash on resume (CVE-2024-42244)
  * kernel: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CVE-2024-50226)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10274" id="RHSA-2024:10274" type="rhsa" title="RHSA-2024:10274"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41009" id="CVE-2024-41009" type="cve" title="CVE-2024-41009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42244" id="CVE-2024-42244" type="cve" title="CVE-2024-42244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50226" id="CVE-2024-50226" type="cve" title="CVE-2024-50226"/>
      <reference href="https://bugzilla.redhat.com/2298412" id="2298412" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324876" id="2324876" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10274.html" id="ALSA-2024:10274" type="self" title="ALSA-2024:10274"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="perf" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>perf-5.14.0-503.15.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">08dd330aacff336df5b74561801ced1b2541da8498d5cafe4c97817dcc3e0ed9</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-doc-5.14.0-503.15.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">15f48479217cfeda3e5af1d7a11c496d17a672565ce5f90cc67239d461ff7c28</sum>
        </package>
        <package name="rtla" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>rtla-5.14.0-503.15.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">15faf5613cb208fff2a002078f2bff9659c30246781fb57d29725acf3567099c</sum>
        </package>
        <package name="rv" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>rv-5.14.0-503.15.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">16480c08ae0c7b42b5b608c3bfc91ef1069b2551a62de7950d88722cbec157ad</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-503.15.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">67b3c4cc07cf434e2462409e964ef17d8dd442a2d5db247e4fbb1c90b4262cd3</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-5.14.0-503.15.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">788c9922ae601fe7ac7aebe0bf74516b4a2183b49033c0ed3c4077d1ac70353c</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-503.15.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">9a7df425fc7a82a4bb830f7b273ef4301c179df0d8000eb1d26140fc815065ce</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-headers-5.14.0-503.15.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">a5adcfc272a9d220a85ca2ac8ef5a15dca2135d9b8271f6cc9e995cd4accae7f</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-503.15.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">bc1bbc14065438a09e981e4c8d4f8914db8974d823124e534db319769d72e7e0</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-devel-5.14.0-503.15.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">c18dff31628c465d9074f1fd11db97d4b986b492f2bf3a357446d7fb827ab91f</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-devel-matched-5.14.0-503.15.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">ecc650e2bb82ee027c6e8f611715e1f9ba3262a4ef040ace95cb64e3baa8639c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10384</id>
    <title>Important: tuned security update</title>
    <issued date="2024-11-26 00:00:00"/>
    <updated date="2024-12-02 10:37:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tuned security update</summary>
    <description>The tuned packages provide a service that tunes system settings according to a selected profile.  

Security Fix(es):  

  * tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root (CVE-2024-52336)
  * tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10384" id="RHSA-2024:10384" type="rhsa" title="RHSA-2024:10384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52336" id="CVE-2024-52336" type="cve" title="CVE-2024-52336"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52337" id="CVE-2024-52337" type="cve" title="CVE-2024-52337"/>
      <reference href="https://bugzilla.redhat.com/2324540" id="2324540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324541" id="2324541" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10384.html" id="ALSA-2024:10384" type="self" title="ALSA-2024:10384"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="tuned-utils" version="2.24.0" release="2.el9_5.alma.1" epoch="0" arch="noarch" src="tuned-2.24.0-2.el9_5.alma.1.src.rpm">
          <filename>tuned-utils-2.24.0-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">09b59391e3473513e1addac366c878caeeb4bd06a0a57fbe916b8cc72ef13685</sum>
        </package>
        <package name="tuned-profiles-oracle" version="2.24.0" release="2.el9_5.alma.1" epoch="0" arch="noarch" src="tuned-2.24.0-2.el9_5.alma.1.src.rpm">
          <filename>tuned-profiles-oracle-2.24.0-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">1806d907006a2d77f2dabb6a981d347c46708ec1c580c2a47a91445d9e7fb2bf</sum>
        </package>
        <package name="tuned-profiles-postgresql" version="2.24.0" release="2.el9_5.alma.1" epoch="0" arch="noarch" src="tuned-2.24.0-2.el9_5.alma.1.src.rpm">
          <filename>tuned-profiles-postgresql-2.24.0-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">4cdcf3d82ed9f90b61c15e1310f3dbf79203c07fa3ab8716cf87158345d6ba0c</sum>
        </package>
        <package name="tuned-profiles-spectrumscale" version="2.24.0" release="2.el9_5.alma.1" epoch="0" arch="noarch" src="tuned-2.24.0-2.el9_5.alma.1.src.rpm">
          <filename>tuned-profiles-spectrumscale-2.24.0-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">643c091463125f5caa6792f17f2a68f9460ccd82f467a1a4fb0a8804276ecedf</sum>
        </package>
        <package name="tuned-gtk" version="2.24.0" release="2.el9_5.alma.1" epoch="0" arch="noarch" src="tuned-2.24.0-2.el9_5.alma.1.src.rpm">
          <filename>tuned-gtk-2.24.0-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">75bfc56b8e81c72d66a913b653e73517ba2e299863613d0c0d2b6d78e1558829</sum>
        </package>
        <package name="tuned-ppd" version="2.24.0" release="2.el9_5.alma.1" epoch="0" arch="noarch" src="tuned-2.24.0-2.el9_5.alma.1.src.rpm">
          <filename>tuned-ppd-2.24.0-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">7640e7338f26ada7da9161c634dbc048bfd86b4bd9f42b1f4f740ed80137ef7e</sum>
        </package>
        <package name="tuned-profiles-atomic" version="2.24.0" release="2.el9_5.alma.1" epoch="0" arch="noarch" src="tuned-2.24.0-2.el9_5.alma.1.src.rpm">
          <filename>tuned-profiles-atomic-2.24.0-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">84fb648623a1324a3119d642f3fd8f478ff3b15a635c83ca3b3561e32f2d00ec</sum>
        </package>
        <package name="tuned-profiles-mssql" version="2.24.0" release="2.el9_5.alma.1" epoch="0" arch="noarch" src="tuned-2.24.0-2.el9_5.alma.1.src.rpm">
          <filename>tuned-profiles-mssql-2.24.0-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">97c9546dba5c8b4ed1da440303ec668f2e7b8f73ebaf3cd35159eab6cbc2b7d2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10472</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2024-11-27 00:00:00"/>
    <updated date="2024-12-02 10:34:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: data isolation bypass vulnerability (CVE-2024-44309)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10472" id="RHSA-2024:10472" type="rhsa" title="RHSA-2024:10472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44309" id="CVE-2024-44309" type="cve" title="CVE-2024-44309"/>
      <reference href="https://bugzilla.redhat.com/2327927" id="2327927" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10472.html" id="ALSA-2024:10472" type="self" title="ALSA-2024:10472"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="webkit2gtk3-jsc-devel" version="2.46.3" release="2.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-2.el9_5.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.46.3-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">1ff8db7c712cfc5a2aa4ed1356c58a6f26e03a8eb06e8533bfe19cd70675e1e5</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.46.3" release="2.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-2.el9_5.src.rpm">
          <filename>webkit2gtk3-jsc-2.46.3-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">73fa71cfc154fcc6f73b6ed74be39bb1f22785fc9ee9c3ff38f26eff96613452</sum>
        </package>
        <package name="webkit2gtk3" version="2.46.3" release="2.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-2.el9_5.src.rpm">
          <filename>webkit2gtk3-2.46.3-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">a937a645c0b323bc379e8c599ddb7d8dc462f82cd95649c261d6ed97e793ddc7</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.46.3" release="2.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-2.el9_5.src.rpm">
          <filename>webkit2gtk3-devel-2.46.3-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">bafd8287f49567dcd1796ff2e25baff15c4e35631127edd5ed6f756a43dfa0d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10590</id>
    <title>Important: python-tornado security update</title>
    <issued date="2024-12-02 00:00:00"/>
    <updated date="2024-12-03 08:37:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-tornado security update</summary>
    <description>Tornado is a Python web framework and asynchronous networking library that provides an open source version of scalable, non-blocking web server and tools.  

Security Fix(es):  

  * python-tornado: Tornado has HTTP cookie parsing DoS vulnerability (CVE-2024-52804)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10590" id="RHSA-2024:10590" type="rhsa" title="RHSA-2024:10590"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52804" id="CVE-2024-52804" type="cve" title="CVE-2024-52804"/>
      <reference href="https://bugzilla.redhat.com/2328045" id="2328045" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10590.html" id="ALSA-2024:10590" type="self" title="ALSA-2024:10590"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="python3-tornado" version="6.4.2" release="1.el9_5" epoch="0" arch="s390x" src="python-tornado-6.4.2-1.el9_5.src.rpm">
          <filename>python3-tornado-6.4.2-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">4f1cb443f94dc97a01dd8ac54cd0135a644484557311d28c62d2d623e4a5ecd6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10592</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-12-02 00:00:00"/>
    <updated date="2024-12-03 14:16:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * thunderbird: Potential disclosure of plaintext in OpenPGP encrypted message (CVE-2024-11159)
  * firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694)
  * firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696)
  * firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5 (CVE-2024-11699)
  * firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters (CVE-2024-11695)
  * firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10592" id="RHSA-2024:10592" type="rhsa" title="RHSA-2024:10592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11159" id="CVE-2024-11159" type="cve" title="CVE-2024-11159"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11692" id="CVE-2024-11692" type="cve" title="CVE-2024-11692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11694" id="CVE-2024-11694" type="cve" title="CVE-2024-11694"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11695" id="CVE-2024-11695" type="cve" title="CVE-2024-11695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11696" id="CVE-2024-11696" type="cve" title="CVE-2024-11696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11697" id="CVE-2024-11697" type="cve" title="CVE-2024-11697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11699" id="CVE-2024-11699" type="cve" title="CVE-2024-11699"/>
      <reference href="https://bugzilla.redhat.com/2325896" id="2325896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328941" id="2328941" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328943" id="2328943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328946" id="2328946" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328947" id="2328947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328948" id="2328948" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328950" id="2328950" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10592.html" id="ALSA-2024:10592" type="self" title="ALSA-2024:10592"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="thunderbird" version="128.5.0" release="1.el9_5.alma.1" epoch="0" arch="s390x" src="thunderbird-128.5.0-1.el9_5.alma.1.src.rpm">
          <filename>thunderbird-128.5.0-1.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">d83a722212067a2a9ff778041c16fa9998a0e92051cdc0a318ceb28b76dbfc5f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10702</id>
    <title>Important: firefox security update</title>
    <issued date="2024-12-02 00:00:00"/>
    <updated date="2024-12-05 14:28:42"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694)
  * firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696)
  * firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5 (CVE-2024-11699)
  * firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters (CVE-2024-11695)
  * firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10702" id="RHSA-2024:10702" type="rhsa" title="RHSA-2024:10702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11692" id="CVE-2024-11692" type="cve" title="CVE-2024-11692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11694" id="CVE-2024-11694" type="cve" title="CVE-2024-11694"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11695" id="CVE-2024-11695" type="cve" title="CVE-2024-11695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11696" id="CVE-2024-11696" type="cve" title="CVE-2024-11696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11697" id="CVE-2024-11697" type="cve" title="CVE-2024-11697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11699" id="CVE-2024-11699" type="cve" title="CVE-2024-11699"/>
      <reference href="https://bugzilla.redhat.com/2328941" id="2328941" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328943" id="2328943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328946" id="2328946" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328947" id="2328947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328948" id="2328948" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328950" id="2328950" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10702.html" id="ALSA-2024:10702" type="self" title="ALSA-2024:10702"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="firefox" version="128.5.1" release="1.el9_5" epoch="0" arch="s390x" src="firefox-128.5.1-1.el9_5.src.rpm">
          <filename>firefox-128.5.1-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">49123969ec749d14fc7ff482cef2aea2ed35f017d1d28c29da7157431aa424d9</sum>
        </package>
        <package name="firefox-x11" version="128.5.1" release="1.el9_5" epoch="0" arch="s390x" src="firefox-128.5.1-1.el9_5.src.rpm">
          <filename>firefox-x11-128.5.1-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">75a48dfec953642a20cd0c8bca22f2c0ef990bd14aa59b55d57800effe29478c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1075</id>
    <title>Important: edk2 security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-05 14:53:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* edk2: Buffer overflow in the DHCPv6 client via a long Server ID option (CVE-2023-45230)
* edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message (CVE-2023-45234)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1075" id="RHSA-2024:1075" type="rhsa" title="RHSA-2024:1075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45230" id="CVE-2023-45230" type="cve" title="CVE-2023-45230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45234" id="CVE-2023-45234" type="cve" title="CVE-2023-45234"/>
      <reference href="https://bugzilla.redhat.com/2258685" id="2258685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258697" id="2258697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1075.html" id="ALSA-2024:1075" type="self" title="ALSA-2024:1075"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="edk2-ovmf" version="20230524" release="4.el9_3.2.alma" epoch="0" arch="noarch" src="edk2-20230524-4.el9_3.2.alma.src.rpm">
          <filename>edk2-ovmf-20230524-4.el9_3.2.alma.noarch.rpm</filename>
          <sum type="sha256">672357e5f22af5021147da1e6ea2940970361d3219b3256dc24010fdaeeb1424</sum>
        </package>
        <package name="edk2-aarch64" version="20230524" release="4.el9_3.2.alma" epoch="0" arch="noarch" src="edk2-20230524-4.el9_3.2.alma.src.rpm">
          <filename>edk2-aarch64-20230524-4.el9_3.2.alma.noarch.rpm</filename>
          <sum type="sha256">c344e31df64e7b01343cb0aed155d8145237772f7f844a227dd8eda235c3368c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10787</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2024-12-04 00:00:00"/>
    <updated date="2024-12-05 14:30:14"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978)
  * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979)
  * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10787" id="RHSA-2024:10787" type="rhsa" title="RHSA-2024:10787"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10976" id="CVE-2024-10976" type="cve" title="CVE-2024-10976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10978" id="CVE-2024-10978" type="cve" title="CVE-2024-10978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10979" id="CVE-2024-10979" type="cve" title="CVE-2024-10979"/>
      <reference href="https://bugzilla.redhat.com/2326251" id="2326251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326253" id="2326253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326263" id="2326263" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10787.html" id="ALSA-2024:10787" type="self" title="ALSA-2024:10787"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="postgresql" stream="15" version="9050020241204101121" context="8cf767d6" arch="s390x"/>
        <package name="postgresql-contrib" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-contrib-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">01814bd318aab1460bc44344e2da7f770c98dd47d0fe37b2a12804379182b75a</sum>
        </package>
        <package name="postgresql-server-devel" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-server-devel-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">039eb8033140650ad46bc7b10b542a0cede60569cce370cbf0ad2a0bb040eac0</sum>
        </package>
        <package name="postgresql-upgrade" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-upgrade-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">10658b5f6c1421af4d8112e6d1fdf3daae30b77205c27aa86f535f4dea3f5bf6</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89</sum>
        </package>
        <package name="postgresql-pltcl" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-pltcl-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">1ae24b6a0421fa00df6027e788bc9c58dfe2f053c8ecfaad97a604f8fb115310</sum>
        </package>
        <package name="postgresql-server" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-server-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">28e639a1a32ac4c30ba5e3efb66dab32ce7d8c3cd30d9061acf5577e63d88498</sum>
        </package>
        <package name="postgresql-static" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-static-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">2e958fd5e824bea3e0dfe0a6e274d09f24620101fd619c82612c2a1005089f04</sum>
        </package>
        <package name="postgresql-private-devel" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-private-devel-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">2edee8239ed5889801fdb704ed5a039b5e179f613d1ae1695eaa33d3eacf37b3</sum>
        </package>
        <package name="postgresql-docs" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-docs-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">35ae759621eb6016631f8c8c72497ffbfe58b4dba1d52798caf39bef94917bd3</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="noarch" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-test-rpm-macros-15.10-1.module_el9.5.0+126+03d48c9f.noarch.rpm</filename>
          <sum type="sha256">546dfc0f0293f8590de6b31ffdac573a7d08b8cc21fb464b18f7cdd638276326</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-upgrade-devel-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">67d5a2b211b7dee63cce53b82aa9c96f20105df9c5fbabfd522ae71280af30d8</sum>
        </package>
        <package name="postgresql" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">895b4a89a1bb097f84b08791157b1e7b233ce0c085b7e279a9ebc3fddba9c32a</sum>
        </package>
        <package name="postgresql-plperl" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-plperl-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">d92c3f28adeec39119146238b35bb7a4c610c8adc94aba92c4b091d5777183e1</sum>
        </package>
        <package name="postgresql-test" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-test-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">dcfca4e597b9e26c29c3dbaeea0c3d2df288a27e5346445526980fd8a9454f58</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="2.module_el9.5.0+120+4533eb20" epoch="0" arch="s390x" src="pg_repack-1.4.8-2.module_el9.5.0+120+4533eb20.src.rpm">
          <filename>pg_repack-1.4.8-2.module_el9.5.0+120+4533eb20.s390x.rpm</filename>
          <sum type="sha256">df1164222320af61b8334ca2db5460bf0aaee4337cfff3c51ce7ba90aa1e9b66</sum>
        </package>
        <package name="postgresql-plpython3" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-plpython3-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">e62e945c74a57b1683cc419049f7b8a9ff2c24906fbc8af53330a85e7dad70f2</sum>
        </package>
        <package name="postgresql-private-libs" version="15.10" release="1.module_el9.5.0+126+03d48c9f" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el9.5.0+126+03d48c9f.src.rpm">
          <filename>postgresql-private-libs-15.10-1.module_el9.5.0+126+03d48c9f.s390x.rpm</filename>
          <sum type="sha256">eea610b4b3e55dbd647e7e5b9691e5cb5d3020f40701120de8bb25a9c9b9f5d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10788</id>
    <title>Important: postgresql:16 security update</title>
    <issued date="2024-12-04 00:00:00"/>
    <updated date="2024-12-05 14:26:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:16 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978)
  * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979)
  * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10788" id="RHSA-2024:10788" type="rhsa" title="RHSA-2024:10788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10976" id="CVE-2024-10976" type="cve" title="CVE-2024-10976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10978" id="CVE-2024-10978" type="cve" title="CVE-2024-10978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10979" id="CVE-2024-10979" type="cve" title="CVE-2024-10979"/>
      <reference href="https://bugzilla.redhat.com/2326251" id="2326251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326253" id="2326253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326263" id="2326263" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10788.html" id="ALSA-2024:10788" type="self" title="ALSA-2024:10788"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="postgresql" stream="16" version="9040020240403183139" context="8cf767d6" arch="s390x"/>
        <package name="postgresql-server-devel" version="16.6" release="1.module_el9.5.0+128+1095dce2" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+128+1095dce2.src.rpm">
          <filename>postgresql-server-devel-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm</filename>
          <sum type="sha256">1ea7b3d264e188c4272c95b0100757fa8fb2c77435906dd6df5b934708ba92c9</sum>
        </package>
        <package name="postgresql-pltcl" version="16.6" release="1.module_el9.5.0+128+1095dce2" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+128+1095dce2.src.rpm">
          <filename>postgresql-pltcl-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm</filename>
          <sum type="sha256">2498444fe4cafead2fafedc8f92a1db3c047526e4cceef1bc515c0ea690f55a3</sum>
        </package>
        <package name="postgresql-plperl" version="16.6" release="1.module_el9.5.0+127+50ff03a9" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+127+50ff03a9.src.rpm">
          <filename>postgresql-plperl-16.6-1.module_el9.5.0+127+50ff03a9.s390x.rpm</filename>
          <sum type="sha256">2f20ff207b51530881c948abba8841440d02eaedf1abfdc1d97a6de7da3b479c</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.6" release="1.module_el9.5.0+128+1095dce2" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+128+1095dce2.src.rpm">
          <filename>postgresql-upgrade-devel-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm</filename>
          <sum type="sha256">3220cdd2d828d40744607affb3649d5c031858e554daef6a76430a6d26f15aa0</sum>
        </package>
        <package name="postgresql-docs" version="16.6" release="1.module_el9.5.0+127+50ff03a9" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+127+50ff03a9.src.rpm">
          <filename>postgresql-docs-16.6-1.module_el9.5.0+127+50ff03a9.s390x.rpm</filename>
          <sum type="sha256">525c4efe693cc93d1e72ef29ceac37fc99afbf464390134e7efd9448cf103efc</sum>
        </package>
        <package name="postgresql-upgrade" version="16.6" release="1.module_el9.5.0+128+1095dce2" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+128+1095dce2.src.rpm">
          <filename>postgresql-upgrade-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm</filename>
          <sum type="sha256">53930b0919ac5eba8af6486ef8ed2f352962fc3d71ced7ed6676ac0d0548b0c0</sum>
        </package>
        <package name="postgresql" version="16.6" release="1.module_el9.5.0+127+50ff03a9" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+127+50ff03a9.src.rpm">
          <filename>postgresql-16.6-1.module_el9.5.0+127+50ff03a9.s390x.rpm</filename>
          <sum type="sha256">713809a592166cc6ffc17d0bed78b532b1e23a6553f948d6d9806a09206a4a9b</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="16.6" release="1.module_el9.5.0+127+50ff03a9" epoch="0" arch="noarch" src="postgresql-16.6-1.module_el9.5.0+127+50ff03a9.src.rpm">
          <filename>postgresql-test-rpm-macros-16.6-1.module_el9.5.0+127+50ff03a9.noarch.rpm</filename>
          <sum type="sha256">7187c10a9d4422053b4301be6a2ec5d52b4ffac6d2739b224c0f759e1e2118ae</sum>
        </package>
        <package name="postgresql-server" version="16.6" release="1.module_el9.5.0+128+1095dce2" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+128+1095dce2.src.rpm">
          <filename>postgresql-server-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm</filename>
          <sum type="sha256">748688b2e18b84e4bab679f76ad77c7496a69b0a2635f942d59ae4ce10863b73</sum>
        </package>
        <package name="pg_repack" version="1.5.1" release="1.module_el9.5.0+128+1095dce2" epoch="0" arch="s390x" src="pg_repack-1.5.1-1.module_el9.5.0+128+1095dce2.src.rpm">
          <filename>pg_repack-1.5.1-1.module_el9.5.0+128+1095dce2.s390x.rpm</filename>
          <sum type="sha256">7f6298567f4c4c449fb6821c1b7f708373496b47a39e64274a57c0e48396e0fa</sum>
        </package>
        <package name="postgresql-private-libs" version="16.6" release="1.module_el9.5.0+127+50ff03a9" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+127+50ff03a9.src.rpm">
          <filename>postgresql-private-libs-16.6-1.module_el9.5.0+127+50ff03a9.s390x.rpm</filename>
          <sum type="sha256">8bec36f4516ebd0d21e3e9a87ecddc8114cba02238ebc95e9763ee2dc5fc4706</sum>
        </package>
        <package name="postgresql-private-devel" version="16.6" release="1.module_el9.5.0+128+1095dce2" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+128+1095dce2.src.rpm">
          <filename>postgresql-private-devel-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm</filename>
          <sum type="sha256">994bdfa5e990569c3ce9346f37a589218df63e1bd651ac8a6369d2e0e804220e</sum>
        </package>
        <package name="postgresql-test" version="16.6" release="1.module_el9.5.0+128+1095dce2" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+128+1095dce2.src.rpm">
          <filename>postgresql-test-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm</filename>
          <sum type="sha256">af9ba9c40059c1285089285a5213b1ed084a1f5a8fce964d27f08071956248f7</sum>
        </package>
        <package name="postgres-decoderbufs" version="2.4.0" release="1.Final.module_el9.4.0+66+eb9878bc" epoch="0" arch="s390x" src="postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.src.rpm">
          <filename>postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm</filename>
          <sum type="sha256">b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c</sum>
        </package>
        <package name="postgresql-static" version="16.6" release="1.module_el9.5.0+128+1095dce2" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+128+1095dce2.src.rpm">
          <filename>postgresql-static-16.6-1.module_el9.5.0+128+1095dce2.s390x.rpm</filename>
          <sum type="sha256">c8d394c936f2d1f9f0bd2e84d08d87c24cfd4b4b8b1a08d79736d3c06c2be76a</sum>
        </package>
        <package name="pgvector" version="0.6.2" release="1.module_el9.5.0+120+4533eb20" epoch="0" arch="s390x" src="pgvector-0.6.2-1.module_el9.5.0+120+4533eb20.src.rpm">
          <filename>pgvector-0.6.2-1.module_el9.5.0+120+4533eb20.s390x.rpm</filename>
          <sum type="sha256">d9e5362a606cfeea735372eaed74bfcdf4f197951f254b8087bf4055677527ad</sum>
        </package>
        <package name="pgaudit" version="16.0" release="1.module_el9.4.0+66+eb9878bc" epoch="0" arch="s390x" src="pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.src.rpm">
          <filename>pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm</filename>
          <sum type="sha256">dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739</sum>
        </package>
        <package name="postgresql-contrib" version="16.6" release="1.module_el9.5.0+127+50ff03a9" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+127+50ff03a9.src.rpm">
          <filename>postgresql-contrib-16.6-1.module_el9.5.0+127+50ff03a9.s390x.rpm</filename>
          <sum type="sha256">dea5976fb35f472fe19be235519e47b6154eb6aa52d53e790f628118be0be7c8</sum>
        </package>
        <package name="postgresql-plpython3" version="16.6" release="1.module_el9.5.0+127+50ff03a9" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el9.5.0+127+50ff03a9.src.rpm">
          <filename>postgresql-plpython3-16.6-1.module_el9.5.0+127+50ff03a9.s390x.rpm</filename>
          <sum type="sha256">fda64d751a6ee6baab851abde4ac3e859e8327d4ea06bf3cdf6cfafb90031206</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10791</id>
    <title>Important: postgresql security update</title>
    <issued date="2024-12-04 00:00:00"/>
    <updated date="2024-12-05 14:23:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978)
  * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979)
  * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10791" id="RHSA-2024:10791" type="rhsa" title="RHSA-2024:10791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10976" id="CVE-2024-10976" type="cve" title="CVE-2024-10976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10978" id="CVE-2024-10978" type="cve" title="CVE-2024-10978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10979" id="CVE-2024-10979" type="cve" title="CVE-2024-10979"/>
      <reference href="https://bugzilla.redhat.com/2326251" id="2326251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326253" id="2326253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326263" id="2326263" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10791.html" id="ALSA-2024:10791" type="self" title="ALSA-2024:10791"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="postgresql-upgrade" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-upgrade-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">6637a8dbc5615c3b84b301ef37b0287d3564672e4e59f5c5befb643984ca798f</sum>
        </package>
        <package name="postgresql-contrib" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-contrib-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">9ebb26485bdab766b7fca51df33a6687f163959a2fa36f62b9a3456a4586d5bd</sum>
        </package>
        <package name="postgresql-private-libs" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-private-libs-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">b2981a0c2c0f2b8c308efa70ba621c7111fba6b0a75b71a337d00e7a512eaf39</sum>
        </package>
        <package name="postgresql-plpython3" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-plpython3-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">b6b6534a618cf832c9e7803a6527e2ed614aa9972d00304d6d5ae5aa7886f689</sum>
        </package>
        <package name="postgresql-server" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-server-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">bc65b191044c96562ccfe271c3185a76979a1fb679dfc32a84b6f04061ddc8b4</sum>
        </package>
        <package name="postgresql-pltcl" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-pltcl-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">cff2555d024832d7177e97d3821385c8b80ea26dd72a11549e93ffcf4b701acd</sum>
        </package>
        <package name="postgresql-plperl" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-plperl-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">d3fda30944900d6fcb22305de42deb5b0834770fb01970014be58b8065c89fcd</sum>
        </package>
        <package name="postgresql" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">e129e0c2f2588123e4f7afba26fcec8855783a27af1d1fb1113c70b38e61d3e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10858</id>
    <title>Important: ruby security update</title>
    <issued date="2024-12-05 00:00:00"/>
    <updated date="2024-12-09 09:39:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ruby security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * rexml: REXML ReDoS vulnerability (CVE-2024-49761)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10858" id="RHSA-2024:10858" type="rhsa" title="RHSA-2024:10858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49761" id="CVE-2024-49761" type="cve" title="CVE-2024-49761"/>
      <reference href="https://bugzilla.redhat.com/2322153" id="2322153" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10858.html" id="ALSA-2024:10858" type="self" title="ALSA-2024:10858"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="rubygem-json" version="2.5.1" release="163.el9_5" epoch="0" arch="s390x" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-json-2.5.1-163.el9_5.s390x.rpm</filename>
          <sum type="sha256">15e6a531e33da6c8b6d305da599e653e0d9339eae39e0c1f36737d8cdf490d52</sum>
        </package>
        <package name="rubygem-psych" version="3.3.2" release="163.el9_5" epoch="0" arch="s390x" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-psych-3.3.2-163.el9_5.s390x.rpm</filename>
          <sum type="sha256">19ee3bb0b22d0cad4570e42ac20fe41f9dcb55a94be05ea54ef0e3faad2cf2a1</sum>
        </package>
        <package name="rubygems-devel" version="3.2.33" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygems-devel-3.2.33-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">232bb85471c443772c091826c8eb9c354526fbe212ee1f8ee24bf1ce54b33c96</sum>
        </package>
        <package name="ruby-devel" version="3.0.7" release="163.el9_5" epoch="0" arch="s390x" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>ruby-devel-3.0.7-163.el9_5.s390x.rpm</filename>
          <sum type="sha256">29c410d6396e74368d181a04c4a2ce342fa911f37ded0120561f85669ae9c55e</sum>
        </package>
        <package name="rubygem-irb" version="1.3.5" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-irb-1.3.5-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">29dda18157bd7764cff8221139a51148cb14bc3814a22e6a9d8eff528ba12a52</sum>
        </package>
        <package name="rubygems" version="3.2.33" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygems-3.2.33-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">5268018305828e4b7743975781e28c022486c906072f91025f19a783f79e6b7d</sum>
        </package>
        <package name="rubygem-rake" version="13.0.3" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-rake-13.0.3-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">5e1180085b455e8b0eabed26b73ad6c3d0c359b3ef1063de167ed353b0bd8cc3</sum>
        </package>
        <package name="ruby" version="3.0.7" release="163.el9_5" epoch="0" arch="s390x" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>ruby-3.0.7-163.el9_5.s390x.rpm</filename>
          <sum type="sha256">65d0c9abd323ac570e56f28d435eb4796e99c2ba5fddee1e66243e803f26d692</sum>
        </package>
        <package name="ruby-libs" version="3.0.7" release="163.el9_5" epoch="0" arch="s390x" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>ruby-libs-3.0.7-163.el9_5.s390x.rpm</filename>
          <sum type="sha256">6b6b16e327a1763893f2c8223ca4c6a85df2b5b65a2a59a20fd063886007957f</sum>
        </package>
        <package name="rubygem-io-console" version="0.5.7" release="163.el9_5" epoch="0" arch="s390x" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-io-console-0.5.7-163.el9_5.s390x.rpm</filename>
          <sum type="sha256">6cbf7f0002947ffdec7b9097123be8ee29f93635b28121ab1fbf4daadac654f1</sum>
        </package>
        <package name="rubygem-bundler" version="2.2.33" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-bundler-2.2.33-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">743129be5a0de70b0f0dfabdf8466b904edea7a16e6bf28aadd9417af97eed2c</sum>
        </package>
        <package name="rubygem-power_assert" version="1.2.1" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-power_assert-1.2.1-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">7d41d9a9be6e6bfb145cf1b916804f00b75eb90766ad602298d41cb02365d413</sum>
        </package>
        <package name="rubygem-minitest" version="5.14.2" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-minitest-5.14.2-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">7ec1f80250541c6650bc9e4c5dac0e40b8e7449869feedb92bc598c6be1ed2f4</sum>
        </package>
        <package name="rubygem-rbs" version="1.4.0" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-rbs-1.4.0-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">7fab3b59c4cd69003c8f0f070f2541b7469e9867c77550b5a8eeec9e226607c0</sum>
        </package>
        <package name="rubygem-rdoc" version="6.3.4.1" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-rdoc-6.3.4.1-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">9a53b4745b144325874e08442fd4dc81a43a51af1eab0f7e69e16b9a665eb01c</sum>
        </package>
        <package name="ruby-default-gems" version="3.0.7" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>ruby-default-gems-3.0.7-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">9eb7a316c0a7e413f9305edd39b03226160fb075943ad12d32c05147d312f4cc</sum>
        </package>
        <package name="rubygem-rss" version="0.2.9" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-rss-0.2.9-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">9fb6ffc54dc5c69ffc6cc0b245257b774e148b4b91fd1692f776c0d12be63f7a</sum>
        </package>
        <package name="rubygem-test-unit" version="3.3.7" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-test-unit-3.3.7-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">bf8e74d7f7c866c796ac54cd22e0baaa4706f8c5e5e89a2f32c8a96149c6158f</sum>
        </package>
        <package name="rubygem-typeprof" version="0.15.2" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-typeprof-0.15.2-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">d1f54f1cd4085e69c4c00259e0cee5844b9ef27179f9b3a350b47f451d29dae5</sum>
        </package>
        <package name="rubygem-rexml" version="3.2.5" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-rexml-3.2.5-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">e0cd43fac49e8e7810a48b3c7302853fbca89ecc81677eb71cc216b2a4f48db0</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.0.0" release="163.el9_5" epoch="0" arch="s390x" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>rubygem-bigdecimal-3.0.0-163.el9_5.s390x.rpm</filename>
          <sum type="sha256">eed749a711f4c11d2addfa0b9371b199522300cfba05de717b91f69518ed4ba0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10860</id>
    <title>Important: ruby:3.1 security update</title>
    <issued date="2024-12-05 00:00:00"/>
    <updated date="2024-12-09 09:52:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ruby:3.1 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * rexml: REXML ReDoS vulnerability (CVE-2024-49761)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10860" id="RHSA-2024:10860" type="rhsa" title="RHSA-2024:10860"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49761" id="CVE-2024-49761" type="cve" title="CVE-2024-49761"/>
      <reference href="https://bugzilla.redhat.com/2322153" id="2322153" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10860.html" id="ALSA-2024:10860" type="self" title="ALSA-2024:10860"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="ruby" stream="3.1" version="9050020241206140523" context="8cf767d6" arch="s390x"/>
        <package name="rubygem-power_assert" version="2.0.1" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-power_assert-2.0.1-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">1a87118a897a317b8d91cb3ff5b0bdbc6c46a1e01a48eada9d704ba780a7da37</sum>
        </package>
        <package name="rubygem-io-console" version="0.5.11" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="s390x" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-io-console-0.5.11-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm</filename>
          <sum type="sha256">3fca50fb1c3fde7efd4f4d4b9cf970df4941632cea9ff554fe9bf70ef3d8ea19</sum>
        </package>
        <package name="ruby-default-gems" version="3.1.5" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>ruby-default-gems-3.1.5-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">46c3117101c6a2f6ab77792b87553f8a8753a22e33e2dd4a5a7d62fb2db3c8ac</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.4" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.4-1.module_el9.1.0+8+503f6fbd.noarch.rpm</filename>
          <sum type="sha256">47f8869c8adfe2b7eee506473440af3abe2bb171cf60cda4d0dec05db0bc3fb8</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.4" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.s390x.rpm</filename>
          <sum type="sha256">49b1f8d15c4626c94dbdf369d69aa871b2e1b4909ae4718089f41d7de50396ee</sum>
        </package>
        <package name="rubygems-devel" version="3.3.27" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygems-devel-3.3.27-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">5a5635bb37284e7f8944e22edeb54996bc2bb874fa24e2e4d1d7af2040d64c47</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.1" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="s390x" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-bigdecimal-3.1.1-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm</filename>
          <sum type="sha256">5f372eef5be9c6436a34d5c853380e3ef7739eae6600af97e494ee80fc9499f3</sum>
        </package>
        <package name="rubygem-irb" version="1.4.1" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-irb-1.4.1-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">609f96b6b4fbb4fd81e843ab154793bb83a9fdc834ceda4ac8fdae8971a99917</sum>
        </package>
        <package name="ruby-devel" version="3.1.5" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="s390x" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>ruby-devel-3.1.5-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm</filename>
          <sum type="sha256">60a58272a4e369bfb1d4631cecc9190cda19e99c522b777f198336fa82264181</sum>
        </package>
        <package name="rubygem-json" version="2.6.1" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="s390x" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-json-2.6.1-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm</filename>
          <sum type="sha256">611dd077c04f90e0cbf5776573fb874dedfd8173e10337ebe299bec1581b931b</sum>
        </package>
        <package name="rubygem-psych" version="4.0.4" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="s390x" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-psych-4.0.4-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm</filename>
          <sum type="sha256">742ec517517ccaf6d889691ddadfa59aaf8efc3f604aa67fb42d890cb4f6b6dc</sum>
        </package>
        <package name="rubygems" version="3.3.27" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygems-3.3.27-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">7866c7856d0910478354276361b0c7a0b04c84210b488c20e438d5a2bf74c6d5</sum>
        </package>
        <package name="rubygem-pg" version="1.3.5" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="s390x" src="rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.s390x.rpm</filename>
          <sum type="sha256">81af584c5f98cbff30e7733f802c0711cdfb921b4fc268dc21e6e002f4c9a292</sum>
        </package>
        <package name="ruby-libs" version="3.1.5" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="s390x" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>ruby-libs-3.1.5-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm</filename>
          <sum type="sha256">8f53ed61262d2fadb925460b2a11e223e429597b6bd324c41e736d665802c3b2</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.3" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-typeprof-0.21.3-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">9d8b840c834b7ca34b9b639786928be8d668ada058261cb4f696cdcc2400aa32</sum>
        </package>
        <package name="rubygem-test-unit" version="3.5.3" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-test-unit-3.5.3-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">9fe8a32f2ca123c72339b450da0b96eee6793236e1ae8f96d35707ef1c53c556</sum>
        </package>
        <package name="ruby" version="3.1.5" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="s390x" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm</filename>
          <sum type="sha256">a4a30f88312e0b584f06fb7bdce12edab94548d105e76299bcd371e45d9fedb6</sum>
        </package>
        <package name="rubygem-rdoc" version="6.4.1.1" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-rdoc-6.4.1.1-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">ab6f0392f046f1332b8b3c9e94d9f2d127038293ef8ac6a4d3eb1e92500e4370</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.1.5" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="s390x" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>ruby-bundled-gems-3.1.5-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm</filename>
          <sum type="sha256">b33d86e789cc90e7170baf9f44e1ad5adac190ef0716e1776f57320183232c3f</sum>
        </package>
        <package name="rubygem-rss" version="0.2.9" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-rss-0.2.9-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">b628e996934d9fa3728b37b8c0946755593c8689299c68050bd8df8f208c179f</sum>
        </package>
        <package name="rubygem-minitest" version="5.15.0" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-minitest-5.15.0-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">c0239a3c3442f7c918113b398f0e86bc2a382410c806e07d12dc830840fee5ec</sum>
        </package>
        <package name="ruby-doc" version="3.1.5" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>ruby-doc-3.1.5-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">c1a416acf12e7f80637f28006fc764047a3cbc1d801b8c2751584b9889fd1a07</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.3.5" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="noarch" src="rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-pg-doc-1.3.5-1.module_el9.1.0+8+503f6fbd.noarch.rpm</filename>
          <sum type="sha256">c24489067c5c62f3bb8edd8f47b01171f766eaeb0e96991878c51e5ae4b1b3e4</sum>
        </package>
        <package name="rubygem-rbs" version="2.7.0" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="s390x" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-rbs-2.7.0-145.module_el9.5.0+129+9ba7e8b1.s390x.rpm</filename>
          <sum type="sha256">ccf958d35332f2d771a20081b101ce20ea4cbc58725d6a74af640e9362bf7377</sum>
        </package>
        <package name="rubygem-rake" version="13.0.6" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-rake-13.0.6-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">d0e601cb3008cbf15b85ce311496b08ff2cbbcec47b9eb7fc246f33ddca18360</sum>
        </package>
        <package name="rubygem-bundler" version="2.3.27" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-bundler-2.3.27-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">f2dcf8aa2d59f7e4bb04f61f9624b06b29c6a0fa93e93c48459f07d23af932f1</sum>
        </package>
        <package name="rubygem-rexml" version="3.2.5" release="145.module_el9.5.0+129+9ba7e8b1" epoch="0" arch="noarch" src="ruby-3.1.5-145.module_el9.5.0+129+9ba7e8b1.src.rpm">
          <filename>rubygem-rexml-3.2.5-145.module_el9.5.0+129+9ba7e8b1.noarch.rpm</filename>
          <sum type="sha256">ff85ec821bb13c2a71eb6073e8387b5d068ee21398bbaec0897c8db7da4c98ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10869</id>
    <title>Moderate: redis:7 security update</title>
    <issued date="2024-12-05 00:00:00"/>
    <updated date="2024-12-09 09:53:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>redis:7 security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: Redis SORT_RO may bypass ACL configuration (CVE-2023-41053)
  * redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145)
  * redis: Denial-of-service due to malformed ACL selectors in Redis (CVE-2024-31227)
  * redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449)
  * redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10869" id="RHSA-2024:10869" type="rhsa" title="RHSA-2024:10869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41053" id="CVE-2023-41053" type="cve" title="CVE-2023-41053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45145" id="CVE-2023-45145" type="cve" title="CVE-2023-45145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31227" id="CVE-2024-31227" type="cve" title="CVE-2024-31227"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31228" id="CVE-2024-31228" type="cve" title="CVE-2024-31228"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31449" id="CVE-2024-31449" type="cve" title="CVE-2024-31449"/>
      <reference href="https://bugzilla.redhat.com/2237826" id="2237826" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244940" id="2244940" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317053" id="2317053" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317056" id="2317056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317058" id="2317058" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10869.html" id="ALSA-2024:10869" type="self" title="ALSA-2024:10869"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="redis" stream="7" version="9050020241206140833" context="8cf767d6" arch="s390x"/>
        <package name="redis-doc" version="7.2.6" release="1.module_el9.5.0+130+36ae7635" epoch="0" arch="noarch" src="redis-7.2.6-1.module_el9.5.0+130+36ae7635.src.rpm">
          <filename>redis-doc-7.2.6-1.module_el9.5.0+130+36ae7635.noarch.rpm</filename>
          <sum type="sha256">2c114e5e77004ee28712b857f95f1006f0b12a6df95654291887750a37cca3c5</sum>
        </package>
        <package name="redis" version="7.2.6" release="1.module_el9.5.0+130+36ae7635" epoch="0" arch="s390x" src="redis-7.2.6-1.module_el9.5.0+130+36ae7635.src.rpm">
          <filename>redis-7.2.6-1.module_el9.5.0+130+36ae7635.s390x.rpm</filename>
          <sum type="sha256">4b2123b79f17caedd31178281228062dab839f4e7d205cb8aa104cadeaa5c3cb</sum>
        </package>
        <package name="redis-devel" version="7.2.6" release="1.module_el9.5.0+130+36ae7635" epoch="0" arch="s390x" src="redis-7.2.6-1.module_el9.5.0+130+36ae7635.src.rpm">
          <filename>redis-devel-7.2.6-1.module_el9.5.0+130+36ae7635.s390x.rpm</filename>
          <sum type="sha256">fdd14e4009c65ad2d0ca3726c57596aa0537ce9e815a70f6f0ddd1687dc1ddc3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10939</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-12-11 00:00:00"/>
    <updated date="2024-12-16 15:05:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
  * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854)
  * kernel: iommu: Restore lost return in iommu_report_device_fault() (CVE-2024-44994)
  * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018)
  * kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook (CVE-2024-46695)
  * kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CVE-2024-49949)
  * kernel: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CVE-2024-50251)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10939" id="RHSA-2024:10939" type="rhsa" title="RHSA-2024:10939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26615" id="CVE-2024-26615" type="cve" title="CVE-2024-26615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43854" id="CVE-2024-43854" type="cve" title="CVE-2024-43854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44994" id="CVE-2024-44994" type="cve" title="CVE-2024-44994"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45018" id="CVE-2024-45018" type="cve" title="CVE-2024-45018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46695" id="CVE-2024-46695" type="cve" title="CVE-2024-46695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49949" id="CVE-2024-49949" type="cve" title="CVE-2024-49949"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50251" id="CVE-2024-50251" type="cve" title="CVE-2024-50251"/>
      <reference href="https://bugzilla.redhat.com/2267355" id="2267355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309857" id="2309857" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2311715" id="2311715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312083" id="2312083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320505" id="2320505" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324886" id="2324886" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10939.html" id="ALSA-2024:10939" type="self" title="ALSA-2024:10939"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="kernel-devel-matched" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-devel-matched-5.14.0-503.16.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">18300eb5e7f76eba7e3952e07022aff231f47b30fc30ef26d9cd13ff99d1169c</sum>
        </package>
        <package name="rv" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>rv-5.14.0-503.16.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">1e3c819cb66bc5a77971247fa604c25424a18f4bdce8a7b9bec351c6eb7f0499</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-doc-5.14.0-503.16.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">202e63c678f26f51ec0ceb07070eb3742177bf1bfb7f8045aff4d293645a8939</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-503.16.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">298a6b4c3f5510f6e109333d5315c85b6f60da8a5bae42eba84e8ffcdcb800b8</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-503.16.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">3caf738baa7de1a5317d8a761f1b1f7460ef86790942adfe332253fa82bf79d8</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-devel-5.14.0-503.16.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">400870cdd215e9e6da00f735b7abcb0cf0034cebcb1b6aa26f30316f05ecb099</sum>
        </package>
        <package name="rtla" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>rtla-5.14.0-503.16.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">6e1bd0239a9f90ff7da610d6c1f05fede0ca80f884be0d80752b4b56a530a26a</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-headers-5.14.0-503.16.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">7aafc6e849107e65f815befa6fe3e8062a7e469440e83b4106a37821a9809d08</sum>
        </package>
        <package name="perf" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>perf-5.14.0-503.16.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">99bd8388ba0be3056bfca4d7793f09a1e0a3b41c53fe9a5d51b3f1b2718a9713</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-5.14.0-503.16.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">bab05a0db48d384ccb18ca054e17eb6f40389fe91fba50c3b8990a93bc6b4bd5</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-503.16.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">e8a3fa5ce3d11c300940fcae603a58a7b71f8d80e3223285a1114d9e9190928d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10949</id>
    <title>Moderate: php:8.2 security update</title>
    <issued date="2024-12-11 00:00:00"/>
    <updated date="2024-12-16 14:59:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:8.2 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: host/secure cookie bypass due to partial CVE-2022-31629 fix (CVE-2024-2756)
  * php: password_verify can erroneously return true, opening ATO risk (CVE-2024-3096)
  * php: Filter bypass in filter_var (FILTER_VALIDATE_URL) (CVE-2024-5458)
  * php: Erroneous parsing of multipart form data (CVE-2024-8925)
  * php: cgi.force_redirect configuration is bypassable due to the environment variable collision (CVE-2024-8927)
  * php: PHP-FPM Log Manipulation Vulnerability (CVE-2024-9026)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10949" id="RHSA-2024:10949" type="rhsa" title="RHSA-2024:10949"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2756" id="CVE-2024-2756" type="cve" title="CVE-2024-2756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3096" id="CVE-2024-3096" type="cve" title="CVE-2024-3096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5458" id="CVE-2024-5458" type="cve" title="CVE-2024-5458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8925" id="CVE-2024-8925" type="cve" title="CVE-2024-8925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8927" id="CVE-2024-8927" type="cve" title="CVE-2024-8927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9026" id="CVE-2024-9026" type="cve" title="CVE-2024-9026"/>
      <reference href="https://bugzilla.redhat.com/2275058" id="2275058" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275061" id="2275061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291252" id="2291252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317049" id="2317049" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317051" id="2317051" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317144" id="2317144" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10949.html" id="ALSA-2024:10949" type="self" title="ALSA-2024:10949"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="php" stream="8.2" version="9040020240403183013" context="8cf767d6" arch="s390x"/>
        <package name="php-process" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-process-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">03c8959c64d079356fe232fe163482333e36fb595012a2076bc5e112570a24dc</sum>
        </package>
        <package name="php-pgsql" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-pgsql-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">0c874fa5b320f703a37026bd8e6dc08d6a22abc2ab47f8932e6e58a6f95ba8d3</sum>
        </package>
        <package name="php-soap" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-soap-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">1f8e8a7f7e72c73e6f6c119490214a9389451b2babefe81afdb631ad0c0c1226</sum>
        </package>
        <package name="php-embedded" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-embedded-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">28055a6db806ba9f469bfcc082370475e8048a095333bca04b16bba79f8d4bb8</sum>
        </package>
        <package name="php-mbstring" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-mbstring-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">3a42fa7689efba6baf4652d28b75f915a9930b8c318d35439b71149faa57672d</sum>
        </package>
        <package name="php" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">3b487159b8b3377b9faa6e4987d716b07a3c8831b7b2ce40bb121f477fcd4638</sum>
        </package>
        <package name="php-gmp" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-gmp-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">43f8eca9dad3d7b00116e910f3f57b85fe84d3610b0281f9e1ad5823033390ca</sum>
        </package>
        <package name="php-common" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-common-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">492c54f27613dfbfdc4e24f513bc5dc53c46e4cf421c8105ed40f98d61fa9331</sum>
        </package>
        <package name="apcu-panel" version="5.1.23" release="1.module_el9.4.0+65+49ff6472" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm</filename>
          <sum type="sha256">4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921</sum>
        </package>
        <package name="php-dba" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-dba-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">4c374bf04579d8a5115d067ee1204a1eb4afc7258ca01f047ae07130744a45e6</sum>
        </package>
        <package name="php-ffi" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-ffi-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">50c6394d01ed801df237f901c98b8316d0422721bda2225e94a848bb0a912d1c</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="4.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">5b553811ce76e365f333f05af308acce947d19a48bafe82f02023b4b9de8b683</sum>
        </package>
        <package name="php-dbg" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-dbg-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">6a423891e4bf8ac865c8794c12d2c466c9b50682948c8698aa739467516645e1</sum>
        </package>
        <package name="php-xml" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-xml-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">7515c49b75df99af8f06028797b63b7351bc498b7da1928d73fe3459c6bfadb8</sum>
        </package>
        <package name="php-pecl-zip" version="1.22.3" release="1.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">7febf476c58e0ac97a968fde5b92f0dd64ac7c932351ae9c689cc6ea9c8e787a</sum>
        </package>
        <package name="php-enchant" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-enchant-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">9a442c31e9e55bbf0bf58d07127c429622125d7a0742d1e7b600d53940a32de5</sum>
        </package>
        <package name="php-pdo" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-pdo-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">9b4b72ae491313efc2820e0e4cb894990601fcc5783087031c4046db2e342474</sum>
        </package>
        <package name="php-opcache" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-opcache-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">a419363ddee17ebef6d4e56e108f9333786a54b838e7b79c2a12df6901ac5779</sum>
        </package>
        <package name="php-mysqlnd" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-mysqlnd-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">a916083049024db81de24aad784b42ed57e139f44cb9f2864c02e39e23c8f3c0</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.23" release="1.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">aee42951e556eb8ecf40f0c5fe40c53a1ae9f3285ee2bfa7a4169ff85ae7642c</sum>
        </package>
        <package name="php-fpm" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-fpm-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">b6d2f17dee6365feb57a3c6c172c6f288082a77b8174775bc0099fe8ebe863b3</sum>
        </package>
        <package name="php-snmp" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-snmp-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">bed2176e97ce088101e3d8ade07a0ee478402220ec30a0a31a68021685d068ac</sum>
        </package>
        <package name="php-intl" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-intl-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">cdc43e4e8c5bfa6d385572b08c3ed67728e103e2162c689b7647040728568424</sum>
        </package>
        <package name="php-bcmath" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-bcmath-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">d20ea04f911d25c5f78d6526efc10c2174a36cd3250c262d14ff4a531f0bb733</sum>
        </package>
        <package name="php-cli" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-cli-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">db25c506700e9fa257f8136a3c8e7eced0bbbe5d1ba0bfbd25734667249487c2</sum>
        </package>
        <package name="php-devel" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-devel-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">de5f94d497b1a0cd4c836dfd17828b50ae878e9465b21c4aec37cfd0fb3283bb</sum>
        </package>
        <package name="php-ldap" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-ldap-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">e0ecbbbf674c205c0ad436d4ab03cea4cb22e7f32b6069495a69908be8da903c</sum>
        </package>
        <package name="php-odbc" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-odbc-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">e3024e3263760bd425e855f6092c1ef7ad240b541010f48a6fbb3464f422784d</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.2.2" release="2.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">e6bab0e873b7c6300e4e9a467194aa281a3cd256394b4e29f718563c8ac738eb</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.23" release="1.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">e9121b1ec8edb80b93180e40236eed42c16907d15021356dac19b0b85a7c349d</sum>
        </package>
        <package name="php-gd" version="8.2.25" release="1.module_el9.5.0+132+adb0ae7a" epoch="0" arch="s390x" src="php-8.2.25-1.module_el9.5.0+132+adb0ae7a.src.rpm">
          <filename>php-gd-8.2.25-1.module_el9.5.0+132+adb0ae7a.s390x.rpm</filename>
          <sum type="sha256">ffcafa7114eafefe181e46e8f109629dcbd68291e0d912eee44e5155b8b1019c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10950</id>
    <title>Moderate: php:8.1 security update</title>
    <issued date="2024-12-11 00:00:00"/>
    <updated date="2024-12-16 14:57:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:8.1 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: host/secure cookie bypass due to partial CVE-2022-31629 fix (CVE-2024-2756)
  * php: password_verify can erroneously return true, opening ATO risk (CVE-2024-3096)
  * php: Filter bypass in filter_var (FILTER_VALIDATE_URL) (CVE-2024-5458)
  * php: Erroneous parsing of multipart form data (CVE-2024-8925)
  * php: cgi.force_redirect configuration is bypassable due to the environment variable collision (CVE-2024-8927)
  * php: PHP-FPM Log Manipulation Vulnerability (CVE-2024-9026)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10950" id="RHSA-2024:10950" type="rhsa" title="RHSA-2024:10950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2756" id="CVE-2024-2756" type="cve" title="CVE-2024-2756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3096" id="CVE-2024-3096" type="cve" title="CVE-2024-3096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5458" id="CVE-2024-5458" type="cve" title="CVE-2024-5458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8925" id="CVE-2024-8925" type="cve" title="CVE-2024-8925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8927" id="CVE-2024-8927" type="cve" title="CVE-2024-8927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9026" id="CVE-2024-9026" type="cve" title="CVE-2024-9026"/>
      <reference href="https://bugzilla.redhat.com/2275058" id="2275058" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275061" id="2275061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291252" id="2291252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317049" id="2317049" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317051" id="2317051" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317144" id="2317144" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10950.html" id="ALSA-2024:10950" type="self" title="ALSA-2024:10950"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="php" stream="8.1" version="9050020241212065908" context="8cf767d6" arch="s390x"/>
        <package name="php-pgsql" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-pgsql-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">00ae08ce6483f418ed1b2b9e39061ad599bf4bccf1b397a93484028a508e6363</sum>
        </package>
        <package name="php-common" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-common-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">0533147b440499cb909292caf8a6829b5c60439af5f0894dfc4363b938a8aa2e</sum>
        </package>
        <package name="php-xml" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-xml-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">2848501d6a7e1ea69aa7e727bea98c9638609658bf30ef0c977cea089242c478</sum>
        </package>
        <package name="php-bcmath" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-bcmath-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">2c6a8b8c2529bff9fd23e1a02cb9355af79266db81c7076194233413a6557198</sum>
        </package>
        <package name="php-mbstring" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-mbstring-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">4c6bd4e5b65ac68b8ecc25ff72a02739ecc638d93c5729b96ca2332e32d08fba</sum>
        </package>
        <package name="php-gmp" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-gmp-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">4fdafd1157e1af2c9c6f3a766b499be656eacc0cd7e4f3e6b6de50ad34cdb5cc</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="4.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">5b553811ce76e365f333f05af308acce947d19a48bafe82f02023b4b9de8b683</sum>
        </package>
        <package name="php-mysqlnd" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-mysqlnd-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">64445b7430b1abd46a1b9e3ac3805e4c43f19a34d504e5b21ad5a808f2005aad</sum>
        </package>
        <package name="php-process" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-process-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">677212830865da3c2abb14ac8f8ba312eedf33d4774e7f2c0410c9b61d6fddcd</sum>
        </package>
        <package name="php-opcache" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-opcache-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">6ac02254d50e52ec1d2bc8111556ddad305cd14cff5df2a6c4a9540daa7ff55f</sum>
        </package>
        <package name="php-pecl-zip" version="1.20.1" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">6c89933d8e8153ed39764877e9c07501f556ba5057a9695bfefcfc75649f5734</sum>
        </package>
        <package name="php-pdo" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-pdo-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">6f8fcfc4adb059c4e89979e7b3bbc3b2163a2b8b538f0269d9ca9fe97e2aaa3a</sum>
        </package>
        <package name="php-dba" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-dba-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">748838f7ef9da04c8831257992f48a28543001e86c2af07e6a0b9b85509462d1</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.21" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">74c41c08148fce005bb18c75bcfafc1e739cc84b6cac297b5ef955172eff0b69</sum>
        </package>
        <package name="php-devel" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-devel-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">88d1a4c1adc45acd2d265db5e717c657541c8c74e72b65dbd3f9917792f9299f</sum>
        </package>
        <package name="php-snmp" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-snmp-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">8ab0dbd68074a9fa8ea90c71b9e74935e82921782b8245cc0eb0e49533f754e9</sum>
        </package>
        <package name="php-cli" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-cli-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">8bff86d973207e56da3b26dd42089bf1ce73d1b2f093f94c83795542ae836511</sum>
        </package>
        <package name="php-fpm" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-fpm-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">98415c8b21ba81114fbc2fe22fd44d1fa744cc027fa455842fb57d16533fbbe9</sum>
        </package>
        <package name="php" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">a67610c60d4718fdc211be22d2262095d8e2f771c8f90c37ae77c03597265bf5</sum>
        </package>
        <package name="php-soap" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-soap-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">b17d57d7d562ca3fd4c2f684f5a8b8b2ed71010798bc0bd711ebbb8265bd2e0f</sum>
        </package>
        <package name="php-dbg" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-dbg-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">b4a7cbe895d8057801715ee1c6fe4da76d99efa400e1c19b482731bca40192de</sum>
        </package>
        <package name="php-enchant" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-enchant-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">bc7b9772668baab04c36b7b40157b5581b79fe0e1eb3406005651bf88b213d4e</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.21" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">bd0093fac304470cea776e43f28256fbfa317c192bb6bd8762cc1ec00db6f9e1</sum>
        </package>
        <package name="php-odbc" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-odbc-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">c131150ecc9432c290b5a6f273735b0da0c240a590bb3ebd7b08d5f6f2f26334</sum>
        </package>
        <package name="php-intl" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-intl-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">c3deeb43bfcd5cc56f0b8c8e01a04e897ddd4b6d76dfbfb8cee64eb9ce7956df</sum>
        </package>
        <package name="php-gd" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-gd-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">cb8d20231bf872bced8eb16a09c60959e4f1e6d7e6a734b0a2dfda394bcba83b</sum>
        </package>
        <package name="php-ffi" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-ffi-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">d1aa0f70386b93a66f4633e1caf439adf23b07115f9bce0849c06fa4d28cd355</sum>
        </package>
        <package name="php-ldap" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-ldap-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">d29bf1315c3727dd92ec7731d66f44b62681b36628054bef1f2e007c8fbab7b3</sum>
        </package>
        <package name="php-embedded" version="8.1.30" release="1.module_el9.5.0+131+62ecd687" epoch="0" arch="s390x" src="php-8.1.30-1.module_el9.5.0+131+62ecd687.src.rpm">
          <filename>php-embedded-8.1.30-1.module_el9.5.0+131+62ecd687.s390x.rpm</filename>
          <sum type="sha256">d5057772041acf3846f07814e54666862f9cd83c56039b73004d8f28e233629d</sum>
        </package>
        <package name="apcu-panel" version="5.1.21" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>apcu-panel-5.1.21-1.module_el9.1.0+15+94ba28e4.noarch.rpm</filename>
          <sum type="sha256">e27a86b0afd898fe4401096cadb01c89fd2b39150e0cbfb4ebd82bc9822a3cbf</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.1.4" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">e97fdc0e54c4a5d2084a375f0ff31f551c9dc8c1f4c2012f2e453b1a031a1328</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10978</id>
    <title>Important: python3.12 security update</title>
    <issued date="2024-12-12 00:00:00"/>
    <updated date="2024-12-16 14:45:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
  * python: Unbounded memory buffering in SelectorSocketTransport.writelines() (CVE-2024-12254)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10978" id="RHSA-2024:10978" type="rhsa" title="RHSA-2024:10978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12254" id="CVE-2024-12254" type="cve" title="CVE-2024-12254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2330804" id="2330804" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10978.html" id="ALSA-2024:10978" type="self" title="ALSA-2024:10978"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="python3.12-devel" version="3.12.5" release="2.el9_5.2" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.2.src.rpm">
          <filename>python3.12-devel-3.12.5-2.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">28545d7171c652e061a0a689df649601302154fa19bdd9d2eb06fd6072877af0</sum>
        </package>
        <package name="python3.12-libs" version="3.12.5" release="2.el9_5.2" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.2.src.rpm">
          <filename>python3.12-libs-3.12.5-2.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">98c928b6677ce52d0b5b0ac2fa3fca21d49f4c20ccf8867a84092a1e1ab87d56</sum>
        </package>
        <package name="python3.12" version="3.12.5" release="2.el9_5.2" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.2.src.rpm">
          <filename>python3.12-3.12.5-2.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">e3dd1ada54d6607bc7783d91edac8b04d1f1fc5f52feadc616cbb68af85ad333</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.5" release="2.el9_5.2" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.2.src.rpm">
          <filename>python3.12-tkinter-3.12.5-2.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">e72e553551a854794f89f538d7b0747085344f47fd2b34626681a5aa6e32dc75</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10983</id>
    <title>Moderate: python3.9:3.9.21 security update</title>
    <issued date="2024-12-12 00:00:00"/>
    <updated date="2024-12-16 14:38:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9:3.9.21 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
  * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10983" id="RHSA-2024:10983" type="rhsa" title="RHSA-2024:10983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11168" id="CVE-2024-11168" type="cve" title="CVE-2024-11168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325776" id="2325776" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10983.html" id="ALSA-2024:10983" type="self" title="ALSA-2024:10983"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="python3-tkinter" version="3.9.21" release="1.el9_5" epoch="0" arch="s390x" src="python3.9-3.9.21-1.el9_5.src.rpm">
          <filename>python3-tkinter-3.9.21-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">044486923e31ae735a9e21d31794e18dafe72a7b7a9a7fe6a11f9a0b8d057687</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.21" release="1.el9_5" epoch="0" arch="noarch" src="python3.9-3.9.21-1.el9_5.src.rpm">
          <filename>python-unversioned-command-3.9.21-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">6e77041eec0c001b2a4131bf54ac4e15b0b06f4e3d103493ac45edfb1e20d42f</sum>
        </package>
        <package name="python3-devel" version="3.9.21" release="1.el9_5" epoch="0" arch="s390x" src="python3.9-3.9.21-1.el9_5.src.rpm">
          <filename>python3-devel-3.9.21-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">bd1ba9225ed0233171edab91d468d07f33bb95b85cda7f022d0d8523b6e6b43b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11111</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-12-16 00:00:00"/>
    <updated date="2024-12-23 08:16:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11111" id="RHSA-2024:11111" type="rhsa" title="RHSA-2024:11111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11111.html" id="ALSA-2024:11111" type="self" title="ALSA-2024:11111"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="python3.11-tkinter" version="3.11.9" release="7.el9_5.2" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.2.src.rpm">
          <filename>python3.11-tkinter-3.11.9-7.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">1492a3383eada962458c402a04a794c58ca0ea5d817df3fd36055551279c9e44</sum>
        </package>
        <package name="python3.11-libs" version="3.11.9" release="7.el9_5.2" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.2.src.rpm">
          <filename>python3.11-libs-3.11.9-7.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">4b1f39c94b9790f4fdc59bb0be9995080855019ad55a27b0a2cb0a6be75b2961</sum>
        </package>
        <package name="python3.11-devel" version="3.11.9" release="7.el9_5.2" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.2.src.rpm">
          <filename>python3.11-devel-3.11.9-7.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">b88e6577d76163e8d6f28fc82d19fdd654af50a3f088f1425f80aec3c229363a</sum>
        </package>
        <package name="python3.11" version="3.11.9" release="7.el9_5.2" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.2.src.rpm">
          <filename>python3.11-3.11.9-7.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">bbc27aadaf2d411e2869d4464ce834a1429fd56b9c56cf1ecdc24699e77de9d2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11122</id>
    <title>Important: gstreamer1-plugins-good security update</title>
    <issued date="2024-12-16 00:00:00"/>
    <updated date="2024-12-23 08:18:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-good security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.  

Security Fix(es):  

  * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)
  * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)
  * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)
  * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)
  * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes (CVE-2024-47606)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11122" id="RHSA-2024:11122" type="rhsa" title="RHSA-2024:11122"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47537" id="CVE-2024-47537" type="cve" title="CVE-2024-47537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47539" id="CVE-2024-47539" type="cve" title="CVE-2024-47539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47540" id="CVE-2024-47540" type="cve" title="CVE-2024-47540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47606" id="CVE-2024-47606" type="cve" title="CVE-2024-47606"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47613" id="CVE-2024-47613" type="cve" title="CVE-2024-47613"/>
      <reference href="https://bugzilla.redhat.com/2331719" id="2331719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331722" id="2331722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331726" id="2331726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331753" id="2331753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331760" id="2331760" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11122.html" id="ALSA-2024:11122" type="self" title="ALSA-2024:11122"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="gstreamer1-plugins-good" version="1.22.1" release="3.el9_5" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.22.1-3.el9_5.src.rpm">
          <filename>gstreamer1-plugins-good-1.22.1-3.el9_5.s390x.rpm</filename>
          <sum type="sha256">73e213381d67e81680e5207d4ec36d03ad8b4df74045f700830c500944f48e58</sum>
        </package>
        <package name="gstreamer1-plugins-good-gtk" version="1.22.1" release="3.el9_5" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.22.1-3.el9_5.src.rpm">
          <filename>gstreamer1-plugins-good-gtk-1.22.1-3.el9_5.s390x.rpm</filename>
          <sum type="sha256">d8205a330d8fe2fae8c0837f3445842d420ea483c78bc9391c77165b7b932fec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11123</id>
    <title>Important: gstreamer1-plugins-base security update</title>
    <issued date="2024-12-16 00:00:00"/>
    <updated date="2024-12-23 08:19:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-base security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.  

Security Fix(es):  

  * gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet (CVE-2024-47538)
  * gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer (CVE-2024-47615)
  * gstreamer1-plugins-base: stack-buffer overflow in gst_opus_dec_parse_header (CVE-2024-47607)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11123" id="RHSA-2024:11123" type="rhsa" title="RHSA-2024:11123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47538" id="CVE-2024-47538" type="cve" title="CVE-2024-47538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47607" id="CVE-2024-47607" type="cve" title="CVE-2024-47607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47615" id="CVE-2024-47615" type="cve" title="CVE-2024-47615"/>
      <reference href="https://bugzilla.redhat.com/2331727" id="2331727" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331740" id="2331740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331754" id="2331754" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11123.html" id="ALSA-2024:11123" type="self" title="ALSA-2024:11123"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="gstreamer1-plugins-base-tools" version="1.22.1" release="3.el9_5" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.22.1-3.el9_5.src.rpm">
          <filename>gstreamer1-plugins-base-tools-1.22.1-3.el9_5.s390x.rpm</filename>
          <sum type="sha256">696fbfd606df3c734b6b2f3eb72a2678b1f9622bf7bdfac1502b647dbe2941eb</sum>
        </package>
        <package name="gstreamer1-plugins-base" version="1.22.1" release="3.el9_5" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.22.1-3.el9_5.src.rpm">
          <filename>gstreamer1-plugins-base-1.22.1-3.el9_5.s390x.rpm</filename>
          <sum type="sha256">b48900059adbc2548ce9831db890dfc77dc7cbf15218d5c43e119f026fcd4e76</sum>
        </package>
        <package name="gstreamer1-plugins-base-devel" version="1.22.1" release="3.el9_5" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.22.1-3.el9_5.src.rpm">
          <filename>gstreamer1-plugins-base-devel-1.22.1-3.el9_5.s390x.rpm</filename>
          <sum type="sha256">d87e0482cb998438302cf96c418e7ac1f6e2f6dd1392ee4982436331c124d947</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11219</id>
    <title>Moderate: edk2:20240524 security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-23 08:27:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2:20240524 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.   

Security Fix(es):  

  * edk2: Integer overflows in PeCoffLoaderRelocateImage (CVE-2024-38796)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11219" id="RHSA-2024:11219" type="rhsa" title="RHSA-2024:11219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38796" id="CVE-2024-38796" type="cve" title="CVE-2024-38796"/>
      <reference href="https://bugzilla.redhat.com/2315390" id="2315390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11219.html" id="ALSA-2024:11219" type="self" title="ALSA-2024:11219"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="edk2-ovmf" version="20240524" release="6.el9_5.3" epoch="0" arch="noarch" src="edk2-20240524-6.el9_5.3.src.rpm">
          <filename>edk2-ovmf-20240524-6.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">78c94982627bd8d6000410fa5f470a76850f56d9d10d3b989fdf8cc767e6221e</sum>
        </package>
        <package name="edk2-aarch64" version="20240524" release="6.el9_5.3" epoch="0" arch="noarch" src="edk2-20240524-6.el9_5.3.src.rpm">
          <filename>edk2-aarch64-20240524-6.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">b4113deecdfdfe37d6e0009c5471b1d36782fb5ed693b1ca0c64dfd4f940de66</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11238</id>
    <title>Moderate: python3.11-urllib3 security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-23 08:22:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-urllib3 security update</summary>
    <description>The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities.  

Security Fix(es):  

  * urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11238" id="RHSA-2024:11238" type="rhsa" title="RHSA-2024:11238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45803" id="CVE-2023-45803" type="cve" title="CVE-2023-45803"/>
      <reference href="https://bugzilla.redhat.com/2246840" id="2246840" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11238.html" id="ALSA-2024:11238" type="self" title="ALSA-2024:11238"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="python3.11-urllib3" version="1.26.12" release="2.el9_5.2" epoch="0" arch="noarch" src="python3.11-urllib3-1.26.12-2.el9_5.2.src.rpm">
          <filename>python3.11-urllib3-1.26.12-2.el9_5.2.noarch.rpm</filename>
          <sum type="sha256">d90ef51c63a9593846f6fa88cbbbb78e9856da80ae47f8bddff48b3a1fc94d8c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11242</id>
    <title>Moderate: mpg123:1.32.9 security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-23 08:21:49"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mpg123:1.32.9 security update</summary>
    <description>The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 (most commonly MPEG 1.0 layer 3 also known as MP3), as well as re-usable decoding and output libraries.  

Security Fix(es):  

  * mpg123: Buffer overflow when writing decoded PCM samples (CVE-2024-10573)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11242" id="RHSA-2024:11242" type="rhsa" title="RHSA-2024:11242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10573" id="CVE-2024-10573" type="cve" title="CVE-2024-10573"/>
      <reference href="https://bugzilla.redhat.com/2322980" id="2322980" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11242.html" id="ALSA-2024:11242" type="self" title="ALSA-2024:11242"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="mpg123-libs" version="1.32.9" release="1.el9_5" epoch="0" arch="s390x" src="mpg123-1.32.9-1.el9_5.src.rpm">
          <filename>mpg123-libs-1.32.9-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">709b566334b05def0afcf5a86bdc515d2440a6d41838383d92c70246cd4a4ec2</sum>
        </package>
        <package name="mpg123" version="1.32.9" release="1.el9_5" epoch="0" arch="s390x" src="mpg123-1.32.9-1.el9_5.src.rpm">
          <filename>mpg123-1.32.9-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">b4515f909da304828e66ce669c0ba0995d1c03050d2103182e5f646a1e48dad7</sum>
        </package>
        <package name="mpg123-plugins-pulseaudio" version="1.32.9" release="1.el9_5" epoch="0" arch="s390x" src="mpg123-1.32.9-1.el9_5.src.rpm">
          <filename>mpg123-plugins-pulseaudio-1.32.9-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">cf30e2e7e671d47f3981c6e5208e49579061ebdf80f6bf671875f049b7f0274b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11250</id>
    <title>Moderate: pam security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-23 10:50:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>pam security update</summary>
    <description>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  

Security Fix(es):  

  * pam: libpam: Libpam vulnerable to read hashed password (CVE-2024-10041)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11250" id="RHSA-2024:11250" type="rhsa" title="RHSA-2024:11250"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10041" id="CVE-2024-10041" type="cve" title="CVE-2024-10041"/>
      <reference href="https://bugzilla.redhat.com/2319212" id="2319212" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11250.html" id="ALSA-2024:11250" type="self" title="ALSA-2024:11250"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="pam-devel" version="1.5.1" release="21.el9_5" epoch="0" arch="s390x" src="pam-1.5.1-21.el9_5.src.rpm">
          <filename>pam-devel-1.5.1-21.el9_5.s390x.rpm</filename>
          <sum type="sha256">3381d41ae9a7894d09e15d3395a00931a9b15ecda3086eca21a96aa907d50ea1</sum>
        </package>
        <package name="pam-docs" version="1.5.1" release="21.el9_5" epoch="0" arch="s390x" src="pam-1.5.1-21.el9_5.src.rpm">
          <filename>pam-docs-1.5.1-21.el9_5.s390x.rpm</filename>
          <sum type="sha256">8982e7a9335c60e602851d5d9f217a41e7436d227e2e86030f327f77ab18876c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1129</id>
    <title>Moderate: curl security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-06 19:57:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: information disclosure by exploiting a mixed case flaw (CVE-2023-46218)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1129" id="RHSA-2024:1129" type="rhsa" title="RHSA-2024:1129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46218" id="CVE-2023-46218" type="cve" title="CVE-2023-46218"/>
      <reference href="https://bugzilla.redhat.com/2252030" id="2252030" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1129.html" id="ALSA-2024:1129" type="self" title="ALSA-2024:1129"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="libcurl-devel" version="7.76.1" release="26.el9_3.3" epoch="0" arch="s390x" src="curl-7.76.1-26.el9_3.3.src.rpm">
          <filename>libcurl-devel-7.76.1-26.el9_3.3.s390x.rpm</filename>
          <sum type="sha256">8579ecc8674a64c4c1138308b82d8e481e25f0762c88422e9ecd248c1620717d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1130</id>
    <title>Moderate: openssh security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-06 15:16:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)
* openssh: potential command injection via shell metacharacters (CVE-2023-51385)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1130" id="RHSA-2024:1130" type="rhsa" title="RHSA-2024:1130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48795" id="CVE-2023-48795" type="cve" title="CVE-2023-48795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51385" id="CVE-2023-51385" type="cve" title="CVE-2023-51385"/>
      <reference href="https://bugzilla.redhat.com/2254210" id="2254210" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255271" id="2255271" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1130.html" id="ALSA-2024:1130" type="self" title="ALSA-2024:1130"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="openssh-askpass" version="8.7p1" release="34.el9_3.3" epoch="0" arch="s390x" src="openssh-8.7p1-34.el9_3.3.src.rpm">
          <filename>openssh-askpass-8.7p1-34.el9_3.3.s390x.rpm</filename>
          <sum type="sha256">165f7b5fa61b942d2f8978dd713262c9610e630b5d020d68ad447edda35c483a</sum>
        </package>
        <package name="pam_ssh_agent_auth" version="0.10.4" release="5.34.el9_3.3" epoch="0" arch="s390x" src="openssh-8.7p1-34.el9_3.3.src.rpm">
          <filename>pam_ssh_agent_auth-0.10.4-5.34.el9_3.3.s390x.rpm</filename>
          <sum type="sha256">2e4b1441df878acba9ab856c0e6c9191c196d88a149bcac7a3156b7fa1fc5d7f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1131</id>
    <title>Moderate: golang security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-06 14:56:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.

Security Fix(es):

* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)
* golang: cmd/go: Protocol Fallback when fetching modules (CVE-2023-45285)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1131" id="RHSA-2024:1131" type="rhsa" title="RHSA-2024:1131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39326" id="CVE-2023-39326" type="cve" title="CVE-2023-39326"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45285" id="CVE-2023-45285" type="cve" title="CVE-2023-45285"/>
      <reference href="https://bugzilla.redhat.com/2253323" id="2253323" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253330" id="2253330" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1131.html" id="ALSA-2024:1131" type="self" title="ALSA-2024:1131"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="golang-misc" version="1.20.12" release="1.el9_3" epoch="0" arch="noarch" src="golang-1.20.12-1.el9_3.src.rpm">
          <filename>golang-misc-1.20.12-1.el9_3.noarch.rpm</filename>
          <sum type="sha256">18b5741c98702dceb2fbbe32d91ef09c212b01349c7294b51dd43633854553ab</sum>
        </package>
        <package name="golang-docs" version="1.20.12" release="1.el9_3" epoch="0" arch="noarch" src="golang-1.20.12-1.el9_3.src.rpm">
          <filename>golang-docs-1.20.12-1.el9_3.noarch.rpm</filename>
          <sum type="sha256">1d75032b3ba6c05155bb06eee5c1c243ef875c089d2463e917e98d6c73183614</sum>
        </package>
        <package name="golang-bin" version="1.20.12" release="1.el9_3" epoch="0" arch="s390x" src="golang-1.20.12-1.el9_3.src.rpm">
          <filename>golang-bin-1.20.12-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">87e595f0cbb17a5d9ea14e1a8c45b4a059fe4f50d9065e4525168ef99db9bff9</sum>
        </package>
        <package name="go-toolset" version="1.20.12" release="1.el9_3" epoch="0" arch="s390x" src="golang-1.20.12-1.el9_3.src.rpm">
          <filename>go-toolset-1.20.12-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">88400e8672bdcc18e1b368974114ef535a9f53d6e99c724d90ce4d242a9d02bf</sum>
        </package>
        <package name="golang-src" version="1.20.12" release="1.el9_3" epoch="0" arch="noarch" src="golang-1.20.12-1.el9_3.src.rpm">
          <filename>golang-src-1.20.12-1.el9_3.noarch.rpm</filename>
          <sum type="sha256">a2e7b607d02fe97390525c4e2a232778d3440d36d22a0d1fca8390e5dd5bbf57</sum>
        </package>
        <package name="golang-tests" version="1.20.12" release="1.el9_3" epoch="0" arch="noarch" src="golang-1.20.12-1.el9_3.src.rpm">
          <filename>golang-tests-1.20.12-1.el9_3.noarch.rpm</filename>
          <sum type="sha256">adc11fe27a3a4f8626366ad43720f29f0349ab0c3b187743c0ce8a4d6b70dd7e</sum>
        </package>
        <package name="golang" version="1.20.12" release="1.el9_3" epoch="0" arch="s390x" src="golang-1.20.12-1.el9_3.src.rpm">
          <filename>golang-1.20.12-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">f084089e6ba850ffc2c1994ba5c535d31abaa6db369e0376fa659cb6a9bdbc34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1134</id>
    <title>Important: tomcat security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-07 08:46:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

* tomcat: HTTP request smuggling via malformed trailer headers (CVE-2023-46589)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1134" id="RHSA-2024:1134" type="rhsa" title="RHSA-2024:1134"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46589" id="CVE-2023-46589" type="cve" title="CVE-2023-46589"/>
      <reference href="https://bugzilla.redhat.com/2252050" id="2252050" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1134.html" id="ALSA-2024:1134" type="self" title="ALSA-2024:1134"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="tomcat-servlet-4.0-api" version="9.0.62" release="37.el9_3.2" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.2.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.62-37.el9_3.2.noarch.rpm</filename>
          <sum type="sha256">0164c92d3cf4769a215e18fec3fa4b459c82c6e6e52871e59c4a579b28eea94e</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.62" release="37.el9_3.2" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.2.src.rpm">
          <filename>tomcat-admin-webapps-9.0.62-37.el9_3.2.noarch.rpm</filename>
          <sum type="sha256">069c57fa81e2858166dca96c08e1c93f1259f11a411ad7cbfa82440d6375830a</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.62" release="37.el9_3.2" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.2.src.rpm">
          <filename>tomcat-docs-webapp-9.0.62-37.el9_3.2.noarch.rpm</filename>
          <sum type="sha256">76e70ae7ed64ac414de842c8dc61854879a92aa326155aea740a3edf0c4357a3</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.62" release="37.el9_3.2" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.2.src.rpm">
          <filename>tomcat-webapps-9.0.62-37.el9_3.2.noarch.rpm</filename>
          <sum type="sha256">7789ab9419a6025cb459178543673fb5c992ce228b8b48240518be740909b1d5</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.62" release="37.el9_3.2" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.2.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.62-37.el9_3.2.noarch.rpm</filename>
          <sum type="sha256">a744337038859ecd3f416462a7170a174807534c8b7f4d4c86467990ae256edf</sum>
        </package>
        <package name="tomcat-lib" version="9.0.62" release="37.el9_3.2" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.2.src.rpm">
          <filename>tomcat-lib-9.0.62-37.el9_3.2.noarch.rpm</filename>
          <sum type="sha256">b21f1a2fd0eaa58172ab691b12f90e7d6c42fa0988ccb63007e4e0a2ba6c8d6c</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.62" release="37.el9_3.2" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.2.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.62-37.el9_3.2.noarch.rpm</filename>
          <sum type="sha256">c77cf32cc2001aa81bf17b88076d291e28e4af6ac43dbf41e9fc28465906dba7</sum>
        </package>
        <package name="tomcat" version="9.0.62" release="37.el9_3.2" epoch="1" arch="noarch" src="tomcat-9.0.62-37.el9_3.2.src.rpm">
          <filename>tomcat-9.0.62-37.el9_3.2.noarch.rpm</filename>
          <sum type="sha256">e7f160a9ff4aca2f762025d1c74fbe968415c9b8bd4f0ccdc206e148c89b895d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1139</id>
    <title>Low: keylime security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-06 14:41:49"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>keylime security update</summary>
    <description>Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.

Security Fix(es):

* keylime: Attestation failure when the quote's signature does not validate (CVE-2023-3674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1139" id="RHSA-2024:1139" type="rhsa" title="RHSA-2024:1139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3674" id="CVE-2023-3674" type="cve" title="CVE-2023-3674"/>
      <reference href="https://bugzilla.redhat.com/2222903" id="2222903" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1139.html" id="ALSA-2024:1139" type="self" title="ALSA-2024:1139"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="python3-keylime" version="7.3.0" release="13.el9_3" epoch="0" arch="s390x" src="keylime-7.3.0-13.el9_3.src.rpm">
          <filename>python3-keylime-7.3.0-13.el9_3.s390x.rpm</filename>
          <sum type="sha256">0fd943b473b99c9a02e8b52f43120e8199eed0d67b8d2fa17893d019714d1f75</sum>
        </package>
        <package name="keylime-selinux" version="7.3.0" release="13.el9_3" epoch="0" arch="noarch" src="keylime-7.3.0-13.el9_3.src.rpm">
          <filename>keylime-selinux-7.3.0-13.el9_3.noarch.rpm</filename>
          <sum type="sha256">6fa1d17da5ef5e543bc7f876d5a207d4b9fc577d0190f6f5db1a8d9b917a7342</sum>
        </package>
        <package name="keylime-base" version="7.3.0" release="13.el9_3" epoch="0" arch="s390x" src="keylime-7.3.0-13.el9_3.src.rpm">
          <filename>keylime-base-7.3.0-13.el9_3.s390x.rpm</filename>
          <sum type="sha256">79fdf524f98bc88d8ef118e8b7c2378d01856adcf436f796f8dae92178098fab</sum>
        </package>
        <package name="keylime-registrar" version="7.3.0" release="13.el9_3" epoch="0" arch="s390x" src="keylime-7.3.0-13.el9_3.src.rpm">
          <filename>keylime-registrar-7.3.0-13.el9_3.s390x.rpm</filename>
          <sum type="sha256">7af99c953f32ea35eae31eef1fc5c27b46a120a319da9deedcb621716b170677</sum>
        </package>
        <package name="keylime-verifier" version="7.3.0" release="13.el9_3" epoch="0" arch="s390x" src="keylime-7.3.0-13.el9_3.src.rpm">
          <filename>keylime-verifier-7.3.0-13.el9_3.s390x.rpm</filename>
          <sum type="sha256">a256e0d1efd7a7c8c3795db6975aeb4e95529c5a77b2d6fb505811260f7a82dd</sum>
        </package>
        <package name="keylime-tenant" version="7.3.0" release="13.el9_3" epoch="0" arch="s390x" src="keylime-7.3.0-13.el9_3.src.rpm">
          <filename>keylime-tenant-7.3.0-13.el9_3.s390x.rpm</filename>
          <sum type="sha256">aa77405fa3b68fc345a4682fb1a3979372f84ec2ab1b0a33288abeac657b2c0c</sum>
        </package>
        <package name="keylime" version="7.3.0" release="13.el9_3" epoch="0" arch="s390x" src="keylime-7.3.0-13.el9_3.src.rpm">
          <filename>keylime-7.3.0-13.el9_3.s390x.rpm</filename>
          <sum type="sha256">d1cd7e9d78e0cad9cd4efff29fa4a89d87fce9a8864ed3d91933a5ff6dc111b2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1141</id>
    <title>Moderate: mysql security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-07 19:03:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Apr 2023) (CVE-2023-21911)
* mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) (CVE-2023-21919, CVE-2023-21929, CVE-2023-21933)
* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21920, CVE-2023-21935, CVE-2023-21945, CVE-2023-21946, CVE-2023-21976, CVE-2023-21977, CVE-2023-21982)
* mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) (CVE-2023-21940, CVE-2023-21947, CVE-2023-21962)
* mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21953)
* mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21955)
* mysql: Server: JSON unspecified vulnerability (CPU Apr 2023) (CVE-2023-21966)
* mysql: Server: DML unspecified vulnerability (CPU Apr 2023) (CVE-2023-21972)
* mysql: Client programs unspecified vulnerability (CPU Apr 2023) (CVE-2023-21980)
* mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) (CVE-2023-22005, CVE-2023-22007, CVE-2023-22057)
* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22008)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) (CVE-2023-22032, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22092, CVE-2023-22103, CVE-2023-22110, CVE-2023-22112)
* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22033)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023) (CVE-2023-22046)
* mysql: Client programs unspecified vulnerability (CPU Jul 2023) (CVE-2023-22053, CVE-2023-22054, CVE-2023-22056)
* mysql: Server: DDL unspecified vulnerability (CPU Jul 2023) (CVE-2023-22058)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22066, CVE-2023-22068, CVE-2023-22084, CVE-2023-22097, CVE-2023-22104, CVE-2023-22114)
* mysql: Server: UDF unspecified vulnerability (CPU Oct 2023) (CVE-2023-22111)
* mysql: Server: DML unspecified vulnerability (CPU Oct 2023) (CVE-2023-22115)
* mysql: Server: RAPID unspecified vulnerability (CPU Jan 2024) (CVE-2024-20960)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2024) (CVE-2024-20961, CVE-2024-20962, CVE-2024-20965, CVE-2024-20966, CVE-2024-2097, CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20982)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2024) (CVE-2024-20963)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2024) (CVE-2024-20964)
* mysql: Server: Replication unspecified vulnerability (CPU Jan 2024) (CVE-2024-20967)
* mysql: Server: Options unspecified vulnerability (CPU Jan 2024) (CVE-2024-20968)
* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20969)
* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20981)
* mysql: Server: DML unspecified vulnerability (CPU Jan 2024) (CVE-2024-20983)
* mysql: Server : Security : Firewall unspecified vulnerability (CPU Jan 2024) (CVE-2024-20984)
* mysql: Server: UDF unspecified vulnerability (CPU Jan 2024) (CVE-2024-20985)
* zstd: mysql: buffer overrun in util.c (CVE-2022-4899)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2023) (CVE-2023-22038)
* mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2023) (CVE-2023-22048)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2023) (CVE-2023-22113)

Bug Fix(es):

* Fix for MySQL bug #33630199 in 8.0.32 introduces regression when --set-gtid-purged=OFF (AlmaLinux-22454)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1141" id="RHSA-2024:1141" type="rhsa" title="RHSA-2024:1141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4899" id="CVE-2022-4899" type="cve" title="CVE-2022-4899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21911" id="CVE-2023-21911" type="cve" title="CVE-2023-21911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21919" id="CVE-2023-21919" type="cve" title="CVE-2023-21919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21920" id="CVE-2023-21920" type="cve" title="CVE-2023-21920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21929" id="CVE-2023-21929" type="cve" title="CVE-2023-21929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21933" id="CVE-2023-21933" type="cve" title="CVE-2023-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21935" id="CVE-2023-21935" type="cve" title="CVE-2023-21935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21940" id="CVE-2023-21940" type="cve" title="CVE-2023-21940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21945" id="CVE-2023-21945" type="cve" title="CVE-2023-21945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21946" id="CVE-2023-21946" type="cve" title="CVE-2023-21946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21947" id="CVE-2023-21947" type="cve" title="CVE-2023-21947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21953" id="CVE-2023-21953" type="cve" title="CVE-2023-21953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21955" id="CVE-2023-21955" type="cve" title="CVE-2023-21955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21962" id="CVE-2023-21962" type="cve" title="CVE-2023-21962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21966" id="CVE-2023-21966" type="cve" title="CVE-2023-21966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21972" id="CVE-2023-21972" type="cve" title="CVE-2023-21972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21976" id="CVE-2023-21976" type="cve" title="CVE-2023-21976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21977" id="CVE-2023-21977" type="cve" title="CVE-2023-21977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21980" id="CVE-2023-21980" type="cve" title="CVE-2023-21980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21982" id="CVE-2023-21982" type="cve" title="CVE-2023-21982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22005" id="CVE-2023-22005" type="cve" title="CVE-2023-22005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22007" id="CVE-2023-22007" type="cve" title="CVE-2023-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22008" id="CVE-2023-22008" type="cve" title="CVE-2023-22008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22032" id="CVE-2023-22032" type="cve" title="CVE-2023-22032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22033" id="CVE-2023-22033" type="cve" title="CVE-2023-22033"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22038" id="CVE-2023-22038" type="cve" title="CVE-2023-22038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22046" id="CVE-2023-22046" type="cve" title="CVE-2023-22046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22048" id="CVE-2023-22048" type="cve" title="CVE-2023-22048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22053" id="CVE-2023-22053" type="cve" title="CVE-2023-22053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22054" id="CVE-2023-22054" type="cve" title="CVE-2023-22054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22056" id="CVE-2023-22056" type="cve" title="CVE-2023-22056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22057" id="CVE-2023-22057" type="cve" title="CVE-2023-22057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22058" id="CVE-2023-22058" type="cve" title="CVE-2023-22058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22059" id="CVE-2023-22059" type="cve" title="CVE-2023-22059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22064" id="CVE-2023-22064" type="cve" title="CVE-2023-22064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22065" id="CVE-2023-22065" type="cve" title="CVE-2023-22065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22066" id="CVE-2023-22066" type="cve" title="CVE-2023-22066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22068" id="CVE-2023-22068" type="cve" title="CVE-2023-22068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22070" id="CVE-2023-22070" type="cve" title="CVE-2023-22070"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22078" id="CVE-2023-22078" type="cve" title="CVE-2023-22078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22079" id="CVE-2023-22079" type="cve" title="CVE-2023-22079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22084" id="CVE-2023-22084" type="cve" title="CVE-2023-22084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22092" id="CVE-2023-22092" type="cve" title="CVE-2023-22092"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22097" id="CVE-2023-22097" type="cve" title="CVE-2023-22097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22103" id="CVE-2023-22103" type="cve" title="CVE-2023-22103"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22104" id="CVE-2023-22104" type="cve" title="CVE-2023-22104"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22110" id="CVE-2023-22110" type="cve" title="CVE-2023-22110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22111" id="CVE-2023-22111" type="cve" title="CVE-2023-22111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22112" id="CVE-2023-22112" type="cve" title="CVE-2023-22112"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22113" id="CVE-2023-22113" type="cve" title="CVE-2023-22113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22114" id="CVE-2023-22114" type="cve" title="CVE-2023-22114"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22115" id="CVE-2023-22115" type="cve" title="CVE-2023-22115"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20960" id="CVE-2024-20960" type="cve" title="CVE-2024-20960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20961" id="CVE-2024-20961" type="cve" title="CVE-2024-20961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20962" id="CVE-2024-20962" type="cve" title="CVE-2024-20962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20963" id="CVE-2024-20963" type="cve" title="CVE-2024-20963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20964" id="CVE-2024-20964" type="cve" title="CVE-2024-20964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20965" id="CVE-2024-20965" type="cve" title="CVE-2024-20965"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20966" id="CVE-2024-20966" type="cve" title="CVE-2024-20966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20967" id="CVE-2024-20967" type="cve" title="CVE-2024-20967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20968" id="CVE-2024-20968" type="cve" title="CVE-2024-20968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20969" id="CVE-2024-20969" type="cve" title="CVE-2024-20969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20970" id="CVE-2024-20970" type="cve" title="CVE-2024-20970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20971" id="CVE-2024-20971" type="cve" title="CVE-2024-20971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20972" id="CVE-2024-20972" type="cve" title="CVE-2024-20972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20973" id="CVE-2024-20973" type="cve" title="CVE-2024-20973"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20974" id="CVE-2024-20974" type="cve" title="CVE-2024-20974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20976" id="CVE-2024-20976" type="cve" title="CVE-2024-20976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20977" id="CVE-2024-20977" type="cve" title="CVE-2024-20977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20978" id="CVE-2024-20978" type="cve" title="CVE-2024-20978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20981" id="CVE-2024-20981" type="cve" title="CVE-2024-20981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20982" id="CVE-2024-20982" type="cve" title="CVE-2024-20982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20983" id="CVE-2024-20983" type="cve" title="CVE-2024-20983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20984" id="CVE-2024-20984" type="cve" title="CVE-2024-20984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20985" id="CVE-2024-20985" type="cve" title="CVE-2024-20985"/>
      <reference href="https://bugzilla.redhat.com/2179864" id="2179864" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188109" id="2188109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188113" id="2188113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188115" id="2188115" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188116" id="2188116" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188117" id="2188117" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188118" id="2188118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188119" id="2188119" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188120" id="2188120" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188121" id="2188121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188122" id="2188122" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188123" id="2188123" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188124" id="2188124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188125" id="2188125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188127" id="2188127" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188128" id="2188128" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188129" id="2188129" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188130" id="2188130" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188131" id="2188131" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188132" id="2188132" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224211" id="2224211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224212" id="2224212" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224213" id="2224213" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224214" id="2224214" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224215" id="2224215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224216" id="2224216" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224217" id="2224217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224218" id="2224218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224219" id="2224219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224220" id="2224220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224221" id="2224221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224222" id="2224222" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245014" id="2245014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245015" id="2245015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245016" id="2245016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245017" id="2245017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245018" id="2245018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245019" id="2245019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245020" id="2245020" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245021" id="2245021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245022" id="2245022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245023" id="2245023" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245024" id="2245024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245026" id="2245026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245027" id="2245027" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245028" id="2245028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245029" id="2245029" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245030" id="2245030" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245031" id="2245031" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245032" id="2245032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245033" id="2245033" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245034" id="2245034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258771" id="2258771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258772" id="2258772" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258773" id="2258773" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258774" id="2258774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258775" id="2258775" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258776" id="2258776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258777" id="2258777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258778" id="2258778" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258779" id="2258779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258780" id="2258780" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258781" id="2258781" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258782" id="2258782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258783" id="2258783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258784" id="2258784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258785" id="2258785" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258787" id="2258787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258788" id="2258788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258789" id="2258789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258790" id="2258790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258791" id="2258791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258792" id="2258792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258793" id="2258793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258794" id="2258794" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1141.html" id="ALSA-2024:1141" type="self" title="ALSA-2024:1141"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="mysql-server" version="8.0.36" release="1.el9_3" epoch="0" arch="s390x" src="mysql-8.0.36-1.el9_3.src.rpm">
          <filename>mysql-server-8.0.36-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">4ec390734148118ac4fbe60ad76a1c1c9310b43167e13b1ed428ecafdc5f31ef</sum>
        </package>
        <package name="mysql" version="8.0.36" release="1.el9_3" epoch="0" arch="s390x" src="mysql-8.0.36-1.el9_3.src.rpm">
          <filename>mysql-8.0.36-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">b91119edbee9832449e2a28e1770d7745ed98900f8af17dc48206465e09b2ef9</sum>
        </package>
        <package name="mysql-common" version="8.0.36" release="1.el9_3" epoch="0" arch="s390x" src="mysql-8.0.36-1.el9_3.src.rpm">
          <filename>mysql-common-8.0.36-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">e72f9ab3320b9cba34888104ea7c87ded1bb7b5d2df9bff214dbf1ff6b6481a2</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.36" release="1.el9_3" epoch="0" arch="s390x" src="mysql-8.0.36-1.el9_3.src.rpm">
          <filename>mysql-errmsg-8.0.36-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">ed0515c2c91cf651c662a0a2c5b3f5f6ddcdfc26c88e90edc466cac3aa5db813</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1142</id>
    <title>Moderate: haproxy security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-06 14:17:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>haproxy security update</summary>
    <description>The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.

Security Fix(es):

* haproxy: Proxy forwards malformed empty Content-Length headers (CVE-2023-40225)
* haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers (CVE-2023-45539)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1142" id="RHSA-2024:1142" type="rhsa" title="RHSA-2024:1142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40225" id="CVE-2023-40225" type="cve" title="CVE-2023-40225"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45539" id="CVE-2023-45539" type="cve" title="CVE-2023-45539"/>
      <reference href="https://bugzilla.redhat.com/2231370" id="2231370" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253037" id="2253037" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1142.html" id="ALSA-2024:1142" type="self" title="ALSA-2024:1142"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="haproxy" version="2.4.22" release="3.el9_3" epoch="0" arch="s390x" src="haproxy-2.4.22-3.el9_3.src.rpm">
          <filename>haproxy-2.4.22-3.el9_3.s390x.rpm</filename>
          <sum type="sha256">a1ada0a47fb6161557040e4eeb4aef03c4a68b439e86967fd81fc2b32674a2a1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1147</id>
    <title>Moderate: rear security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-06 14:11:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rear security update</summary>
    <description>Relax-and-Recover is a recovery and system migration utility. The utility produces a bootable image and restores from backup using this image. It allows to restore to different hardware and can therefore be also used as a migration utility.

Security Fix(es):

* rear: creates a world-readable initrd (CVE-2024-23301)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1147" id="RHSA-2024:1147" type="rhsa" title="RHSA-2024:1147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23301" id="CVE-2024-23301" type="cve" title="CVE-2024-23301"/>
      <reference href="https://bugzilla.redhat.com/2258396" id="2258396" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1147.html" id="ALSA-2024:1147" type="self" title="ALSA-2024:1147"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="rear" version="2.6" release="21.el9_3.alma" epoch="0" arch="s390x" src="rear-2.6-21.el9_3.alma.src.rpm">
          <filename>rear-2.6-21.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">acd907876565bb2bfbc3d6c5b80ba5b3adad6caf7440f5986c2c17c77b3e97ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11486</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-12-19 00:00:00"/>
    <updated date="2025-01-13 20:04:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399)
  * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564)
  * kernel: bpf: Fix a kernel verifier crash in stacksafe() (CVE-2024-45020)
  * kernel: nfsd: ensure that nfsd4_fattr_args.context is zeroed out (CVE-2024-46697)
  * kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CVE-2024-47675)
  * kernel: bpf: Fix a sdiv overflow issue (CVE-2024-49888)
  * kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099)
  * kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110)
  * kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125)
  * kernel: Bluetooth: ISO: Fix UAF on iso_sock_timeout (CVE-2024-50124)
  * kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (CVE-2024-50115)
  * kernel: xfrm: validate new SA&amp;#39;s prefixlen using SA family when sel.family is unset (CVE-2024-50142)
  * kernel: Bluetooth: bnep: fix wild-memory-access in proto_unregister (CVE-2024-50148)
  * kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192)
  * kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CVE-2024-50255)
  * kernel: sched/numa: Fix the potential null pointer dereference in task_numa_work() (CVE-2024-50223)
  * kernel: bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11486" id="RHSA-2024:11486" type="rhsa" title="RHSA-2024:11486"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27399" id="CVE-2024-27399" type="cve" title="CVE-2024-27399"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38564" id="CVE-2024-38564" type="cve" title="CVE-2024-38564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45020" id="CVE-2024-45020" type="cve" title="CVE-2024-45020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46697" id="CVE-2024-46697" type="cve" title="CVE-2024-46697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47675" id="CVE-2024-47675" type="cve" title="CVE-2024-47675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49888" id="CVE-2024-49888" type="cve" title="CVE-2024-49888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50099" id="CVE-2024-50099" type="cve" title="CVE-2024-50099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50110" id="CVE-2024-50110" type="cve" title="CVE-2024-50110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50115" id="CVE-2024-50115" type="cve" title="CVE-2024-50115"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50124" id="CVE-2024-50124" type="cve" title="CVE-2024-50124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50125" id="CVE-2024-50125" type="cve" title="CVE-2024-50125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50142" id="CVE-2024-50142" type="cve" title="CVE-2024-50142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50148" id="CVE-2024-50148" type="cve" title="CVE-2024-50148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50192" id="CVE-2024-50192" type="cve" title="CVE-2024-50192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50223" id="CVE-2024-50223" type="cve" title="CVE-2024-50223"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50255" id="CVE-2024-50255" type="cve" title="CVE-2024-50255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50262" id="CVE-2024-50262" type="cve" title="CVE-2024-50262"/>
      <reference href="https://bugzilla.redhat.com/2280462" id="2280462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293429" id="2293429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2311717" id="2311717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312085" id="2312085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320254" id="2320254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320517" id="2320517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323904" id="2323904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323930" id="2323930" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323937" id="2323937" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323944" id="2323944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323955" id="2323955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324315" id="2324315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324332" id="2324332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324612" id="2324612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324867" id="2324867" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324868" id="2324868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324892" id="2324892" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11486.html" id="ALSA-2024:11486" type="self" title="ALSA-2024:11486"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-503.19.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">032a2ae100bf2880e1247e63a893f53b2d9f4cb9d28fcd92b18ca232b71a1a1c</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-5.14.0-503.19.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">06cb12511438aacf2f714d0de578ab6ef07b67e3bca8fabadf4964bfc1e1ecbd</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-503.19.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">170c69827e4da81ce133b0a654a89fbee7b2aba7086ca27a5b1f1a3e6402b074</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-503.19.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">53f72b4ed1852eca28dcb88889cc86b3754e3226c25e8f4dd750579a644fb6af</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-devel-matched-5.14.0-503.19.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">59b977feb8fbf14281c5e76f67d10a1b4c2c064883e0235449425ecedd681768</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-devel-5.14.0-503.19.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">5c4e6aa49d55c76d4ebde83ed02fcd3dedbe97a8bb7149996c89c5b456f677b2</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-doc-5.14.0-503.19.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">5dec4edc8c35fbac0c780704373af0450eed349877746461fbc300ab50247abd</sum>
        </package>
        <package name="perf" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>perf-5.14.0-503.19.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">7b96a518f9b656b11b44cc891d436e8be0aa374ea5d2e457f528749229a2df51</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-headers-5.14.0-503.19.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">858eacaf46fcd74d02599b18f0c23e0fae38a9e5b1e235192fccfb2502cd16a0</sum>
        </package>
        <package name="rv" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>rv-5.14.0-503.19.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">c2e3c28b975b2c25e232a7c3000a9d33f09799fede6e16a75180b24374e28e5a</sum>
        </package>
        <package name="rtla" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>rtla-5.14.0-503.19.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">f0fad46f20a1574d58c31f6188f0cd0c3c03fb84753e4d6cf6b8407b6b123458</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1149</id>
    <title>Moderate: skopeo security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-06 14:02:51"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>skopeo security update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. 

Security Fix(es):

* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1149" id="RHSA-2024:1149" type="rhsa" title="RHSA-2024:1149"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39326" id="CVE-2023-39326" type="cve" title="CVE-2023-39326"/>
      <reference href="https://bugzilla.redhat.com/2253330" id="2253330" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1149.html" id="ALSA-2024:1149" type="self" title="ALSA-2024:1149"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="skopeo-tests" version="1.13.3" release="4.el9_3" epoch="2" arch="s390x" src="skopeo-1.13.3-4.el9_3.src.rpm">
          <filename>skopeo-tests-1.13.3-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">4e26b53e77bb493a98fe06e9defea9916ab33a0958de2838508843153e7d702c</sum>
        </package>
        <package name="skopeo" version="1.13.3" release="4.el9_3" epoch="2" arch="s390x" src="skopeo-1.13.3-4.el9_3.src.rpm">
          <filename>skopeo-1.13.3-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">61bca8ee309412f72b0749740c511929fff57a80d46ecdb3d4fdebd6869af19c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1150</id>
    <title>Moderate: buildah security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-06 13:54:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. 

Security Fix(es):

* ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1150" id="RHSA-2024:1150" type="rhsa" title="RHSA-2024:1150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48795" id="CVE-2023-48795" type="cve" title="CVE-2023-48795"/>
      <reference href="https://bugzilla.redhat.com/2254210" id="2254210" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1150.html" id="ALSA-2024:1150" type="self" title="ALSA-2024:1150"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="buildah-tests" version="1.31.4" release="1.el9_3" epoch="1" arch="s390x" src="buildah-1.31.4-1.el9_3.src.rpm">
          <filename>buildah-tests-1.31.4-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">daf1fd6c65e2993badc41e8479bf4651a1ecf9d4941e3b69f88fb64cc5949a3b</sum>
        </package>
        <package name="buildah" version="1.31.4" release="1.el9_3" epoch="1" arch="s390x" src="buildah-1.31.4-1.el9_3.src.rpm">
          <filename>buildah-1.31.4-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">fcdf0cc3333a471a26bce6ab82d0d05d98675d33ed544e43b16943adea52534a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1309</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 10:35:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.117 and .NET Runtime 7.0.17.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1309" id="RHSA-2024:1309" type="rhsa" title="RHSA-2024:1309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1309.html" id="ALSA-2024:1309" type="self" title="ALSA-2024:1309"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.17" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el9_3.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.17-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">297e8c4352aa8dd2357a859aaa9a649ded8330721c26cffa9262dfc9e221078c</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.17" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el9_3.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.17-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">38fdbda47f647b24686b4e4793fabb0a348e67d479c43ea66934f5050fa6b1ab</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.17" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el9_3.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.17-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">552e59cc6cf7b33ee20d0386edafa51aa9dc9eb24479455457bedc6da6a40032</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.117" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el9_3.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.117-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">6b61e9bee59ea3bd1622497b953ffb3ad043d2d669153170c36edf7a2e083076</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.17" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el9_3.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.17-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">a6b2fc1500cba20b2cf5eb3069059ebcc4f316f1002267a7c1786999e235609e</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.117" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el9_3.src.rpm">
          <filename>dotnet-templates-7.0-7.0.117-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">ac1547ef81b3739354f187c08703131fb4ac343a37ef27d91f81a429502add49</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.17" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el9_3.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.17-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">f509862be936172c3b8adf0d252f9dbe71de4e7c9e9c38fdc4c623b3c86e50f7</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.17" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el9_3.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.17-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">fa124ee16cd31b77dcf15e84962dea105e8d4255df2789d763f11ef13d1f75aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1310</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 12:45:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.103 and .NET Runtime 8.0.3.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1310" id="RHSA-2024:1310" type="rhsa" title="RHSA-2024:1310"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1310.html" id="ALSA-2024:1310" type="self" title="ALSA-2024:1310"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="dotnet-templates-8.0" version="8.0.103" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>dotnet-templates-8.0-8.0.103-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">0357c662eb2a807211df6bb0f79a4a0017c9fe0fc86ce358ba4946575dc63a5c</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.3" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.3-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">1334fe73f3cd10fd8b2b6a9314f6f21ae4f0da5c32ab0cb458b39fcf2bdc190a</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.3" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.3-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">1e40c766d2ba31ee5a738126950b68b188fcb3366f1fadcb9b9a12cd01e5d317</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.3" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.3-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">3945167c88ae2c31d8fa5279a835f14d2b5a84003318138a0410464ba6f285dd</sum>
        </package>
        <package name="dotnet-host" version="8.0.3" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>dotnet-host-8.0.3-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">41a7d2f61bd896accf8aa81b8f1cfd449869f075dde4a79f738ffb9f4201873b</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.3" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.3-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">540fa3c18be558e75996273ab86a6d0dc556a098be5bb12bd1e3dff405457776</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.103" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.103-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">5680369122d4405e1c540b000b07c0683d5c4fad4abd656f3b8cb25a531b29bf</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.3" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.3-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">819fd8d4b955d1ce8915850169dd5c6c1e4155710823ae2a5db5d2ca7cb56917</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.3" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.3-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">8756f17579b714461a51e15fda39c25cd4f0fe50c575f65f1988a3fcb6350be2</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.3" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.3-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">8b0bdd8ea409ec1e2be1b7c35a643175f2b3fce1204ac93e5e273e08762cafae</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.103" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.103-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">94baa5fcdf99e89c0a43e0c0acacc5427405dff133586ca7df2d8d27722d3580</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="8.0.103" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.103-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">a33c33d5111c0009b6f46a30deff7e417aa894374696d5ac9f40de4c7fc952ab</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.3" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.3-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">ec78aecc9dbd6a665fc4837fe65a3f0f3277aa566d882a6b6aa7fd7751f2bd5a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1334</id>
    <title>Important: dnsmasq security update</title>
    <issued date="2024-03-14 00:00:00"/>
    <updated date="2024-03-18 08:20:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dnsmasq security update</summary>
    <description>The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

* dnsmasq: bind9: KeyTrap - Extreme CPU consumption in DNSSEC
validator (CVE-2023-50387)
* dnsmasq: bind9: Preparing an NSEC3 closest encloser proof can
exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1334" id="RHSA-2024:1334" type="rhsa" title="RHSA-2024:1334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1334.html" id="ALSA-2024:1334" type="self" title="ALSA-2024:1334"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="dnsmasq" version="2.85" release="14.el9_3.1" epoch="0" arch="s390x" src="dnsmasq-2.85-14.el9_3.1.src.rpm">
          <filename>dnsmasq-2.85-14.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">6fc7b10fd4a860e1e8ac105a92d101395aeae1fa79b3cc0a34b0abc8a6de841d</sum>
        </package>
        <package name="dnsmasq-utils" version="2.85" release="14.el9_3.1" epoch="0" arch="s390x" src="dnsmasq-2.85-14.el9_3.1.src.rpm">
          <filename>dnsmasq-utils-2.85-14.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">f7aa7988a6fe29d9ac9a5c2ee91e955ce3bee69dfc2853faa1eb5673b951dbf6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1376</id>
    <title>Important: squid security update</title>
    <issued date="2024-03-19 00:00:00"/>
    <updated date="2024-04-12 18:57:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: denial of service in HTTP header parser (CVE-2024-25617)
* squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111)
* squid: denial of service in HTTP request parsing (CVE-2023-50269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1376" id="RHSA-2024:1376" type="rhsa" title="RHSA-2024:1376"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50269" id="CVE-2023-50269" type="cve" title="CVE-2023-50269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25111" id="CVE-2024-25111" type="cve" title="CVE-2024-25111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25617" id="CVE-2024-25617" type="cve" title="CVE-2024-25617"/>
      <reference href="https://bugzilla.redhat.com/2254663" id="2254663" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264309" id="2264309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268366" id="2268366" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1376.html" id="ALSA-2024:1376" type="self" title="ALSA-2024:1376"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="squid" version="5.5" release="6.el9_3.8" epoch="7" arch="s390x" src="squid-5.5-6.el9_3.8.src.rpm">
          <filename>squid-5.5-6.el9_3.8.s390x.rpm</filename>
          <sum type="sha256">153af32642245b125b74985f10dbc4db291e856777fc3414e1f5f25a9e8cbf62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1427</id>
    <title>Important: libreoffice security update</title>
    <issued date="2024-03-19 00:00:00"/>
    <updated date="2024-03-22 14:57:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* CVE-2023-6186 libreoffice: various flaws (JIRA:AlmaLinux-20657)
* CVE-2023-6185 libreoffice: various flaws (JIRA:AlmaLinux-20657)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1427" id="RHSA-2024:1427" type="rhsa" title="RHSA-2024:1427"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6185" id="CVE-2023-6185" type="cve" title="CVE-2023-6185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6186" id="CVE-2023-6186" type="cve" title="CVE-2023-6186"/>
      <reference href="https://bugzilla.redhat.com/2254003" id="2254003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254005" id="2254005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1427.html" id="ALSA-2024:1427" type="self" title="ALSA-2024:1427"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="autocorr-nl" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-nl-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">08d23ef7bab3840c5dcca2b34caaf986b82366d6ef71da6c38ef14a7523807b8</sum>
        </package>
        <package name="autocorr-vi" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-vi-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">0c44737c1eba25bf6c5c541d963671d8e3e710242a2aa142af5bd9a381b20b02</sum>
        </package>
        <package name="autocorr-sl" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-sl-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">0fb8e5eaceabc9cb3c719554714920cba021a64e59f1b8e2059aa0788fce834c</sum>
        </package>
        <package name="autocorr-bg" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-bg-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">118b0fbbc4e091515752d31e04be3204fcff1160572e937955fed522524757a3</sum>
        </package>
        <package name="libreoffice-langpack-en" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-langpack-en-7.1.8.1-12.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">1387c3044be81c4d1060be3e6c05762c2d7b4a7b7aa2e83c4ed77bef61fc0d0d</sum>
        </package>
        <package name="autocorr-af" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-af-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">1806d8037b474f59dbbd45c52cfda357d8194ff2d475dae07c9d0f7edb3e364f</sum>
        </package>
        <package name="autocorr-da" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-da-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">20fc20e9bd6252b9f9ab7c1e827b3820d2535fd557b2768c2da388628965072f</sum>
        </package>
        <package name="autocorr-sv" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-sv-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">230ab2ba0fb6e0e9e3c80a8f31cf33bf4d60ff9db7737074e3cd4c53eae6e2d5</sum>
        </package>
        <package name="libreoffice-impress" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-impress-7.1.8.1-12.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">233f425a6dddc4786a99b1d23765451cd4ebd71b3cf6cb721ba3a0931f797bbf</sum>
        </package>
        <package name="autocorr-tr" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-tr-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">2597b44f6b24c08d6843c3ec6595fefc483fe551be4e8d5fc2c038a666530b7b</sum>
        </package>
        <package name="libreoffice-writer" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-writer-7.1.8.1-12.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">2a7f14b7a1cdefe1d25c11816010827f2de96b22540b4cbc8ea6d633c88a56a3</sum>
        </package>
        <package name="autocorr-es" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-es-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">2b16fb16eccba308daaa04ea884fdf430a16917f232eb9b91de15d71505451a5</sum>
        </package>
        <package name="autocorr-lb" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-lb-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">2e866e039965cf8501dbffe2663318abf8226b595d7ad69ec65017044245b6df</sum>
        </package>
        <package name="libreoffice-ogltrans" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-ogltrans-7.1.8.1-12.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">3115ae33d846d5a258e7fecc0b39043f47874e6728cd03a1f5c8c3447f405b95</sum>
        </package>
        <package name="autocorr-dsb" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-dsb-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">33045ede9a455ec31e8f06c00fc80efeb3a7e1c24e6322196022f180f8ae361d</sum>
        </package>
        <package name="libreoffice-calc" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-calc-7.1.8.1-12.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">347311b46ad50acfe410a08641cbf57b79269c325f67b632654e9dda2d1cab3e</sum>
        </package>
        <package name="autocorr-lt" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-lt-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">3783fa3193b37f6aca6e6c8f7f874e0646687cca1bd71b7a05fe48c139bd9543</sum>
        </package>
        <package name="libreoffice-ure" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-ure-7.1.8.1-12.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">3b1fa68640e552bb1214cf294ad7bfad164028ca363eeaa4aa9c4abdd3ec48d6</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-opensymbol-fonts-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">3b494f26d28fe89f88dafed79282a07c28e27a7158e44b75e396afc43bd0534f</sum>
        </package>
        <package name="libreoffice-pyuno" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-pyuno-7.1.8.1-12.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">400f5fe358f50c477d7798216a3e6c432ebb9c6da946169566d9f1b6802a62de</sum>
        </package>
        <package name="autocorr-ko" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-ko-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">58dce1072c790448f6481d826d8025e01b9f10539a243a8873ecdfd52bd76783</sum>
        </package>
        <package name="autocorr-pl" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-pl-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">61c58dccdfc3dfd9d4328d34b7403d5676948f3f18a3928c999b8f6a8a75ef9a</sum>
        </package>
        <package name="autocorr-zh" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-zh-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">61fff1fcd7df1af00d5d6c7edda8f98bfa652cbbf65ddc62c8c7a5267325d43b</sum>
        </package>
        <package name="autocorr-mn" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-mn-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">630038b93013dd1f89b12cfd8c29486c9ba7f6a3a60d7a4028e1400e42c00d79</sum>
        </package>
        <package name="autocorr-fr" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-fr-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">6687ed962e115acd82e3533e054693ab304511b59f4bbc034872e1ebaeb7b814</sum>
        </package>
        <package name="autocorr-sr" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-sr-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">6f8e0fd08eaa9213b11ef462a8781be67af58db4871f78b4d643ced3d6e16b94</sum>
        </package>
        <package name="libreoffice-help-en" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-help-en-7.1.8.1-12.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">71bba7a763d881805df0587844e9bfdb053cc4902231173091c358da6c92271d</sum>
        </package>
        <package name="autocorr-hr" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-hr-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">72b312df6fea1f47c59d28235216f55ff131b09fe6ca3c00414583842047ebdc</sum>
        </package>
        <package name="autocorr-en" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-en-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">7a2ed313abab50b3b7db27887ee2c93f68f529d97cde680c1d3858e28a693dbd</sum>
        </package>
        <package name="autocorr-ru" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-ru-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">7a56df09c247090cb16dfb91271779ba169d0a067be0733f491f7ae21c2052c1</sum>
        </package>
        <package name="autocorr-de" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-de-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">7c9d3ad11a105ee6cbe8b77a5e3d14d355ab0b097b0179ce893f1ce7f9f812ad</sum>
        </package>
        <package name="libreoffice-data" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-data-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">8cd38b22398373c438d62f74af633b3146cbe883def50f26b0200d13d0f32a39</sum>
        </package>
        <package name="libreoffice-pdfimport" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-pdfimport-7.1.8.1-12.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">8d2267ed838e4b77a2018cf2ebab7b26e5b557330e2b9b1a34b632f2f1b6d38f</sum>
        </package>
        <package name="autocorr-it" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-it-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">9d82a3bb3b7dbfec694c1fb7e232d2deeefff1e58544321e0c57241c34726030</sum>
        </package>
        <package name="autocorr-fi" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-fi-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">b0cfd1f17e89b734a001e7c0b2d977ca26d256d98f081d9b0e871408a3db7dec</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-graphicfilter-7.1.8.1-12.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">b1dcb9314c9db21c169eb7d5c3600104e9e6e6417524c125d840ef28066d3af1</sum>
        </package>
        <package name="libreoffice-core" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-core-7.1.8.1-12.el9_3.alma.s390x.rpm</filename>
          <sum type="sha256">b4a83f13140cd06e1cd8995af4eecd24c9df39cf2fa23e255ee92bee30e9705a</sum>
        </package>
        <package name="autocorr-vro" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-vro-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">bb6ff11484cb161880eb05b1dee8081bc16bb9661e39a2bcf9a43fd4360e927d</sum>
        </package>
        <package name="autocorr-ja" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-ja-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">c353b1e8487b4d01d285eead85017963ad9758e42fb38492a65a9dd6b0ac3d6b</sum>
        </package>
        <package name="autocorr-el" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-el-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">c7954c54ed7edc1e44c53c7f85d09fef8a629e56f7419ebc67110b6fce820990</sum>
        </package>
        <package name="autocorr-ca" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-ca-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">c946634f731ab834eb3febcf1bd195577cb6cbff7ef20d6f043a908471dcaf1b</sum>
        </package>
        <package name="autocorr-cs" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-cs-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">c9d68cf543c5fb64840e116215373608b682bf34145bdfd8c6247e3713377852</sum>
        </package>
        <package name="autocorr-is" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-is-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">d14c4423133f6f4f55cd99c91b670e4c16c1be9442b475d85378d05927605eac</sum>
        </package>
        <package name="autocorr-ro" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-ro-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">da05acadfae89900a9497468b6669c485a2d9452efb7c1b0096747c185133c3e</sum>
        </package>
        <package name="autocorr-pt" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-pt-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">e8a3269e71204ad6807700e6a52d8b62943008a30ec3c2fa511cbda7e4c98e53</sum>
        </package>
        <package name="autocorr-hsb" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-hsb-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">ea3806eb6567f006ec8e34c3b23dfc2181a4006a42197ade2aebb2eb69130513</sum>
        </package>
        <package name="autocorr-ga" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-ga-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">eb845ad1759a1fe500228f326fa8b0d04f2d43c075fd9043d0644d39eb6e9ce5</sum>
        </package>
        <package name="autocorr-fa" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-fa-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">ebdea9f87e8dfef53e96c64b69972e8f7e66cb7c4ec79a55134d53a45261439e</sum>
        </package>
        <package name="autocorr-hu" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-hu-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">ed10b0e859a522a8db3f719e829121e0679923596d89a89ea01ba80453ed0fc9</sum>
        </package>
        <package name="libreoffice-ure-common" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>libreoffice-ure-common-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">f5062dd13e58e696c48a3468beff78f31caa418004d61893e764d26267e30977</sum>
        </package>
        <package name="autocorr-sk" version="7.1.8.1" release="12.el9_3.alma" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_3.alma.src.rpm">
          <filename>autocorr-sk-7.1.8.1-12.el9_3.alma.noarch.rpm</filename>
          <sum type="sha256">f6215956af060a69506cb82458e31b3762500bb29bb55ac10f5b8eae961890ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1436</id>
    <title>Important: postgresql-jdbc security update</title>
    <issued date="2024-03-20 00:00:00"/>
    <updated date="2024-03-21 12:39:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql-jdbc security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.

Security Fix(es):

* PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE (CVE-2024-1597)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1436" id="RHSA-2024:1436" type="rhsa" title="RHSA-2024:1436"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1597" id="CVE-2024-1597" type="cve" title="CVE-2024-1597"/>
      <reference href="https://bugzilla.redhat.com/2266523" id="2266523" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1436.html" id="ALSA-2024:1436" type="self" title="ALSA-2024:1436"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="postgresql-jdbc" version="42.2.28" release="1.el9_3" epoch="0" arch="noarch" src="postgresql-jdbc-42.2.28-1.el9_3.src.rpm">
          <filename>postgresql-jdbc-42.2.28-1.el9_3.noarch.rpm</filename>
          <sum type="sha256">ede3b40e7fe11086a3e183d3dd0be658c1fb5aea6a86fe91f30954f142a0b602</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1438</id>
    <title>Important: nodejs security update</title>
    <issued date="2024-03-20 00:00:00"/>
    <updated date="2024-03-21 07:08:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1438" id="RHSA-2024:1438" type="rhsa" title="RHSA-2024:1438"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22019" id="CVE-2024-22019" type="cve" title="CVE-2024-22019"/>
      <reference href="https://bugzilla.redhat.com/2264574" id="2264574" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1438.html" id="ALSA-2024:1438" type="self" title="ALSA-2024:1438"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="nodejs-full-i18n" version="16.20.2" release="4.el9_3" epoch="1" arch="s390x" src="nodejs-16.20.2-4.el9_3.src.rpm">
          <filename>nodejs-full-i18n-16.20.2-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">2819f053ff0e6e0124040faa0d9badcbbf8ebfc95d7d34b7c7e8703b8c3ff710</sum>
        </package>
        <package name="nodejs" version="16.20.2" release="4.el9_3" epoch="1" arch="s390x" src="nodejs-16.20.2-4.el9_3.src.rpm">
          <filename>nodejs-16.20.2-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">8f3f06246db592d3fc0c40a96bbe002c01f00eaf1c4bb19a25409dcbcdda87e5</sum>
        </package>
        <package name="nodejs-docs" version="16.20.2" release="4.el9_3" epoch="1" arch="noarch" src="nodejs-16.20.2-4.el9_3.src.rpm">
          <filename>nodejs-docs-16.20.2-4.el9_3.noarch.rpm</filename>
          <sum type="sha256">b7665cdefdd2b7370eacb21f03b8da394621bc6ab63e1a16bb5d2d7b0e6beaf1</sum>
        </package>
        <package name="nodejs-libs" version="16.20.2" release="4.el9_3" epoch="1" arch="s390x" src="nodejs-16.20.2-4.el9_3.src.rpm">
          <filename>nodejs-libs-16.20.2-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">dd500afff2fc66e705cce0bb7fcbd38c38d58dedc7416c2e2836a634e91d3a1b</sum>
        </package>
        <package name="npm" version="8.19.4" release="1.16.20.2.4.el9_3" epoch="1" arch="s390x" src="nodejs-16.20.2-4.el9_3.src.rpm">
          <filename>npm-8.19.4-1.16.20.2.4.el9_3.s390x.rpm</filename>
          <sum type="sha256">df121a81a34a326298484387181d862c70a11f4c53c28e6926747348d1237311</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1462</id>
    <title>Important: golang security update</title>
    <issued date="2024-03-21 00:00:00"/>
    <updated date="2024-03-22 14:43:49"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.

Security Fix(es):

 * golang: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1462" id="RHSA-2024:1462" type="rhsa" title="RHSA-2024:1462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1462.html" id="ALSA-2024:1462" type="self" title="ALSA-2024:1462"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="go-toolset" version="1.20.12" release="2.el9_3" epoch="0" arch="s390x" src="golang-1.20.12-2.el9_3.src.rpm">
          <filename>go-toolset-1.20.12-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">0eb578b20ea645a391f4e89fd46c93676de95edf59f3cdd692cef145012ffd02</sum>
        </package>
        <package name="golang-tests" version="1.20.12" release="2.el9_3" epoch="0" arch="noarch" src="golang-1.20.12-2.el9_3.src.rpm">
          <filename>golang-tests-1.20.12-2.el9_3.noarch.rpm</filename>
          <sum type="sha256">104540960dc9de9d90d719da97b145bb0a1c23cf777e6c2fa2b454f9034f0a89</sum>
        </package>
        <package name="golang-misc" version="1.20.12" release="2.el9_3" epoch="0" arch="noarch" src="golang-1.20.12-2.el9_3.src.rpm">
          <filename>golang-misc-1.20.12-2.el9_3.noarch.rpm</filename>
          <sum type="sha256">9d0669662e5356a48ac139afa0098e31f30e38bb227aa9d35ecd6ed898ad2799</sum>
        </package>
        <package name="golang-docs" version="1.20.12" release="2.el9_3" epoch="0" arch="noarch" src="golang-1.20.12-2.el9_3.src.rpm">
          <filename>golang-docs-1.20.12-2.el9_3.noarch.rpm</filename>
          <sum type="sha256">d4242bc4a26b65d6054ce70a3bdcc8a83a696d44dfb4b9d4bb2521478157f6d2</sum>
        </package>
        <package name="golang" version="1.20.12" release="2.el9_3" epoch="0" arch="s390x" src="golang-1.20.12-2.el9_3.src.rpm">
          <filename>golang-1.20.12-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">d4499274183fedc127c8666a5caec1abcbb3f8ec3fe95f96873736b617646bd1</sum>
        </package>
        <package name="golang-bin" version="1.20.12" release="2.el9_3" epoch="0" arch="s390x" src="golang-1.20.12-2.el9_3.src.rpm">
          <filename>golang-bin-1.20.12-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">e02d92c7c516c52eabe86de94b1f0f71e1fe34184a25bf816db37bba5072c319</sum>
        </package>
        <package name="golang-src" version="1.20.12" release="2.el9_3" epoch="0" arch="noarch" src="golang-1.20.12-2.el9_3.src.rpm">
          <filename>golang-src-1.20.12-2.el9_3.noarch.rpm</filename>
          <sum type="sha256">fe1b76488759989192765f595c8ac6a1864ef6afab2cb8ad8f32e6bf32f0ae56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1485</id>
    <title>Critical: firefox security update</title>
    <issued date="2024-03-25 00:00:00"/>
    <updated date="2024-04-03 14:53:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance, and portability.

This update upgrades Firefox to version 115.9.1 ESR.

Security Fix(es):

* nss: timing attack against RSA decryption (CVE-2023-5388)
* Mozilla: Crash in NSS TLS method (CVE-2024-0743)
* Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607)
* Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608)
* Mozilla: Improve handling of out-of-memory conditions in ICU (CVE-2024-2616)
* Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610)
* Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions (CVE-2024-2611)
* Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612)
* Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 (CVE-2024-2614)
* Mozilla: Privileged JavaScript Execution via Event Handlers (CVE-2024-29944)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1485" id="RHSA-2024:1485" type="rhsa" title="RHSA-2024:1485"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5388" id="CVE-2023-5388" type="cve" title="CVE-2023-5388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0743" id="CVE-2024-0743" type="cve" title="CVE-2024-0743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2607" id="CVE-2024-2607" type="cve" title="CVE-2024-2607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2608" id="CVE-2024-2608" type="cve" title="CVE-2024-2608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2610" id="CVE-2024-2610" type="cve" title="CVE-2024-2610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2611" id="CVE-2024-2611" type="cve" title="CVE-2024-2611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2612" id="CVE-2024-2612" type="cve" title="CVE-2024-2612"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2614" id="CVE-2024-2614" type="cve" title="CVE-2024-2614"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2616" id="CVE-2024-2616" type="cve" title="CVE-2024-2616"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-29944" id="CVE-2024-29944" type="cve" title="CVE-2024-29944"/>
      <reference href="https://bugzilla.redhat.com/2243644" id="2243644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2260012" id="2260012" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270660" id="2270660" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270661" id="2270661" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270662" id="2270662" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270663" id="2270663" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270664" id="2270664" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270665" id="2270665" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270666" id="2270666" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271064" id="2271064" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1485.html" id="ALSA-2024:1485" type="self" title="ALSA-2024:1485"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="firefox" version="115.9.1" release="1.el9_3.alma.1" epoch="0" arch="s390x" src="firefox-115.9.1-1.el9_3.alma.1.src.rpm">
          <filename>firefox-115.9.1-1.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">65ed78086306493a5253219e7bd069468db50061047abc877ee398e8392b80f2</sum>
        </package>
        <package name="firefox-x11" version="115.9.1" release="1.el9_3.alma.1" epoch="0" arch="s390x" src="firefox-115.9.1-1.el9_3.alma.1.src.rpm">
          <filename>firefox-x11-115.9.1-1.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">9149cbc13010775dcda7ed0b87da63b456546ac1d930a2a50c7e1cb2e6f1a08f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1493</id>
    <title>Moderate: thunderbird security update</title>
    <issued date="2024-03-25 00:00:00"/>
    <updated date="2024-04-10 08:56:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.9.0.

Security Fix(es):

* nss: timing attack against RSA decryption (CVE-2023-5388)
* Mozilla: Crash in NSS TLS method (CVE-2024-0743)
* Mozilla: Leaking of encrypted email subjects to other conversations  (CVE-2024-1936)
* Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607)
* Mozilla: Integer overflow could have led to out of bounds write
(CVE-2024-2608)
* Mozilla: Improper handling of html and body tags enabled CSP nonce leakage
(CVE-2024-2610)
* Mozilla: Clickjacking vulnerability could have led to a user accidentally
granting permissions (CVE-2024-2611)
* Mozilla: Self referencing object could have potentially led to a
use-after-free (CVE-2024-2612)
* Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and
Thunderbird 115.9 (CVE-2024-2614)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1493" id="RHSA-2024:1493" type="rhsa" title="RHSA-2024:1493"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5388" id="CVE-2023-5388" type="cve" title="CVE-2023-5388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0743" id="CVE-2024-0743" type="cve" title="CVE-2024-0743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1936" id="CVE-2024-1936" type="cve" title="CVE-2024-1936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2607" id="CVE-2024-2607" type="cve" title="CVE-2024-2607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2608" id="CVE-2024-2608" type="cve" title="CVE-2024-2608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2610" id="CVE-2024-2610" type="cve" title="CVE-2024-2610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2611" id="CVE-2024-2611" type="cve" title="CVE-2024-2611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2612" id="CVE-2024-2612" type="cve" title="CVE-2024-2612"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2614" id="CVE-2024-2614" type="cve" title="CVE-2024-2614"/>
      <reference href="https://bugzilla.redhat.com/2243644" id="2243644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2260012" id="2260012" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268171" id="2268171" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270660" id="2270660" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270661" id="2270661" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270663" id="2270663" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270664" id="2270664" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270665" id="2270665" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270666" id="2270666" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1493.html" id="ALSA-2024:1493" type="self" title="ALSA-2024:1493"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="thunderbird" version="115.9.0" release="1.el9_3.alma.1" epoch="0" arch="s390x" src="thunderbird-115.9.0-1.el9_3.alma.1.src.rpm">
          <filename>thunderbird-115.9.0-1.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">f1454e0e57fac02e6bed07f77a4ecf54de3c81c21f0cbcdfc0207693333933e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1501</id>
    <title>Important: grafana security update</title>
    <issued date="2024-03-25 00:00:00"/>
    <updated date="2024-04-02 08:28:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.

Security Fix(es):

* grafana: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1501" id="RHSA-2024:1501" type="rhsa" title="RHSA-2024:1501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1501.html" id="ALSA-2024:1501" type="self" title="ALSA-2024:1501"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="grafana" version="9.2.10" release="8.el9_3.alma.1" epoch="0" arch="s390x" src="grafana-9.2.10-8.el9_3.alma.1.src.rpm">
          <filename>grafana-9.2.10-8.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">f9fcefa977779d191cb4fa90abc859eddc007f5015345cd603b230c917b74e36</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1502</id>
    <title>Important: grafana-pcp security update</title>
    <issued date="2024-03-25 00:00:00"/>
    <updated date="2024-04-02 08:30:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana-pcp security update</summary>
    <description>grafana-pcp is an open source Grafana plugin for PCP.

Security Fix(es):

* grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1502" id="RHSA-2024:1502" type="rhsa" title="RHSA-2024:1502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1502.html" id="ALSA-2024:1502" type="self" title="ALSA-2024:1502"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="grafana-pcp" version="5.1.1" release="2.el9_3.alma.1" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-2.el9_3.alma.1.src.rpm">
          <filename>grafana-pcp-5.1.1-2.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">e470d5c6b0cbe90f2c28b7827a973c01a072521692be720f9ed579b9daa623d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1503</id>
    <title>Important: nodejs:18 security update</title>
    <issued date="2024-03-25 00:00:00"/>
    <updated date="2024-04-04 09:21:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:18 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable
network applications in the JavaScript programming language.

Security Fix(es):

* nodejs: code injection and privilege escalation through Linux capabilities (CVE-2024-21892)
* nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019)
* nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin) (CVE-2023-46809)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1503" id="RHSA-2024:1503" type="rhsa" title="RHSA-2024:1503"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46809" id="CVE-2023-46809" type="cve" title="CVE-2023-46809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21892" id="CVE-2024-21892" type="cve" title="CVE-2024-21892"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22019" id="CVE-2024-22019" type="cve" title="CVE-2024-22019"/>
      <reference href="https://bugzilla.redhat.com/2264569" id="2264569" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264574" id="2264574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264582" id="2264582" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1503.html" id="ALSA-2024:1503" type="self" title="ALSA-2024:1503"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <module name="nodejs" stream="18" version="9030020240402085113" context="8cf767d6" arch="s390x"/>
        <package name="nodejs" version="18.19.1" release="1.module_el9.3.0+59+28b95644" epoch="1" arch="s390x" src="nodejs-18.19.1-1.module_el9.3.0+59+28b95644.src.rpm">
          <filename>nodejs-18.19.1-1.module_el9.3.0+59+28b95644.s390x.rpm</filename>
          <sum type="sha256">2305c54b0dfa428ded354037dab39acfce378a5c9a4dae27631604f9fef07c61</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.19.1" release="1.module_el9.3.0+59+28b95644" epoch="1" arch="s390x" src="nodejs-18.19.1-1.module_el9.3.0+59+28b95644.src.rpm">
          <filename>nodejs-full-i18n-18.19.1-1.module_el9.3.0+59+28b95644.s390x.rpm</filename>
          <sum type="sha256">296df79fafca2db7cf2c7bc40c49edcbe0292e3ecaacb18aee3ad8db7e8fc2da</sum>
        </package>
        <package name="nodejs-docs" version="18.19.1" release="1.module_el9.3.0+59+28b95644" epoch="1" arch="noarch" src="nodejs-18.19.1-1.module_el9.3.0+59+28b95644.src.rpm">
          <filename>nodejs-docs-18.19.1-1.module_el9.3.0+59+28b95644.noarch.rpm</filename>
          <sum type="sha256">6d03eb3baa9c6cffd0a6b69aba5f9734712d9468356216b59e1c3249b0339ede</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.2.0+36+853e48f5" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm</filename>
          <sum type="sha256">6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0</sum>
        </package>
        <package name="npm" version="10.2.4" release="1.18.19.1.1.module_el9.3.0+59+28b95644" epoch="1" arch="s390x" src="nodejs-18.19.1-1.module_el9.3.0+59+28b95644.src.rpm">
          <filename>npm-10.2.4-1.18.19.1.1.module_el9.3.0+59+28b95644.s390x.rpm</filename>
          <sum type="sha256">c64090190e46bde0b5a1d62b407a80516edaf625ac84770ea72bd1701ed0830f</sum>
        </package>
        <package name="nodejs-devel" version="18.19.1" release="1.module_el9.3.0+59+28b95644" epoch="1" arch="s390x" src="nodejs-18.19.1-1.module_el9.3.0+59+28b95644.src.rpm">
          <filename>nodejs-devel-18.19.1-1.module_el9.3.0+59+28b95644.s390x.rpm</filename>
          <sum type="sha256">e2a064d6e29e8a27146fbe656ac17164122e21f85f3386ee2c393da6ad4f1378</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1530</id>
    <title>Moderate: expat security update</title>
    <issued date="2024-03-26 00:00:00"/>
    <updated date="2024-04-02 08:32:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.

Security Fix(es):

* expat: parsing large tokens can trigger a denial of service (CVE-2023-52425)
* expat: XML Entity Expansion (CVE-2024-28757)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1530" id="RHSA-2024:1530" type="rhsa" title="RHSA-2024:1530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52425" id="CVE-2023-52425" type="cve" title="CVE-2023-52425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28757" id="CVE-2024-28757" type="cve" title="CVE-2024-28757"/>
      <reference href="https://bugzilla.redhat.com/2262877" id="2262877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268766" id="2268766" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1530.html" id="ALSA-2024:1530" type="self" title="ALSA-2024:1530"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="expat-devel" version="2.5.0" release="1.el9_3.1" epoch="0" arch="s390x" src="expat-2.5.0-1.el9_3.1.src.rpm">
          <filename>expat-devel-2.5.0-1.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">ff6f57c1ee531ec65fff588b254ba93e7369ef8a1e8a4af0dc03f7055e8ef573</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1576</id>
    <title>Moderate: ruby:3.1 security, bug fix, and enhancement update</title>
    <issued date="2024-04-01 00:00:00"/>
    <updated date="2024-04-02 16:11:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.1 security, bug fix, and enhancement update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.1). (AlmaLinux-29052)

Security Fix(es):

* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
* ruby: ReDoS vulnerability in URI (CVE-2023-28755)
* ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)
* ruby: ReDoS vulnerability in Time (CVE-2023-28756)

Bug Fix(es):

* ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (AlmaLinux-29048)
* ruby: Ruby cannot read private key in FIPS mode on AlmaLinux 9 (AlmaLinux-12437)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1576" id="RHSA-2024:1576" type="rhsa" title="RHSA-2024:1576"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33621" id="CVE-2021-33621" type="cve" title="CVE-2021-33621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28755" id="CVE-2023-28755" type="cve" title="CVE-2023-28755"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28756" id="CVE-2023-28756" type="cve" title="CVE-2023-28756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36617" id="CVE-2023-36617" type="cve" title="CVE-2023-36617"/>
      <reference href="https://bugzilla.redhat.com/2149706" id="2149706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184059" id="2184059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184061" id="2184061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218614" id="2218614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1576.html" id="ALSA-2024:1576" type="self" title="ALSA-2024:1576"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <module name="ruby" stream="3.1" version="9030020240402114627" context="8cf767d6" arch="s390x"/>
        <package name="rubygem-irb" version="1.4.1" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-irb-1.4.1-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">0905ea50c6cc6d5a681460c632ba0a74e5f6d2ba1db15071c6898ecbecc2a245</sum>
        </package>
        <package name="ruby-default-gems" version="3.1.4" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>ruby-default-gems-3.1.4-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">0c918bfd80963513ed8ebf939151fdce1a95440655605c2d67f99cd84d216be4</sum>
        </package>
        <package name="rubygem-bundler" version="2.3.26" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-bundler-2.3.26-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">0cfb15f8920c73930c5fec462727ff8bd0d4d1fc94390b2ad491b78cc0c212cf</sum>
        </package>
        <package name="rubygems-devel" version="3.3.26" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygems-devel-3.3.26-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">0e7ff1f07e4a144615a899bd26379a895339f798bd29586c0fe8c704eec129c9</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.3" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-typeprof-0.21.3-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">12b6d49f2eb37de64c5359d95338466e4c556af74df4adef525b75843d89190e</sum>
        </package>
        <package name="rubygem-io-console" version="0.5.11" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="s390x" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-io-console-0.5.11-143.module_el9.3.0+60+5ebc989a.s390x.rpm</filename>
          <sum type="sha256">23912bd393f9a5bc90aeecbfe116c0db72039d79e153668824a4b8a9a0f74861</sum>
        </package>
        <package name="rubygem-psych" version="4.0.4" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="s390x" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-psych-4.0.4-143.module_el9.3.0+60+5ebc989a.s390x.rpm</filename>
          <sum type="sha256">28171f973bcf4068f197181a32787ef152f841f9687b756db330fb2a2d0454c5</sum>
        </package>
        <package name="rubygem-rexml" version="3.2.5" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-rexml-3.2.5-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">354d1ca60ce97d60e2fb600c86afd727f668446370edb2394ee2935d4e106798</sum>
        </package>
        <package name="rubygem-rdoc" version="6.4.0" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-rdoc-6.4.0-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">36f9528fb53df33c14bfec0c0b6cd001923bf8d59b7664a7e0110b900e83d99b</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.4" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.4-1.module_el9.1.0+8+503f6fbd.noarch.rpm</filename>
          <sum type="sha256">47f8869c8adfe2b7eee506473440af3abe2bb171cf60cda4d0dec05db0bc3fb8</sum>
        </package>
        <package name="rubygem-test-unit" version="3.5.3" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-test-unit-3.5.3-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">48b4cecfa787eb441b96cb238ac59a92721e0e96871882a0c99535a41dce07ad</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.4" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.s390x.rpm</filename>
          <sum type="sha256">49b1f8d15c4626c94dbdf369d69aa871b2e1b4909ae4718089f41d7de50396ee</sum>
        </package>
        <package name="ruby-doc" version="3.1.4" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>ruby-doc-3.1.4-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">4eb51d23c8c72f8e460bd2914c19f7cd5dc68f46bbcbaa950473677350a79597</sum>
        </package>
        <package name="ruby-devel" version="3.1.4" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="s390x" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>ruby-devel-3.1.4-143.module_el9.3.0+60+5ebc989a.s390x.rpm</filename>
          <sum type="sha256">4eefdf9735833f0d6664cf37298289b0e72cce39d7a2b9354b7d9de275f25b90</sum>
        </package>
        <package name="ruby" version="3.1.4" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="s390x" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.s390x.rpm</filename>
          <sum type="sha256">527be15d0d170b8cb36d98a81034ffead2e66069d07436371534a46d1b685197</sum>
        </package>
        <package name="rubygems" version="3.3.26" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygems-3.3.26-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">60fd72d151b2e2783689c5d4470411ffa6c39cbf7a4e4bd079e17fb95dc357e4</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.1" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-power_assert-2.0.1-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">63219994c30877b59061770b580914f572efec91b2b19317f2060f0f9bd91827</sum>
        </package>
        <package name="rubygem-pg" version="1.3.5" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="s390x" src="rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.s390x.rpm</filename>
          <sum type="sha256">81af584c5f98cbff30e7733f802c0711cdfb921b4fc268dc21e6e002f4c9a292</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.1.4" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="s390x" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>ruby-bundled-gems-3.1.4-143.module_el9.3.0+60+5ebc989a.s390x.rpm</filename>
          <sum type="sha256">82e860a765767761c2b83e22b938126589b14afd8a988c585abfd4d15a64187f</sum>
        </package>
        <package name="ruby-libs" version="3.1.4" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="s390x" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>ruby-libs-3.1.4-143.module_el9.3.0+60+5ebc989a.s390x.rpm</filename>
          <sum type="sha256">88967599c39a2cf14d646d5f391da643e78ec732b8042b4f1f94f39094aac117</sum>
        </package>
        <package name="rubygem-json" version="2.6.1" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="s390x" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-json-2.6.1-143.module_el9.3.0+60+5ebc989a.s390x.rpm</filename>
          <sum type="sha256">946460aa34b688db4a8e888ff927d80122dcc1f2967e88bf1456753a7a8b04cf</sum>
        </package>
        <package name="rubygem-rbs" version="2.7.0" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="s390x" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-rbs-2.7.0-143.module_el9.3.0+60+5ebc989a.s390x.rpm</filename>
          <sum type="sha256">94e8127efe8fbb57ba94ce682c71a594b6f8dfde0bb61965d243dbd7f9c261bc</sum>
        </package>
        <package name="rubygem-minitest" version="5.15.0" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-minitest-5.15.0-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">af3a3fc67bab63fc8271d1228f3d722e5d3eec8eb7b03b43a664aff57944e18a</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.1" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="s390x" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-bigdecimal-3.1.1-143.module_el9.3.0+60+5ebc989a.s390x.rpm</filename>
          <sum type="sha256">b3a914936dd74c4a447dacc8e1af759dc97075f7b1cf164ebf5db6a41dfc015f</sum>
        </package>
        <package name="rubygem-rake" version="13.0.6" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-rake-13.0.6-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">b6ae9ba983978a8dcb31c5a552e2ebe3d3871ada40297c0a50a3709151689b62</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.3.5" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="noarch" src="rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-pg-doc-1.3.5-1.module_el9.1.0+8+503f6fbd.noarch.rpm</filename>
          <sum type="sha256">c24489067c5c62f3bb8edd8f47b01171f766eaeb0e96991878c51e5ae4b1b3e4</sum>
        </package>
        <package name="rubygem-rss" version="0.2.9" release="143.module_el9.3.0+60+5ebc989a" epoch="0" arch="noarch" src="ruby-3.1.4-143.module_el9.3.0+60+5ebc989a.src.rpm">
          <filename>rubygem-rss-0.2.9-143.module_el9.3.0+60+5ebc989a.noarch.rpm</filename>
          <sum type="sha256">e81933427fea30393c52bb8cff7b70f07e284fcee5be0e2e14cca0c33afb82e9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1688</id>
    <title>Important: nodejs:20 security update</title>
    <issued date="2024-04-08 00:00:00"/>
    <updated date="2024-04-09 14:51:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable
network applications in the JavaScript programming language.

Security Fix(es):

* nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin) (CVE-2023-46809)
* nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019)
* nodejs: code injection and privilege escalation through Linux capabilities (CVE-2024-21892)
* nodejs: path traversal by monkey-patching buffer internals (CVE-2024-21896)
* nodejs: multiple permission model bypasses due to improper path traversal sequence sanitization (CVE-2024-21891)
* nodejs: improper handling of wildcards in --allow-fs-read and --allow-fs-write (CVE-2024-21890)
* nodejs: setuid() does not drop all privileges due to io_uring (CVE-2024-22017)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1688" id="RHSA-2024:1688" type="rhsa" title="RHSA-2024:1688"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46809" id="CVE-2023-46809" type="cve" title="CVE-2023-46809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21890" id="CVE-2024-21890" type="cve" title="CVE-2024-21890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21891" id="CVE-2024-21891" type="cve" title="CVE-2024-21891"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21892" id="CVE-2024-21892" type="cve" title="CVE-2024-21892"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21896" id="CVE-2024-21896" type="cve" title="CVE-2024-21896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22017" id="CVE-2024-22017" type="cve" title="CVE-2024-22017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22019" id="CVE-2024-22019" type="cve" title="CVE-2024-22019"/>
      <reference href="https://bugzilla.redhat.com/2264569" id="2264569" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264574" id="2264574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264582" id="2264582" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265717" id="2265717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265720" id="2265720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265722" id="2265722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265727" id="2265727" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1688.html" id="ALSA-2024:1688" type="self" title="ALSA-2024:1688"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <module name="nodejs" stream="20" version="9030020240409064627" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-docs" version="20.11.1" release="1.module_el9.3.0+88+29afeaa2" epoch="1" arch="noarch" src="nodejs-20.11.1-1.module_el9.3.0+88+29afeaa2.src.rpm">
          <filename>nodejs-docs-20.11.1-1.module_el9.3.0+88+29afeaa2.noarch.rpm</filename>
          <sum type="sha256">0a539992ceaebbdf59f37fcbeacbeb18b6a3fed31399e6b9cc248c7c888a888e</sum>
        </package>
        <package name="nodejs" version="20.11.1" release="1.module_el9.3.0+88+29afeaa2" epoch="1" arch="s390x" src="nodejs-20.11.1-1.module_el9.3.0+88+29afeaa2.src.rpm">
          <filename>nodejs-20.11.1-1.module_el9.3.0+88+29afeaa2.s390x.rpm</filename>
          <sum type="sha256">0fac9e1a61c724440143c785653f0c47932d3128b136ddb943bb2092058b3ab1</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.3.0+48+1cf146a1" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.3.0+48+1cf146a1.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.3.0+48+1cf146a1.noarch.rpm</filename>
          <sum type="sha256">35eb2a8230c495f14db654d04d574da1fcbda4788ab3b15100aa045fc30b01c3</sum>
        </package>
        <package name="npm" version="10.2.4" release="1.20.11.1.1.module_el9.3.0+88+29afeaa2" epoch="1" arch="s390x" src="nodejs-20.11.1-1.module_el9.3.0+88+29afeaa2.src.rpm">
          <filename>npm-10.2.4-1.20.11.1.1.module_el9.3.0+88+29afeaa2.s390x.rpm</filename>
          <sum type="sha256">5bb5a237a5b29fee77d7d6086405ff59a0d371bf7516d406a35b3e232e905fe6</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.3.0+47+c33bc288" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.3.0+47+c33bc288.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.3.0+47+c33bc288.noarch.rpm</filename>
          <sum type="sha256">6c7def7dbed327b375d30e7aafa1c2627afb0c3399bfdf50f9721a64a87488aa</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.11.1" release="1.module_el9.3.0+88+29afeaa2" epoch="1" arch="s390x" src="nodejs-20.11.1-1.module_el9.3.0+88+29afeaa2.src.rpm">
          <filename>nodejs-full-i18n-20.11.1-1.module_el9.3.0+88+29afeaa2.s390x.rpm</filename>
          <sum type="sha256">a9f2598b47ca866b18796416edc4a2c41ea71f9f2479f5177d0ae681345a8e77</sum>
        </package>
        <package name="nodejs-devel" version="20.11.1" release="1.module_el9.3.0+88+29afeaa2" epoch="1" arch="s390x" src="nodejs-20.11.1-1.module_el9.3.0+88+29afeaa2.src.rpm">
          <filename>nodejs-devel-20.11.1-1.module_el9.3.0+88+29afeaa2.s390x.rpm</filename>
          <sum type="sha256">c7891fb9647a2da68d0de0d408356b7568844687743d5447feb26c2f6d906eb6</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.3.0+48+1cf146a1" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.3.0+48+1cf146a1.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.3.0+48+1cf146a1.noarch.rpm</filename>
          <sum type="sha256">cf69099af4a291d5887aa79f025868a557e50c9f7d2b18b5e0e5f3e2a9624fa2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1691</id>
    <title>Important: varnish security update</title>
    <issued date="2024-04-08 00:00:00"/>
    <updated date="2024-04-09 06:48:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1691" id="RHSA-2024:1691" type="rhsa" title="RHSA-2024:1691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30156" id="CVE-2024-30156" type="cve" title="CVE-2024-30156"/>
      <reference href="https://bugzilla.redhat.com/2271486" id="2271486" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1691.html" id="ALSA-2024:1691" type="self" title="ALSA-2024:1691"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="varnish-docs" version="6.6.2" release="4.el9_3.1" epoch="0" arch="s390x" src="varnish-6.6.2-4.el9_3.1.src.rpm">
          <filename>varnish-docs-6.6.2-4.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">6c3aee43b4d475d8d290d87f6385c06885dbe777d408968eee1aa06f17206764</sum>
        </package>
        <package name="varnish" version="6.6.2" release="4.el9_3.1" epoch="0" arch="s390x" src="varnish-6.6.2-4.el9_3.1.src.rpm">
          <filename>varnish-6.6.2-4.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">eed05516ddc08b2ba07d26fef7e7d3ac024264177908187d15057395cd374e80</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1750</id>
    <title>Important: unbound security update</title>
    <issued date="2024-04-10 00:00:00"/>
    <updated date="2024-04-12 11:51:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* A vulnerability was found in Unbound due to incorrect default permissions,
allowing any process outside the unbound group to modify the unbound runtime
configuration. The default combination of the "control-use-cert: no" option with
either explicit or implicit use of an IP address in the "control-interface"
option could allow improper access. If a process can connect over localhost to
port 8953, it can alter the configuration of unbound.service. This flaw allows
an unprivileged local process to manipulate a running instance, potentially
altering forwarders, allowing them to track all queries forwarded by the local
resolver, and, in some cases, disrupting resolving altogether.

To mitigate the vulnerability, a new file
"/etc/unbound/conf.d/remote-control.conf" has been added and included in the
main unbound configuration file, "unbound.conf". The file contains two
directives that should limit access to unbound.conf:

    control-interface: "/run/unbound/control"
    control-use-cert: "yes"

For details about these directives, run "man unbound.conf".

Updating to the version of unbound provided by this advisory should, in most
cases, address the vulnerability. To verify that your configuration is not
vulnerable, use the "unbound-control status | grep control" command. If the
output contains "control(ssl)" or "control(namedpipe)", your configuration is
not vulnerable. If the command output returns only "control", the configuration
is vulnerable because it does not enforce access only to the unbound group
members. To fix your configuration, add the line "include:
/etc/unbound/conf.d/remote-control.conf" to the end of the file
"/etc/unbound/unbound.conf". If you use a custom
"/etc/unbound/conf.d/remote-control.conf" file, add the new directives to this
file. (CVE-2024-1488)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1750" id="RHSA-2024:1750" type="rhsa" title="RHSA-2024:1750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1488" id="CVE-2024-1488" type="cve" title="CVE-2024-1488"/>
      <reference href="https://bugzilla.redhat.com/2264183" id="2264183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1750.html" id="ALSA-2024:1750" type="self" title="ALSA-2024:1750"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="python3-unbound" version="1.16.2" release="3.el9_3.5" epoch="0" arch="s390x" src="unbound-1.16.2-3.el9_3.5.src.rpm">
          <filename>python3-unbound-1.16.2-3.el9_3.5.s390x.rpm</filename>
          <sum type="sha256">173e4fcce80f1fa5f8e7314ddfdc206c9c63d67935bfc270a8265f4746996fe6</sum>
        </package>
        <package name="unbound-libs" version="1.16.2" release="3.el9_3.5" epoch="0" arch="s390x" src="unbound-1.16.2-3.el9_3.5.src.rpm">
          <filename>unbound-libs-1.16.2-3.el9_3.5.s390x.rpm</filename>
          <sum type="sha256">a72858780e6d0ab8479f12258a2fac85349a91a5f79470a22468a2905ba315a3</sum>
        </package>
        <package name="unbound" version="1.16.2" release="3.el9_3.5" epoch="0" arch="s390x" src="unbound-1.16.2-3.el9_3.5.src.rpm">
          <filename>unbound-1.16.2-3.el9_3.5.s390x.rpm</filename>
          <sum type="sha256">e92b74bf37c4b6a7cbb17985f2ba233e6aa85a5a7fd5cc354ecfdce132c4316e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1789</id>
    <title>Important: bind security update</title>
    <issued date="2024-04-11 00:00:00"/>
    <updated date="2024-04-12 12:58:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)
* bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)
* bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)
* bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)
* bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1789" id="RHSA-2024:1789" type="rhsa" title="RHSA-2024:1789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4408" id="CVE-2023-4408" type="cve" title="CVE-2023-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5517" id="CVE-2023-5517" type="cve" title="CVE-2023-5517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5679" id="CVE-2023-5679" type="cve" title="CVE-2023-5679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6516" id="CVE-2023-6516" type="cve" title="CVE-2023-6516"/>
      <reference href="https://bugzilla.redhat.com/2263896" id="2263896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263897" id="2263897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263909" id="2263909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263911" id="2263911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1789.html" id="ALSA-2024:1789" type="self" title="ALSA-2024:1789"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="bind-license" version="9.16.23" release="14.el9_3.4" epoch="32" arch="noarch" src="bind-9.16.23-14.el9_3.4.src.rpm">
          <filename>bind-license-9.16.23-14.el9_3.4.noarch.rpm</filename>
          <sum type="sha256">012982f0586afa53de7d12064b54b611c6aa3996136ae529dafd184fb5a1d4b8</sum>
        </package>
        <package name="python3-bind" version="9.16.23" release="14.el9_3.4" epoch="32" arch="noarch" src="bind-9.16.23-14.el9_3.4.src.rpm">
          <filename>python3-bind-9.16.23-14.el9_3.4.noarch.rpm</filename>
          <sum type="sha256">170453af55c64d7384969b646894606ed2f1c355646c5fd9c3af89cd4d2eb837</sum>
        </package>
        <package name="bind-chroot" version="9.16.23" release="14.el9_3.4" epoch="32" arch="s390x" src="bind-9.16.23-14.el9_3.4.src.rpm">
          <filename>bind-chroot-9.16.23-14.el9_3.4.s390x.rpm</filename>
          <sum type="sha256">53d162149c0ac8728391699595b0d7acf54921d5fac14cb152c81f58b7467ba7</sum>
        </package>
        <package name="bind-dnssec-utils" version="9.16.23" release="14.el9_3.4" epoch="32" arch="s390x" src="bind-9.16.23-14.el9_3.4.src.rpm">
          <filename>bind-dnssec-utils-9.16.23-14.el9_3.4.s390x.rpm</filename>
          <sum type="sha256">7ceb7384888b4121da4acacf4df81770b5d3d943d0e9b95e72a96a8f134c9009</sum>
        </package>
        <package name="bind" version="9.16.23" release="14.el9_3.4" epoch="32" arch="s390x" src="bind-9.16.23-14.el9_3.4.src.rpm">
          <filename>bind-9.16.23-14.el9_3.4.s390x.rpm</filename>
          <sum type="sha256">867e9aa55b578c5a3f403612ce6a249d9065884d071defb62c98b0db71b3595f</sum>
        </package>
        <package name="bind-dnssec-doc" version="9.16.23" release="14.el9_3.4" epoch="32" arch="noarch" src="bind-9.16.23-14.el9_3.4.src.rpm">
          <filename>bind-dnssec-doc-9.16.23-14.el9_3.4.noarch.rpm</filename>
          <sum type="sha256">8d0966d77d817acd3ef8ba3560ebc38f42057b8f42362fbf4c75953e90c7e7cf</sum>
        </package>
        <package name="bind-dyndb-ldap" version="11.9" release="8.el9_3.3.alma.1" epoch="0" arch="s390x" src="bind-dyndb-ldap-11.9-8.el9_3.3.alma.1.src.rpm">
          <filename>bind-dyndb-ldap-11.9-8.el9_3.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">aef26e24d8ac9a8fdd2ebc9d1224b4020d424b8fb829d160965b9a32e44eb313</sum>
        </package>
        <package name="bind-utils" version="9.16.23" release="14.el9_3.4" epoch="32" arch="s390x" src="bind-9.16.23-14.el9_3.4.src.rpm">
          <filename>bind-utils-9.16.23-14.el9_3.4.s390x.rpm</filename>
          <sum type="sha256">bed2f04a24cfbf1c543288058587098f145c779bf0a8d44d2d6f9861c6240c3d</sum>
        </package>
        <package name="bind-libs" version="9.16.23" release="14.el9_3.4" epoch="32" arch="s390x" src="bind-9.16.23-14.el9_3.4.src.rpm">
          <filename>bind-libs-9.16.23-14.el9_3.4.s390x.rpm</filename>
          <sum type="sha256">dbe18f462da0afd1a5321f5f620e9030aa2d5f1472921dc5f0393c4d8eb37932</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1818</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-19 13:00:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)
* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1818" id="RHSA-2024:1818" type="rhsa" title="RHSA-2024:1818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21085" id="CVE-2024-21085" type="cve" title="CVE-2024-21085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094"/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275001" id="2275001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275005" id="2275005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1818.html" id="ALSA-2024:1818" type="self" title="ALSA-2024:1818"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.412.b08-2.el9.noarch.rpm</filename>
          <sum type="sha256">0bf563394bac944235c1daa621390ddcd68e797f78bdc4a37707332579a7e18d</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.412.b08-2.el9.s390x.rpm</filename>
          <sum type="sha256">911160a80c48e02981ad8526ef9c3b3fd75e7c5581e59b4ea14848e35ad8f02b</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.412.b08-2.el9.s390x.rpm</filename>
          <sum type="sha256">98a7e95cce800a04fc24f931fad1a2d1ea9799e1b0970568d9b66a87eb109b74</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.412.b08-2.el9.s390x.rpm</filename>
          <sum type="sha256">a2a30dc19ec84ce5b663d982422dcdd3af1df6a00665087b1976afd321e24072</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.412.b08-2.el9.noarch.rpm</filename>
          <sum type="sha256">cfc03711b0e7391441a8eaf6315973873c62d9b533bdcac02be4201aa9311579</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.412.b08-2.el9.s390x.rpm</filename>
          <sum type="sha256">dc0a33072805636ec31eb94b53adbf4f106693abe6782e22c0e2a0f0940f861a</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.412.b08" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.412.b08-2.el9.s390x.rpm</filename>
          <sum type="sha256">e9d8b2ab4d647083e7ac5c2fd5c7b146b09721d1000feaf2c0bfd74295ebb926</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1822</id>
    <title>Moderate: java-11-openjdk security update</title>
    <issued date="2024-04-22 00:00:00"/>
    <updated date="2024-04-29 11:02:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)
* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)
* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1822" id="RHSA-2024:1822" type="rhsa" title="RHSA-2024:1822"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21085" id="CVE-2024-21085" type="cve" title="CVE-2024-21085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094"/>
      <reference href="https://bugzilla.redhat.com/2274975" id="2274975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275001" id="2275001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275005" id="2275005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1822.html" id="ALSA-2024:1822" type="self" title="ALSA-2024:1822"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="java-11-openjdk-demo" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-demo-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">03813267be64eaf915284e7f4e38198bd87eb331883d04c31e58c27f2e8e19bf</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">257cd7c473b6b293b87a2fb1f4efe02b36f17084e153a9a7025617e5854d553b</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">32cd23e7a2ac84e98eb5d811579d72854b2b5c8cc5e87fdbf2414b08c7b7f403</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-devel-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">32f2617f87dee30af2c373d0e481ab3e4745318c7625dd422b622ab68fb3196c</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-src-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">60dddc989af101c18b8fe5781f36b20240cfea36ba0fcde9c11f94df184a9cb8</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">6f8eea7c7d61e4da241c30a72233e44304f68587dfbf2095622bb5d647d36004</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">7454db9f6aa57be3bedc2cf8537d499acc747b4ac73dd8be2f860e0d72a37a44</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-headless-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">8b472ed66b7a8fd11b5612a3939f5d9e2c36749c22579656a3a6e0eae3f0729c</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">b8e042d8c85f7c2772ebee485560e615fed1b539796441dbaebb5d93c6b599af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1825</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-18 13:44:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)
* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1825" id="RHSA-2024:1825" type="rhsa" title="RHSA-2024:1825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094"/>
      <reference href="https://bugzilla.redhat.com/2274975" id="2274975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275005" id="2275005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1825.html" id="ALSA-2024:1825" type="self" title="ALSA-2024:1825"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="java-17-openjdk-devel" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">0574d9e980feb7577cf4e9a0942990dead1e7017493ee4dc99da49d77d27a19b</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">08e625a213665e334899e1c78d650ff2494e798b0cedb12bcda32c705020e9a3</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">3902ccafa1adbecb75518b740dfe31561c26cd5a4fe0354442107a5e0f728b3c</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-src-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">3a690de73aa9acdb2067385c248df418868484c085bdf1c8be7a8274ca155ad5</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">96b33b020fc9d370f4274cf33094901b31de53fa948ee8bc340df9bb6e83c081</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">b995da8ac1cf9defd21485c4bc5ca5478753e96596d883eccbe1a2fc3e02e939</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">c0037a33aaf13c4c0aac57eba4c9ab3305f0b392d22b5d76fd83770b44a9b334</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">c4d4d3bd0370020cdd205712495da7784d8c5e1e5957e459a84dde36ec5e6145</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">c9541bcc453ee470cb77a0706845cbf02a5834b5c29bfa47f6d0376896b6094f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1828</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-29 11:04:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1828" id="RHSA-2024:1828" type="rhsa" title="RHSA-2024:1828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://bugzilla.redhat.com/2274975" id="2274975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1828.html" id="ALSA-2024:1828" type="self" title="ALSA-2024:1828"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="java-21-openjdk-devel" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">09284d8f65a9dae94fc99827bfc55db359d61973938b64da4c45f94ce38d760b</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">471da2ca45fd71e5e0cf462d238fbcf14b8148508ca019229ba65ba4f0fe0b6d</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">74eb747e002df819bf0e43907db0d19b28243222bf7d5d6ea769f884dd4b6c89</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">88131fc1eaddcd8e6483d21f9e19bc0940dbbd50370ef9b4794ab9576a7729de</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">9a6f440da9635643be37b825173268ffc30c15ff5e7bb09550a012c9c3a0868b</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">9ed0de18a5931a13d8947c064cbc2b2001c997c0c9c8e01eab9932251ea310df</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b9329bbb9cab70de3d8aacb4463c1337574e7d61d674959818c04e2f8998cc78</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f66a6d7015510c5fe65739c2746335ec1fd507dde0a7773eb6e0366bb2536d5c</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">fb2a2faec1eeeabf53b8c89414b52297e279d97a2de4865e77812696aa159634</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1872</id>
    <title>Important: mod_http2 security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-18 10:28:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mod_http2 security update</summary>
    <description>The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.

Security Fix(es):

* httpd: CONTINUATION frames DoS (CVE-2024-27316)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1872" id="RHSA-2024:1872" type="rhsa" title="RHSA-2024:1872"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27316" id="CVE-2024-27316" type="cve" title="CVE-2024-27316"/>
      <reference href="https://bugzilla.redhat.com/2268277" id="2268277" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1872.html" id="ALSA-2024:1872" type="self" title="ALSA-2024:1872"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="mod_http2" version="1.15.19" release="5.el9_3.1" epoch="0" arch="s390x" src="mod_http2-1.15.19-5.el9_3.1.src.rpm">
          <filename>mod_http2-1.15.19-5.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">659290b0856ae14a2662d3fa60ea08e0763b0e7de5a2400afa48844af12fffa3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1879</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-18 10:27:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)
* gnutls: potential crash during chain building/verification (CVE-2024-28835)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1879" id="RHSA-2024:1879" type="rhsa" title="RHSA-2024:1879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28834" id="CVE-2024-28834" type="cve" title="CVE-2024-28834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28835" id="CVE-2024-28835" type="cve" title="CVE-2024-28835"/>
      <reference href="https://bugzilla.redhat.com/2269084" id="2269084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269228" id="2269228" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1879.html" id="ALSA-2024:1879" type="self" title="ALSA-2024:1879"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="gnutls-c++" version="3.7.6" release="23.el9_3.4" epoch="0" arch="s390x" src="gnutls-3.7.6-23.el9_3.4.src.rpm">
          <filename>gnutls-c++-3.7.6-23.el9_3.4.s390x.rpm</filename>
          <sum type="sha256">109668816b4186722c7af108fd354d7be30280e9b0c556cc67654be2b95ae5ef</sum>
        </package>
        <package name="gnutls-dane" version="3.7.6" release="23.el9_3.4" epoch="0" arch="s390x" src="gnutls-3.7.6-23.el9_3.4.src.rpm">
          <filename>gnutls-dane-3.7.6-23.el9_3.4.s390x.rpm</filename>
          <sum type="sha256">35ae77abb25724b38ba775f1f22e36bb8fc114faa0ee9964a6d506ea0039b118</sum>
        </package>
        <package name="gnutls-devel" version="3.7.6" release="23.el9_3.4" epoch="0" arch="s390x" src="gnutls-3.7.6-23.el9_3.4.src.rpm">
          <filename>gnutls-devel-3.7.6-23.el9_3.4.s390x.rpm</filename>
          <sum type="sha256">b24878da58c24dbf2ea696b6e32511da6f7fa92ede5c955d51d3a6b4f97c8a9c</sum>
        </package>
        <package name="gnutls-utils" version="3.7.6" release="23.el9_3.4" epoch="0" arch="s390x" src="gnutls-3.7.6-23.el9_3.4.src.rpm">
          <filename>gnutls-utils-3.7.6-23.el9_3.4.s390x.rpm</filename>
          <sum type="sha256">b6253c8bf2018418946123cc2e5d2391d6fa164d5329387751002d3c9f868572</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1908</id>
    <title>Important: firefox security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-22 08:24:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.10.0 ESR.

Security Fix(es):
  
* GetBoundName in the JIT returned the wrong object (CVE-2024-3852)

* Out-of-bounds-read after mis-optimized switch statement (CVE-2024-3854)
* Incorrect JITting of arguments led to use-after-free during garbage collection (CVE-2024-3857)
* Permission prompt input delay could expire when not in focus (CVE-2024-2609)
* Integer-overflow led to out-of-bounds-read in the OpenType sanitizer (CVE-2024-3859)
* Potential use-after-free due to AlignedBuffer self-move (CVE-2024-3861)
* Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10 (CVE-2024-3864)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1908" id="RHSA-2024:1908" type="rhsa" title="RHSA-2024:1908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2609" id="CVE-2024-2609" type="cve" title="CVE-2024-2609"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3852" id="CVE-2024-3852" type="cve" title="CVE-2024-3852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3854" id="CVE-2024-3854" type="cve" title="CVE-2024-3854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3857" id="CVE-2024-3857" type="cve" title="CVE-2024-3857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3859" id="CVE-2024-3859" type="cve" title="CVE-2024-3859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3861" id="CVE-2024-3861" type="cve" title="CVE-2024-3861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3864" id="CVE-2024-3864" type="cve" title="CVE-2024-3864"/>
      <reference href="https://bugzilla.redhat.com/2275547" id="2275547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275549" id="2275549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275550" id="2275550" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275551" id="2275551" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275552" id="2275552" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275553" id="2275553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275555" id="2275555" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1908.html" id="ALSA-2024:1908" type="self" title="ALSA-2024:1908"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="firefox-x11" version="115.10.0" release="1.el9_3.alma.1" epoch="0" arch="s390x" src="firefox-115.10.0-1.el9_3.alma.1.src.rpm">
          <filename>firefox-x11-115.10.0-1.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">10dc0e5d92d932adfd0d393ea361872fbe2b4d028217fa8781128f7b9ee7dcdd</sum>
        </package>
        <package name="firefox" version="115.10.0" release="1.el9_3.alma.1" epoch="0" arch="s390x" src="firefox-115.10.0-1.el9_3.alma.1.src.rpm">
          <filename>firefox-115.10.0-1.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">717d1e927a78f1eef51bcd8e9247d80709d96ed35e51b73b78987cf73dd5a1d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1940</id>
    <title>Low: thunderbird security update</title>
    <issued date="2024-04-22 00:00:00"/>
    <updated date="2024-04-29 07:48:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.10.0.

Security Fix(es):

* Mozilla: Denial of Service using HTTP/2 CONTINUATION frames (CVE-2024-3302)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1940" id="RHSA-2024:1940" type="rhsa" title="RHSA-2024:1940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2609" id="CVE-2024-2609" type="cve" title="CVE-2024-2609"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3302" id="CVE-2024-3302" type="cve" title="CVE-2024-3302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3852" id="CVE-2024-3852" type="cve" title="CVE-2024-3852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3854" id="CVE-2024-3854" type="cve" title="CVE-2024-3854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3857" id="CVE-2024-3857" type="cve" title="CVE-2024-3857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3859" id="CVE-2024-3859" type="cve" title="CVE-2024-3859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3861" id="CVE-2024-3861" type="cve" title="CVE-2024-3861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3864" id="CVE-2024-3864" type="cve" title="CVE-2024-3864"/>
      <reference href="https://bugzilla.redhat.com/2273383" id="2273383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275547" id="2275547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275549" id="2275549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275550" id="2275550" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275551" id="2275551" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275552" id="2275552" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275553" id="2275553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275555" id="2275555" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1940.html" id="ALSA-2024:1940" type="self" title="ALSA-2024:1940"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="thunderbird" version="115.10.0" release="2.el9_3.alma.1" epoch="0" arch="s390x" src="thunderbird-115.10.0-2.el9_3.alma.1.src.rpm">
          <filename>thunderbird-115.10.0-2.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">ff78f7419e7468718e2a1c4d770ca03752dfefafe5a7ce4421575746f0b272dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1963</id>
    <title>Important: golang security update</title>
    <issued date="2024-04-23 00:00:00"/>
    <updated date="2024-04-29 07:53:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.

Security Fix(es):

* golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1963" id="RHSA-2024:1963" type="rhsa" title="RHSA-2024:1963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45288" id="CVE-2023-45288" type="cve" title="CVE-2023-45288"/>
      <reference href="https://bugzilla.redhat.com/2268273" id="2268273" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1963.html" id="ALSA-2024:1963" type="self" title="ALSA-2024:1963"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="go-toolset" version="1.20.12" release="4.el9_3" epoch="0" arch="s390x" src="golang-1.20.12-4.el9_3.src.rpm">
          <filename>go-toolset-1.20.12-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">008721b4fc66fe94c7206366ea233feb4851b06ef85feb2fd71d86743122d1e0</sum>
        </package>
        <package name="golang-docs" version="1.20.12" release="4.el9_3" epoch="0" arch="noarch" src="golang-1.20.12-4.el9_3.src.rpm">
          <filename>golang-docs-1.20.12-4.el9_3.noarch.rpm</filename>
          <sum type="sha256">2ee34144c6fa1a12f1ac5f287d3860b0728042489fe9f5fa18b39670bde4f55a</sum>
        </package>
        <package name="golang-tests" version="1.20.12" release="4.el9_3" epoch="0" arch="noarch" src="golang-1.20.12-4.el9_3.src.rpm">
          <filename>golang-tests-1.20.12-4.el9_3.noarch.rpm</filename>
          <sum type="sha256">3a5fd7b0bc28197c3bb3c85bd87cd5b1746f9c32d95bbff8336b8d5312b211f7</sum>
        </package>
        <package name="golang-src" version="1.20.12" release="4.el9_3" epoch="0" arch="noarch" src="golang-1.20.12-4.el9_3.src.rpm">
          <filename>golang-src-1.20.12-4.el9_3.noarch.rpm</filename>
          <sum type="sha256">4b3d61aa441caf36d71dde4418f41bd83783de9edc317744fdab14760bd6a72e</sum>
        </package>
        <package name="golang" version="1.20.12" release="4.el9_3" epoch="0" arch="s390x" src="golang-1.20.12-4.el9_3.src.rpm">
          <filename>golang-1.20.12-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">9a98e32b3de853dbea58a1e86065d4abc9a3711d0d5ffb3aa2ab5603105716a4</sum>
        </package>
        <package name="golang-misc" version="1.20.12" release="4.el9_3" epoch="0" arch="noarch" src="golang-1.20.12-4.el9_3.src.rpm">
          <filename>golang-misc-1.20.12-4.el9_3.noarch.rpm</filename>
          <sum type="sha256">e9c351910d43ecbe09ede3a784bd3e855a4f2396f4c5240fc83180b95cf69c96</sum>
        </package>
        <package name="golang-bin" version="1.20.12" release="4.el9_3" epoch="0" arch="s390x" src="golang-1.20.12-4.el9_3.src.rpm">
          <filename>golang-bin-1.20.12-4.el9_3.s390x.rpm</filename>
          <sum type="sha256">fbc23db7e79e611cda871f5b67110f42c54f6d0f8719db2735daf97bdfd003be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2033</id>
    <title>Moderate: libreswan security and bug fix update</title>
    <issued date="2024-04-24 00:00:00"/>
    <updated date="2024-04-29 07:55:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreswan security and bug fix update</summary>
    <description>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2033" id="RHSA-2024:2033" type="rhsa" title="RHSA-2024:2033"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2357" id="CVE-2024-2357" type="cve" title="CVE-2024-2357"/>
      <reference href="https://bugzilla.redhat.com/2268952" id="2268952" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2033.html" id="ALSA-2024:2033" type="self" title="ALSA-2024:2033"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="libreswan" version="4.12" release="1.el9_3.1.alma.1" epoch="0" arch="s390x" src="libreswan-4.12-1.el9_3.1.alma.1.src.rpm">
          <filename>libreswan-4.12-1.el9_3.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">331a67ec26b954e85ecb84b7b029f202e066de4ecb6e21d255c4db7de1bda44e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2055</id>
    <title>Important: buildah security update</title>
    <issued date="2024-04-25 00:00:00"/>
    <updated date="2024-04-29 07:56:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. 

Security Fix(es):

* buildah: full container escape at build time (CVE-2024-1753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2055" id="RHSA-2024:2055" type="rhsa" title="RHSA-2024:2055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1753" id="CVE-2024-1753" type="cve" title="CVE-2024-1753"/>
      <reference href="https://bugzilla.redhat.com/2265513" id="2265513" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2055.html" id="ALSA-2024:2055" type="self" title="ALSA-2024:2055"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="buildah" version="1.31.5" release="1.el9_3" epoch="1" arch="s390x" src="buildah-1.31.5-1.el9_3.src.rpm">
          <filename>buildah-1.31.5-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">5c221f7bdd805d269ffa07d0b45ef747d2332b46723bf476377fd65d128f132b</sum>
        </package>
        <package name="buildah-tests" version="1.31.5" release="1.el9_3" epoch="1" arch="s390x" src="buildah-1.31.5-1.el9_3.src.rpm">
          <filename>buildah-tests-1.31.5-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">e52c32e015c3816ee2e7df0685e74711eb0a48a2ada662fd4fb1fdb7f4797edd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2079</id>
    <title>Important: git-lfs security update</title>
    <issued date="2024-04-29 00:00:00"/>
    <updated date="2024-04-29 20:21:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

* golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288,VU#421644.3)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2079" id="RHSA-2024:2079" type="rhsa" title="RHSA-2024:2079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45288" id="CVE-2023-45288" type="cve" title="CVE-2023-45288"/>
      <reference href="https://bugzilla.redhat.com/2268273" id="2268273" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2079.html" id="ALSA-2024:2079" type="self" title="ALSA-2024:2079"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_3_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_3_default</name>
        <package name="git-lfs" version="3.2.0" release="2.el9_3" epoch="0" arch="s390x" src="git-lfs-3.2.0-2.el9_3.src.rpm">
          <filename>git-lfs-3.2.0-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">caddf353a32918639b640e100a43eaa089d6cf57b6f1696b748bd4084b7a8d5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2119</id>
    <title>Moderate: Image builder components bug fix, enhancement and security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:55:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>Image builder components bug fix, enhancement and security update</summary>
    <description>Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood.

Security Fix(es):

* osbuild-composer: race condition may disable GPG verification for package repositories (CVE-2024-2307)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2119" id="RHSA-2024:2119" type="rhsa" title="RHSA-2024:2119"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2307" id="CVE-2024-2307" type="cve" title="CVE-2024-2307"/>
      <reference href="https://bugzilla.redhat.com/2268513" id="2268513" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2119.html" id="ALSA-2024:2119" type="self" title="ALSA-2024:2119"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="osbuild-composer-worker" version="101" release="1.el9.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-1.el9.alma.1.src.rpm">
          <filename>osbuild-composer-worker-101-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">13e57603eb082040dbb4e401fe2dd897899341f45129b5965a4e5169a7629b41</sum>
        </package>
        <package name="osbuild-composer-core" version="101" release="1.el9.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-1.el9.alma.1.src.rpm">
          <filename>osbuild-composer-core-101-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e3fb112aac95393659f8e39ac967ee44cf66054342090acdd73d5eecf6221e10</sum>
        </package>
        <package name="osbuild-composer" version="101" release="1.el9.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-1.el9.alma.1.src.rpm">
          <filename>osbuild-composer-101-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">fc32118d8dcb3dfa5ee7ed8da621a2bc9fe436ed8a3fb73b5b6d63b69bd71dae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2126</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:57:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)
* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)
* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213)
* webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745)
* webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)
* webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)
* webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)
* webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)
* webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)
* webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2126" id="RHSA-2024:2126" type="rhsa" title="RHSA-2024:2126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2014-1745" id="CVE-2014-1745" type="cve" title="CVE-2014-1745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32359" id="CVE-2023-32359" type="cve" title="CVE-2023-32359"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39928" id="CVE-2023-39928" type="cve" title="CVE-2023-39928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40414" id="CVE-2023-40414" type="cve" title="CVE-2023-40414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41983" id="CVE-2023-41983" type="cve" title="CVE-2023-41983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42852" id="CVE-2023-42852" type="cve" title="CVE-2023-42852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42883" id="CVE-2023-42883" type="cve" title="CVE-2023-42883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42890" id="CVE-2023-42890" type="cve" title="CVE-2023-42890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23206" id="CVE-2024-23206" type="cve" title="CVE-2024-23206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23213" id="CVE-2024-23213" type="cve" title="CVE-2024-23213"/>
      <reference href="https://bugzilla.redhat.com/2241400" id="2241400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254326" id="2254326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254327" id="2254327" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269743" id="2269743" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270141" id="2270141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270143" id="2270143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270151" id="2270151" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271449" id="2271449" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271453" id="2271453" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271456" id="2271456" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2126.html" id="ALSA-2024:2126" type="self" title="ALSA-2024:2126"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="webkit2gtk3-devel" version="2.42.5" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.42.5-1.el9.src.rpm">
          <filename>webkit2gtk3-devel-2.42.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">22bd2911df91aeab4aead0d92c22854b32a621dd9cc5a7e9a2447e8103b6b257</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.42.5" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.42.5-1.el9.src.rpm">
          <filename>webkit2gtk3-jsc-2.42.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">34578b86856b5ff435775986ca85342c2d1fb153e3ea2006ac95208820c0d622</sum>
        </package>
        <package name="webkit2gtk3" version="2.42.5" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.42.5-1.el9.src.rpm">
          <filename>webkit2gtk3-2.42.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">7fb58051b536be74bfcca11ad851e5bdefee1d5ffa443c60d7b8461d2b9956b9</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.42.5" release="1.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.42.5-1.el9.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.42.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">d1fb2046a65059a7fa1bf8ea87b824d2d0f2ed654e1165c2162d9e4c7c8abbce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2132</id>
    <title>Moderate: fence-agents security and bug fix update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:08:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security and bug fix update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. 

Security Fix(es):

* urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803)
* pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323)
* jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2132" id="RHSA-2024:2132" type="rhsa" title="RHSA-2024:2132"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45803" id="CVE-2023-45803" type="cve" title="CVE-2023-45803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52323" id="CVE-2023-52323" type="cve" title="CVE-2023-52323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22195" id="CVE-2024-22195" type="cve" title="CVE-2024-22195"/>
      <reference href="https://bugzilla.redhat.com/2246840" id="2246840" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257028" id="2257028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257854" id="2257854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2132.html" id="ALSA-2024:2132" type="self" title="ALSA-2024:2132"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="fence-agents-ibm-powervs" version="4.10.0" release="62.el9" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9.src.rpm">
          <filename>fence-agents-ibm-powervs-4.10.0-62.el9.noarch.rpm</filename>
          <sum type="sha256">210fde9bca7cfa78ea2a0af44508b12e00780dfbe06e95c394765aa7b43a02e7</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.10.0" release="62.el9" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9.src.rpm">
          <filename>fence-agents-ibm-vpc-4.10.0-62.el9.noarch.rpm</filename>
          <sum type="sha256">7de2e69a7d2f0cec06dc88b851e2b7e7fa3ee45cab5e8a927a5aae59d6af837b</sum>
        </package>
        <package name="fence-agents-virsh" version="4.10.0" release="62.el9" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9.src.rpm">
          <filename>fence-agents-virsh-4.10.0-62.el9.noarch.rpm</filename>
          <sum type="sha256">a1d8d69a0d0ef8fe7ea1589214340121fee9cf64ad705a9b859086356b5cebbe</sum>
        </package>
        <package name="fence-agents-common" version="4.10.0" release="62.el9" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9.src.rpm">
          <filename>fence-agents-common-4.10.0-62.el9.noarch.rpm</filename>
          <sum type="sha256">a5867c0ce0bdae504b066f42a12ff1903ac5d918bc03fca12a3ab48242558673</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.10.0" release="62.el9" epoch="0" arch="s390x" src="fence-agents-4.10.0-62.el9.src.rpm">
          <filename>fence-agents-kubevirt-4.10.0-62.el9.s390x.rpm</filename>
          <sum type="sha256">bd46bdbab35110106cf3eaa1fbe78154d6c154e956e321760f6c640ed0da37d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2135</id>
    <title>Moderate: qemu-kvm security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:03:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qemu-kvm security update</summary>
    <description>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

* QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() (CVE-2023-3019)
* QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service (CVE-2023-3255)
* QEMU: improper IDE controller reset can lead to MBR overwrite (CVE-2023-5088)
* QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() (CVE-2023-6683)
* QEMU: am53c974: denial of service due to division by zero (CVE-2023-42467)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2135" id="RHSA-2024:2135" type="rhsa" title="RHSA-2024:2135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3019" id="CVE-2023-3019" type="cve" title="CVE-2023-3019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3255" id="CVE-2023-3255" type="cve" title="CVE-2023-3255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42467" id="CVE-2023-42467" type="cve" title="CVE-2023-42467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5088" id="CVE-2023-5088" type="cve" title="CVE-2023-5088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6683" id="CVE-2023-6683" type="cve" title="CVE-2023-6683"/>
      <reference href="https://bugzilla.redhat.com/2218486" id="2218486" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222351" id="2222351" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238291" id="2238291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247283" id="2247283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254825" id="2254825" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2135.html" id="ALSA-2024:2135" type="self" title="ALSA-2024:2135"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="qemu-kvm-block-blkio" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-kvm-block-blkio-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">15621caab9baa6b48a108e92d7bff35a8a29acdae9467ad1cb65a19ccb504ed3</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu-ccw" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-ccw-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">329c534475077a25db0597a4e72b77d172d164ed61519dba0974ca39988d41e5</sum>
        </package>
        <package name="qemu-pr-helper" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-pr-helper-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">5d08fd2cca586890b06e6c428dd7010be59706467c72e24ec7268862da46a099</sum>
        </package>
        <package name="qemu-kvm-docs" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-kvm-docs-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">62ef7836d79d064f36ed4605bf07a3a810e8696f8cb50fff113887083821a74a</sum>
        </package>
        <package name="qemu-kvm-audio-pa" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-kvm-audio-pa-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">796de787a44adaab384e58db96f9f71207ae6ae6a1a04b7bb46a2c41264f1775</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-kvm-block-curl-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">8a7462ffa1596f609bd4dc641dc8b7f9ff38029d94535f81edd85113f0f0a596</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">91cc9c4d3659de8cbde139e12e7fd3ebfc5b4c662ad7b0e34a78568ed329012d</sum>
        </package>
        <package name="qemu-kvm" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-kvm-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">9dbcdd56bcad71799f4872f00f07407692541b497a2568cb386360731484db05</sum>
        </package>
        <package name="qemu-guest-agent" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-guest-agent-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">9f2c7450bd60f99d3a494fe3507be74e9563b340ff289dc16f960f0633b480a5</sum>
        </package>
        <package name="qemu-img" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-img-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">b1c4a7e4a1573ca5f9f666067c702d36cd6b4dbcce59fb601b6f256584f48db4</sum>
        </package>
        <package name="qemu-kvm-tools" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-kvm-tools-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">bade6d8542a70127841d8f8e30bb61a020d126eb68e8a2b4aae54355c3a9eb50</sum>
        </package>
        <package name="qemu-kvm-device-usb-host" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-kvm-device-usb-host-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">be825de4a6736ac6670faf1c8a4f971b94acb5c91d3e13cdbd8cbd6684036ba5</sum>
        </package>
        <package name="qemu-kvm-core" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-kvm-core-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">d5a8dcd404fdff68203c841a64900e295f9b20a87a3606026bff72f8a647cdf1</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-kvm-block-rbd-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">fbf0bf7d2b05ed58f2eac7bb42b02348a4b4a02f51fb25e2d6241bb4c1406fa2</sum>
        </package>
        <package name="qemu-kvm-common" version="8.2.0" release="11.el9_4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.src.rpm">
          <filename>qemu-kvm-common-8.2.0-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">fe2671f7aebce818a75399d873cb850da2aa6eaeba2e0caa6136431822d58247</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2137</id>
    <title>Low: LibRaw security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>LibRaw security update</summary>
    <description>LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).

Security Fix(es):

* LibRaw: a heap-buffer-overflow in raw2image_ex() (CVE-2023-1729)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2137" id="RHSA-2024:2137" type="rhsa" title="RHSA-2024:2137"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1729" id="CVE-2023-1729" type="cve" title="CVE-2023-1729"/>
      <reference href="https://bugzilla.redhat.com/2188240" id="2188240" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2137.html" id="ALSA-2024:2137" type="self" title="ALSA-2024:2137"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="LibRaw" version="0.21.1" release="1.el9" epoch="0" arch="s390x" src="LibRaw-0.21.1-1.el9.src.rpm">
          <filename>LibRaw-0.21.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">185314b15dff91f800f476232c11cfc8608a97d7d0832853438384733cd30059</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2145</id>
    <title>Moderate: libX11 security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:05:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libX11 security update</summary>
    <description>The libX11 packages contain the core X11 protocol client library.

Security Fix(es):

* libX11: out-of-bounds memory access in _XkbReadKeySyms() (CVE-2023-43785)
* libX11: stack exhaustion from infinite recursion in PutSubImage() (CVE-2023-43786)
* libX11: integer overflow in XCreateImage() leading to a heap overflow (CVE-2023-43787)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2145" id="RHSA-2024:2145" type="rhsa" title="RHSA-2024:2145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43785" id="CVE-2023-43785" type="cve" title="CVE-2023-43785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43786" id="CVE-2023-43786" type="cve" title="CVE-2023-43786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43787" id="CVE-2023-43787" type="cve" title="CVE-2023-43787"/>
      <reference href="https://bugzilla.redhat.com/2242252" id="2242252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242253" id="2242253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242254" id="2242254" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2145.html" id="ALSA-2024:2145" type="self" title="ALSA-2024:2145"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libX11" version="1.7.0" release="9.el9" epoch="0" arch="s390x" src="libX11-1.7.0-9.el9.src.rpm">
          <filename>libX11-1.7.0-9.el9.s390x.rpm</filename>
          <sum type="sha256">05c60275551b76c57cbfdf761c9145b7a813cda20de0e435d69fbba7b52a8de0</sum>
        </package>
        <package name="libX11-devel" version="1.7.0" release="9.el9" epoch="0" arch="s390x" src="libX11-1.7.0-9.el9.src.rpm">
          <filename>libX11-devel-1.7.0-9.el9.s390x.rpm</filename>
          <sum type="sha256">52a91b26b95c4aec652813185206eac0eed235ec0fa1c411bcfb13f22e193676</sum>
        </package>
        <package name="libX11-xcb" version="1.7.0" release="9.el9" epoch="0" arch="s390x" src="libX11-1.7.0-9.el9.src.rpm">
          <filename>libX11-xcb-1.7.0-9.el9.s390x.rpm</filename>
          <sum type="sha256">78e996037735d5faa745e3b7f285148d3922eeb6a2301de761864054b511938d</sum>
        </package>
        <package name="libX11-common" version="1.7.0" release="9.el9" epoch="0" arch="noarch" src="libX11-1.7.0-9.el9.src.rpm">
          <filename>libX11-common-1.7.0-9.el9.noarch.rpm</filename>
          <sum type="sha256">9db43557989cf17a44ff936cd59d632d0105f4c231f41317fd063de21d9ec0e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2146</id>
    <title>Moderate: libXpm security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libXpm security update</summary>
    <description>X.Org X11 libXpm runtime library.

Security Fix(es):

* libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788)
* libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2146" id="RHSA-2024:2146" type="rhsa" title="RHSA-2024:2146"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43788" id="CVE-2023-43788" type="cve" title="CVE-2023-43788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43789" id="CVE-2023-43789" type="cve" title="CVE-2023-43789"/>
      <reference href="https://bugzilla.redhat.com/2242248" id="2242248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242249" id="2242249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2146.html" id="ALSA-2024:2146" type="self" title="ALSA-2024:2146"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libXpm" version="3.5.13" release="10.el9" epoch="0" arch="s390x" src="libXpm-3.5.13-10.el9.src.rpm">
          <filename>libXpm-3.5.13-10.el9.s390x.rpm</filename>
          <sum type="sha256">9e8d3f001082e3d81f277b3f3b1d457084f2469941c7a30896c8f8a300fb0011</sum>
        </package>
        <package name="libXpm-devel" version="3.5.13" release="10.el9" epoch="0" arch="s390x" src="libXpm-3.5.13-10.el9.src.rpm">
          <filename>libXpm-devel-3.5.13-10.el9.s390x.rpm</filename>
          <sum type="sha256">bec95c2ff3484a97df00e6ccd4cb563d902dc8e906d152b6f64c4d0687267e09</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2147</id>
    <title>Moderate: ipa security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:22:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* freeipa: specially crafted HTTP requests potentially lead to denial of service (CVE-2024-1481)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2147" id="RHSA-2024:2147" type="rhsa" title="RHSA-2024:2147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1481" id="CVE-2024-1481" type="cve" title="CVE-2024-1481"/>
      <reference href="https://bugzilla.redhat.com/2262169" id="2262169" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2147.html" id="ALSA-2024:2147" type="self" title="ALSA-2024:2147"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="ipa-client-samba" version="4.11.0" release="9.el9_4" epoch="0" arch="s390x" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>ipa-client-samba-4.11.0-9.el9_4.s390x.rpm</filename>
          <sum type="sha256">03ea17e45e07621bfad0fe9013eb6b2d8c005706b182fe1e492edf5cf9965bf7</sum>
        </package>
        <package name="ipa-selinux" version="4.11.0" release="9.el9_4" epoch="0" arch="noarch" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>ipa-selinux-4.11.0-9.el9_4.noarch.rpm</filename>
          <sum type="sha256">08e9c818b6865cd30fd5ab517fe50c550f6a148d9ca30ed86066e8ef6c4b4c0c</sum>
        </package>
        <package name="ipa-server" version="4.11.0" release="9.el9_4" epoch="0" arch="s390x" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>ipa-server-4.11.0-9.el9_4.s390x.rpm</filename>
          <sum type="sha256">14e411eba988c07e37d835ef57302c9c14c91b91225b2fca298b0c34e5bdf97d</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.11.0" release="9.el9_4" epoch="0" arch="s390x" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>ipa-server-trust-ad-4.11.0-9.el9_4.s390x.rpm</filename>
          <sum type="sha256">1915e8d2b50eeb1b54605c153714305112acc6b2a2c1e6befd86bd1ecba98d9a</sum>
        </package>
        <package name="ipa-client-common" version="4.11.0" release="9.el9_4" epoch="0" arch="noarch" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>ipa-client-common-4.11.0-9.el9_4.noarch.rpm</filename>
          <sum type="sha256">1ab0480879b73c23e4cbdb845320a83e387ba2625089f785e7cb8e52195a1067</sum>
        </package>
        <package name="ipa-client" version="4.11.0" release="9.el9_4" epoch="0" arch="s390x" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>ipa-client-4.11.0-9.el9_4.s390x.rpm</filename>
          <sum type="sha256">2ed762cb873b6b0b9d3f22557788b118637df6c02a69b3be6a8dddf2d64d4c16</sum>
        </package>
        <package name="python3-ipaserver" version="4.11.0" release="9.el9_4" epoch="0" arch="noarch" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>python3-ipaserver-4.11.0-9.el9_4.noarch.rpm</filename>
          <sum type="sha256">76e822e20c9c40335530199c5769e7144883bd9506cc44cc7aaf16a96d5764d9</sum>
        </package>
        <package name="python3-ipalib" version="4.11.0" release="9.el9_4" epoch="0" arch="noarch" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>python3-ipalib-4.11.0-9.el9_4.noarch.rpm</filename>
          <sum type="sha256">7bcff5ae7212f01d767c97102900c6362dca72812f54fa211c8d41b28bff7afe</sum>
        </package>
        <package name="ipa-client-epn" version="4.11.0" release="9.el9_4" epoch="0" arch="s390x" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>ipa-client-epn-4.11.0-9.el9_4.s390x.rpm</filename>
          <sum type="sha256">89ae6b9d44eeecf8a568a53eae209c7d0896b1f5896b0636230b9c9f05cbea35</sum>
        </package>
        <package name="python3-ipaclient" version="4.11.0" release="9.el9_4" epoch="0" arch="noarch" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>python3-ipaclient-4.11.0-9.el9_4.noarch.rpm</filename>
          <sum type="sha256">8f7f9bfc29aced9dc2e0bd72d04b9cd14638283efcc496bcfabec9ffea9b3ca1</sum>
        </package>
        <package name="ipa-server-common" version="4.11.0" release="9.el9_4" epoch="0" arch="noarch" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>ipa-server-common-4.11.0-9.el9_4.noarch.rpm</filename>
          <sum type="sha256">97beb0eb751268c2f53651231270b943d4d4735a085c59c47a445edf2d8218b8</sum>
        </package>
        <package name="ipa-common" version="4.11.0" release="9.el9_4" epoch="0" arch="noarch" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>ipa-common-4.11.0-9.el9_4.noarch.rpm</filename>
          <sum type="sha256">cdf47c0e6f60a0bfd2a30c694fc302e0e7ad41f77aef5befa2cea3653404a481</sum>
        </package>
        <package name="ipa-server-dns" version="4.11.0" release="9.el9_4" epoch="0" arch="noarch" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>ipa-server-dns-4.11.0-9.el9_4.noarch.rpm</filename>
          <sum type="sha256">d1f4d0ec69f218a9cee7dee67a4e91b7da227cf843abbe2a153532ed78979a35</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2156</id>
    <title>Moderate: frr security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:04:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>frr security update</summary>
    <description>FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. 

Security Fix(es):

* frr: incorrect length check in bgp_capability_llgr() can lead do DoS (CVE-2023-31489)
* frr: missing length check in bgp_attr_psid_sub() can lead do DoS (CVE-2023-31490)
* frr: processes invalid NLRIs if attribute length is zero (CVE-2023-41358)
* frr: out of bounds read in bgp_attr_aigp_valid (CVE-2023-41359)
* frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c (CVE-2023-41909)
* frr: mishandled malformed data leading to a crash (CVE-2023-46752)
* frr: crafted BGP UPDATE message leading to a crash (CVE-2023-46753)
* frr: ahead-of-stream read of ORF header (CVE-2023-41360)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2156" id="RHSA-2024:2156" type="rhsa" title="RHSA-2024:2156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31489" id="CVE-2023-31489" type="cve" title="CVE-2023-31489"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31490" id="CVE-2023-31490" type="cve" title="CVE-2023-31490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41358" id="CVE-2023-41358" type="cve" title="CVE-2023-41358"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41359" id="CVE-2023-41359" type="cve" title="CVE-2023-41359"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41360" id="CVE-2023-41360" type="cve" title="CVE-2023-41360"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41909" id="CVE-2023-41909" type="cve" title="CVE-2023-41909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46752" id="CVE-2023-46752" type="cve" title="CVE-2023-46752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46753" id="CVE-2023-46753" type="cve" title="CVE-2023-46753"/>
      <reference href="https://bugzilla.redhat.com/2235839" id="2235839" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2235840" id="2235840" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2235842" id="2235842" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237416" id="2237416" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238990" id="2238990" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238992" id="2238992" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2246379" id="2246379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2246381" id="2246381" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2156.html" id="ALSA-2024:2156" type="self" title="ALSA-2024:2156"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="frr" version="8.5.3" release="4.el9" epoch="0" arch="s390x" src="frr-8.5.3-4.el9.src.rpm">
          <filename>frr-8.5.3-4.el9.s390x.rpm</filename>
          <sum type="sha256">0bc0e6fde4df305f69c51a06fd76ed52d2ba355f724a280b01948fa8a1c2047d</sum>
        </package>
        <package name="frr-selinux" version="8.5.3" release="4.el9" epoch="0" arch="noarch" src="frr-8.5.3-4.el9.src.rpm">
          <filename>frr-selinux-8.5.3-4.el9.noarch.rpm</filename>
          <sum type="sha256">f85f64a1fb71053e0f2877d7703451ebadd7b820fa527fd6d06fe4022eb842c2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2159</id>
    <title>Moderate: python3.11-urllib3 security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:04:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-urllib3 security update</summary>
    <description>The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities.

Security Fix(es):

* python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2159" id="RHSA-2024:2159" type="rhsa" title="RHSA-2024:2159"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43804" id="CVE-2023-43804" type="cve" title="CVE-2023-43804"/>
      <reference href="https://bugzilla.redhat.com/2242493" id="2242493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2159.html" id="ALSA-2024:2159" type="self" title="ALSA-2024:2159"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.11-urllib3" version="1.26.12" release="2.el9" epoch="0" arch="noarch" src="python3.11-urllib3-1.26.12-2.el9.src.rpm">
          <filename>python3.11-urllib3-1.26.12-2.el9.noarch.rpm</filename>
          <sum type="sha256">d8112f2b32b9d20ea46dd3d97d879f50ea39a56b348424644f799b5aa7ef7ccf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2160</id>
    <title>Moderate: toolbox security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>toolbox security update</summary>
    <description>Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI.

Security Fix(es):

* golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318)
* golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319)
* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2160" id="RHSA-2024:2160" type="rhsa" title="RHSA-2024:2160"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39318" id="CVE-2023-39318" type="cve" title="CVE-2023-39318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39319" id="CVE-2023-39319" type="cve" title="CVE-2023-39319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39326" id="CVE-2023-39326" type="cve" title="CVE-2023-39326"/>
      <reference href="https://bugzilla.redhat.com/2237773" id="2237773" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237776" id="2237776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253330" id="2253330" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2160.html" id="ALSA-2024:2160" type="self" title="ALSA-2024:2160"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="toolbox-tests" version="0.0.99.5" release="2.el9" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.el9.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.el9.s390x.rpm</filename>
          <sum type="sha256">160ab589efdb1e92d1b1bc530915309a3a4fa9b61b19022ec8b0b50b6fe6ac68</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.el9" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.el9.src.rpm">
          <filename>toolbox-0.0.99.5-2.el9.s390x.rpm</filename>
          <sum type="sha256">9d10eeceb65597b8a42dbccc4fc5216ab97d1d1e9ccccaefa08647083f41d65f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2169</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:00:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
* xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
* xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
* xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)
* xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
* xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
* xorg-x11-server: SELinux context corruption (CVE-2024-0409)
* xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
* xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)
* xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2169" id="RHSA-2024:2169" type="rhsa" title="RHSA-2024:2169"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5367" id="CVE-2023-5367" type="cve" title="CVE-2023-5367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5380" id="CVE-2023-5380" type="cve" title="CVE-2023-5380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6377" id="CVE-2023-6377" type="cve" title="CVE-2023-6377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6478" id="CVE-2023-6478" type="cve" title="CVE-2023-6478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6816" id="CVE-2023-6816" type="cve" title="CVE-2023-6816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0229" id="CVE-2024-0229" type="cve" title="CVE-2024-0229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0408" id="CVE-2024-0408" type="cve" title="CVE-2024-0408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0409" id="CVE-2024-0409" type="cve" title="CVE-2024-0409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21885" id="CVE-2024-21885" type="cve" title="CVE-2024-21885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21886" id="CVE-2024-21886" type="cve" title="CVE-2024-21886"/>
      <reference href="https://bugzilla.redhat.com/2243091" id="2243091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244736" id="2244736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253291" id="2253291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253298" id="2253298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256540" id="2256540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256542" id="2256542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256690" id="2256690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257689" id="2257689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257690" id="2257690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257691" id="2257691" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2169.html" id="ALSA-2024:2169" type="self" title="ALSA-2024:2169"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="24.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-24.el9.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-24.el9.s390x.rpm</filename>
          <sum type="sha256">7b885dbbe768f774a7ca8f1b1c1b8d07e5d05c22c3f507001eb4e791e970c0aa</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="24.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-24.el9.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-24.el9.s390x.rpm</filename>
          <sum type="sha256">a86fe21247a3561a56a0f7729bce9ce3a88eaa08788fd9f1560b7eb58b67138c</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="24.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-24.el9.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-24.el9.s390x.rpm</filename>
          <sum type="sha256">b7470157ea9c444fcf62d7aaac7f9950da9e20e12a0a42c47913fa491e767774</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="24.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-24.el9.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-24.el9.s390x.rpm</filename>
          <sum type="sha256">c53bacd84ed607fa33fa7b2df6ffc5a21ccc8ecd9bfada6b43d29b7993945a04</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="24.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-24.el9.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-24.el9.s390x.rpm</filename>
          <sum type="sha256">cc57901c002280ea3b3c0010993f71f136e75743bd892222abf20bd115271ebd</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="24.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-24.el9.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-24.el9.s390x.rpm</filename>
          <sum type="sha256">f71b78fa2c95cc438340abd3dd9cc75d4d0cf84eef54537720f64813eb8c2199</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2170</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
* xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
* xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
* xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)
* xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
* xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
* xorg-x11-server: SELinux context corruption (CVE-2024-0409)
* xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
* xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2170" id="RHSA-2024:2170" type="rhsa" title="RHSA-2024:2170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5367" id="CVE-2023-5367" type="cve" title="CVE-2023-5367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6377" id="CVE-2023-6377" type="cve" title="CVE-2023-6377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6478" id="CVE-2023-6478" type="cve" title="CVE-2023-6478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6816" id="CVE-2023-6816" type="cve" title="CVE-2023-6816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0229" id="CVE-2024-0229" type="cve" title="CVE-2024-0229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0408" id="CVE-2024-0408" type="cve" title="CVE-2024-0408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0409" id="CVE-2024-0409" type="cve" title="CVE-2024-0409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21885" id="CVE-2024-21885" type="cve" title="CVE-2024-21885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21886" id="CVE-2024-21886" type="cve" title="CVE-2024-21886"/>
      <reference href="https://bugzilla.redhat.com/2243091" id="2243091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253291" id="2253291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253298" id="2253298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256540" id="2256540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256542" id="2256542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256690" id="2256690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257689" id="2257689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257690" id="2257690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257691" id="2257691" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2170.html" id="ALSA-2024:2170" type="self" title="ALSA-2024:2170"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="xorg-x11-server-Xwayland" version="22.1.9" release="5.el9" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-22.1.9-5.el9.src.rpm">
          <filename>xorg-x11-server-Xwayland-22.1.9-5.el9.s390x.rpm</filename>
          <sum type="sha256">878b2ae2c9bf8877511b8dc4afc3d985c8b708d23649ffaca0065a6e1e49ee49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2180</id>
    <title>Moderate: runc security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>runc security update</summary>
    <description>The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.

Security Fix(es):

* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2180" id="RHSA-2024:2180" type="rhsa" title="RHSA-2024:2180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30630" id="CVE-2022-30630" type="cve" title="CVE-2022-30630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30631" id="CVE-2022-30631" type="cve" title="CVE-2022-30631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30632" id="CVE-2022-30632" type="cve" title="CVE-2022-30632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45287" id="CVE-2023-45287" type="cve" title="CVE-2023-45287"/>
      <reference href="https://bugzilla.redhat.com/2107342" id="2107342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107371" id="2107371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107386" id="2107386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253193" id="2253193" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2180.html" id="ALSA-2024:2180" type="self" title="ALSA-2024:2180"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="runc" version="1.1.12" release="2.el9" epoch="4" arch="s390x" src="runc-1.1.12-2.el9.src.rpm">
          <filename>runc-1.1.12-2.el9.s390x.rpm</filename>
          <sum type="sha256">ca2ba567e1d1152d64c8cd51681edbb9f44020a82b4f1dc0decef053922c33d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2184</id>
    <title>Moderate: libsndfile security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsndfile security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. 

Security Fix(es):

* libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2184" id="RHSA-2024:2184" type="rhsa" title="RHSA-2024:2184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33065" id="CVE-2022-33065" type="cve" title="CVE-2022-33065"/>
      <reference href="https://bugzilla.redhat.com/2238934" id="2238934" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2184.html" id="ALSA-2024:2184" type="self" title="ALSA-2024:2184"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libsndfile-utils" version="1.0.31" release="8.el9" epoch="0" arch="s390x" src="libsndfile-1.0.31-8.el9.src.rpm">
          <filename>libsndfile-utils-1.0.31-8.el9.s390x.rpm</filename>
          <sum type="sha256">6325dea8d923ff74244a4d96b2f40c7ccbf0d5de4fd47be11dd41e8a8eb1bbec</sum>
        </package>
        <package name="libsndfile" version="1.0.31" release="8.el9" epoch="0" arch="s390x" src="libsndfile-1.0.31-8.el9.src.rpm">
          <filename>libsndfile-1.0.31-8.el9.s390x.rpm</filename>
          <sum type="sha256">872dac99f1021f8130a7387004026dabc50ebadd96a0659b4c0f61eeb7921522</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2193</id>
    <title>Moderate: podman security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:12:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)
* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2193" id="RHSA-2024:2193" type="rhsa" title="RHSA-2024:2193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39326" id="CVE-2023-39326" type="cve" title="CVE-2023-39326"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45287" id="CVE-2023-45287" type="cve" title="CVE-2023-45287"/>
      <reference href="https://bugzilla.redhat.com/2253193" id="2253193" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253330" id="2253330" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2193.html" id="ALSA-2024:2193" type="self" title="ALSA-2024:2193"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="podman-docker" version="4.9.4" release="0.1.el9" epoch="2" arch="noarch" src="podman-4.9.4-0.1.el9.src.rpm">
          <filename>podman-docker-4.9.4-0.1.el9.noarch.rpm</filename>
          <sum type="sha256">04afa407dea5eda0adee572d48983857be667cfa665ef8f5d9ad1479e385e0c0</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="0.1.el9" epoch="2" arch="s390x" src="podman-4.9.4-0.1.el9.src.rpm">
          <filename>podman-plugins-4.9.4-0.1.el9.s390x.rpm</filename>
          <sum type="sha256">3bd75cbd6ea9758fdeecf98fede6269856f9516a18c1bab6c202c445ee9d09a8</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="0.1.el9" epoch="2" arch="s390x" src="podman-4.9.4-0.1.el9.src.rpm">
          <filename>podman-remote-4.9.4-0.1.el9.s390x.rpm</filename>
          <sum type="sha256">7598969d8d21b219a57827160e206084908bd5cfc02098f596e723ecee34044d</sum>
        </package>
        <package name="podman" version="4.9.4" release="0.1.el9" epoch="2" arch="s390x" src="podman-4.9.4-0.1.el9.src.rpm">
          <filename>podman-4.9.4-0.1.el9.s390x.rpm</filename>
          <sum type="sha256">f7ad1a8feba0c5ee0759db933f912821cf9dcccefd6e5c8b08fd04f4d727cfd1</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="0.1.el9" epoch="2" arch="s390x" src="podman-4.9.4-0.1.el9.src.rpm">
          <filename>podman-tests-4.9.4-0.1.el9.s390x.rpm</filename>
          <sum type="sha256">fa45e5a3a499401a3f9d807288ebd738142dd7f425a0901101ef0227db2bc529</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2199</id>
    <title>Important: pmix security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:57:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pmix security update</summary>
    <description>The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes.

Security Fix(es):

* pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2199" id="RHSA-2024:2199" type="rhsa" title="RHSA-2024:2199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41915" id="CVE-2023-41915" type="cve" title="CVE-2023-41915"/>
      <reference href="https://bugzilla.redhat.com/2238898" id="2238898" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2199.html" id="ALSA-2024:2199" type="self" title="ALSA-2024:2199"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="pmix-tools" version="3.2.3" release="5.el9" epoch="0" arch="s390x" src="pmix-3.2.3-5.el9.src.rpm">
          <filename>pmix-tools-3.2.3-5.el9.s390x.rpm</filename>
          <sum type="sha256">14bc8b3730f97364320bcc0164e357b874e843d19656b9cc05713c2e0cf4d497</sum>
        </package>
        <package name="pmix-pmi" version="3.2.3" release="5.el9" epoch="0" arch="s390x" src="pmix-3.2.3-5.el9.src.rpm">
          <filename>pmix-pmi-3.2.3-5.el9.s390x.rpm</filename>
          <sum type="sha256">7a40f1a87b633dcfd6f315d66eb99b75da22ff4f5b68b97fe13a46b88baaf6c1</sum>
        </package>
        <package name="pmix-devel" version="3.2.3" release="5.el9" epoch="0" arch="s390x" src="pmix-3.2.3-5.el9.src.rpm">
          <filename>pmix-devel-3.2.3-5.el9.s390x.rpm</filename>
          <sum type="sha256">8f2f7e014cec444c2fe43874faf35873c71106fca5260c69fdd9419767744e23</sum>
        </package>
        <package name="pmix" version="3.2.3" release="5.el9" epoch="0" arch="s390x" src="pmix-3.2.3-5.el9.src.rpm">
          <filename>pmix-3.2.3-5.el9.s390x.rpm</filename>
          <sum type="sha256">dfd27eae4506eede32e4a7887aa508c941d86cc9dd200319487fc8e9e13c690b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2204</id>
    <title>Moderate: libnbd security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:05:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libnbd security update</summary>
    <description>Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients.

Security Fix(es):

* libnbd: Malicious NBD server may crash libnbd (CVE-2023-5871)
* libnbd: Crash or misbehaviour when NBD server returns an unexpected block size (CVE-2023-5215)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2204" id="RHSA-2024:2204" type="rhsa" title="RHSA-2024:2204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5215" id="CVE-2023-5215" type="cve" title="CVE-2023-5215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5871" id="CVE-2023-5871" type="cve" title="CVE-2023-5871"/>
      <reference href="https://bugzilla.redhat.com/2241041" id="2241041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247308" id="2247308" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2204.html" id="ALSA-2024:2204" type="self" title="ALSA-2024:2204"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libnbd-bash-completion" version="1.18.1" release="3.el9" epoch="0" arch="noarch" src="libnbd-1.18.1-3.el9.src.rpm">
          <filename>libnbd-bash-completion-1.18.1-3.el9.noarch.rpm</filename>
          <sum type="sha256">330bac53c5f772da224cd145269ed56ddc486fd5b7a66fedfc609ea0869e0e24</sum>
        </package>
        <package name="python3-libnbd" version="1.18.1" release="3.el9" epoch="0" arch="s390x" src="libnbd-1.18.1-3.el9.src.rpm">
          <filename>python3-libnbd-1.18.1-3.el9.s390x.rpm</filename>
          <sum type="sha256">4e8dbf29df75e96c27086e81abb1c4b93d1ae034f7ae992cf31c4b845d118f1e</sum>
        </package>
        <package name="libnbd" version="1.18.1" release="3.el9" epoch="0" arch="s390x" src="libnbd-1.18.1-3.el9.src.rpm">
          <filename>libnbd-1.18.1-3.el9.s390x.rpm</filename>
          <sum type="sha256">59b277aef8e95a77c3dbadb9f27885bcd6c031c3470c49a5f1dc263260a35f8a</sum>
        </package>
        <package name="nbdfuse" version="1.18.1" release="3.el9" epoch="0" arch="s390x" src="libnbd-1.18.1-3.el9.src.rpm">
          <filename>nbdfuse-1.18.1-3.el9.s390x.rpm</filename>
          <sum type="sha256">cd35ffffcd4e95f45a856fb370f70794bd3f8cc6d90d2e66c53ad2170369fb50</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2208</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:55:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: Incorrect offset calculation leading to DOS (CVE-2023-39350)
* freerdp: Null Pointer Dereference leading DOS in RemoteFX (CVE-2023-39351)
* freerdp: invalid offset validation leading to Out Of Bound Write (CVE-2023-39352)
* freerdp: missing offset validation leading to Out-of-Bounds Read in gdi_multi_opaque_rect (CVE-2023-39356)
* freerdp: Integer overflow leading to out-of-bound write vulnerability in gdi_CreateSurface (CVE-2023-40186)
* freerdp: Out-of-bounds write in clear_decompress_bands_data (CVE-2023-40567)
* freerdp: Out-of-bounds write in the `progressive_decompress` function due to incorrect calculations (CVE-2023-40569)
* freerdp: buffer overflow in ncrush_decompress causes crash with crafted input (CVE-2023-40589)
* freerdp: missing offset validation leading to Out Of Bound Read (CVE-2023-39353)
* freerdp: Out-Of-Bounds Read in nsc_rle_decompress_data (CVE-2023-39354)
* freerdp: integer-Underflow leading to Out-Of-Bound Read in zgfx_decompress_segment (CVE-2023-40181)
* freerdp: Out-of-bounds read in general_LumaToYUV444 (CVE-2023-40188)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2208" id="RHSA-2024:2208" type="rhsa" title="RHSA-2024:2208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39350" id="CVE-2023-39350" type="cve" title="CVE-2023-39350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39351" id="CVE-2023-39351" type="cve" title="CVE-2023-39351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39352" id="CVE-2023-39352" type="cve" title="CVE-2023-39352"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39353" id="CVE-2023-39353" type="cve" title="CVE-2023-39353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39354" id="CVE-2023-39354" type="cve" title="CVE-2023-39354"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39356" id="CVE-2023-39356" type="cve" title="CVE-2023-39356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40181" id="CVE-2023-40181" type="cve" title="CVE-2023-40181"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40186" id="CVE-2023-40186" type="cve" title="CVE-2023-40186"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40188" id="CVE-2023-40188" type="cve" title="CVE-2023-40188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40567" id="CVE-2023-40567" type="cve" title="CVE-2023-40567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40569" id="CVE-2023-40569" type="cve" title="CVE-2023-40569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40589" id="CVE-2023-40589" type="cve" title="CVE-2023-40589"/>
      <reference href="https://bugzilla.redhat.com/2236606" id="2236606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236650" id="2236650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236656" id="2236656" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236669" id="2236669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236730" id="2236730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236750" id="2236750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236759" id="2236759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236763" id="2236763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236766" id="2236766" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236774" id="2236774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236779" id="2236779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236784" id="2236784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2208.html" id="ALSA-2024:2208" type="self" title="ALSA-2024:2208"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libwinpr" version="2.11.2" release="1.el9" epoch="2" arch="s390x" src="freerdp-2.11.2-1.el9.src.rpm">
          <filename>libwinpr-2.11.2-1.el9.s390x.rpm</filename>
          <sum type="sha256">32fba47558dc297c17987aa2740dd435809d58e022778dab12dd9b03d136f832</sum>
        </package>
        <package name="freerdp" version="2.11.2" release="1.el9" epoch="2" arch="s390x" src="freerdp-2.11.2-1.el9.src.rpm">
          <filename>freerdp-2.11.2-1.el9.s390x.rpm</filename>
          <sum type="sha256">3bb22a50e0c5d2e2723fdb66d93c1ecaf011bf7d6fbdd05fd86a9d834ae04c5b</sum>
        </package>
        <package name="freerdp-libs" version="2.11.2" release="1.el9" epoch="2" arch="s390x" src="freerdp-2.11.2-1.el9.src.rpm">
          <filename>freerdp-libs-2.11.2-1.el9.s390x.rpm</filename>
          <sum type="sha256">43657df33ac10340b91411776adf5d6af00331c7109c007a290488db5ac7d0a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2211</id>
    <title>Moderate: tcpdump security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tcpdump security update</summary>
    <description>The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.

Security Fix(es):

* tcpslice: use-after-free in extract_slice() (CVE-2021-41043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2211" id="RHSA-2024:2211" type="rhsa" title="RHSA-2024:2211"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-41043" id="CVE-2021-41043" type="cve" title="CVE-2021-41043"/>
      <reference href="https://bugzilla.redhat.com/2040392" id="2040392" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2211.html" id="ALSA-2024:2211" type="self" title="ALSA-2024:2211"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="tcpdump" version="4.99.0" release="9.el9" epoch="14" arch="s390x" src="tcpdump-4.99.0-9.el9.src.rpm">
          <filename>tcpdump-4.99.0-9.el9.s390x.rpm</filename>
          <sum type="sha256">e2db64a8f00428c17822f84fe228ce0f202ae61ad6553a826fdd98cc0634dcb3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2213</id>
    <title>Moderate: pcp security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:18:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>pcp security update</summary>
    <description>Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.

Security Fix(es):

* pcp: unsafe use of directories allows pcp to root privilege escalation (CVE-2023-6917)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2213" id="RHSA-2024:2213" type="rhsa" title="RHSA-2024:2213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6917" id="CVE-2023-6917" type="cve" title="CVE-2023-6917"/>
      <reference href="https://bugzilla.redhat.com/2254983" id="2254983" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2213.html" id="ALSA-2024:2213" type="self" title="ALSA-2024:2213"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="pcp-pmda-lustre" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-lustre-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">00ff57192928442bb14502e9ce0cbaf4114f3bd8073205398d5726c2273e14ac</sum>
        </package>
        <package name="pcp-pmda-smart" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-smart-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">04c52fa7fe8e350ab40aeb625f1d9d12740d46512476af1350cfd626e67282f3</sum>
        </package>
        <package name="pcp-export-pcp2spark" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-export-pcp2spark-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">0cb4fe727dd377514484923018b8a9f9f3d0b7218e3c057968903b0be85cf3a6</sum>
        </package>
        <package name="pcp-pmda-lio" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-lio-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">0e811242f8f20228bc4b48062399c8544cf3a0b1ac42c0542846c8a784c05678</sum>
        </package>
        <package name="pcp-pmda-activemq" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-activemq-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">1165ff44f97876271993989c68fa963a35212ae6025a48535455dbdc9827559f</sum>
        </package>
        <package name="pcp-import-sar2pcp" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-import-sar2pcp-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">13801838b6dd23f1ffe2d1e1d501137212590ca9fed2304590c83b37ce5a7e5c</sum>
        </package>
        <package name="pcp-pmda-mailq" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-mailq-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">153d4d1c06283949b1cb508b13ebec8548299894b952f29f6abd8f5598229979</sum>
        </package>
        <package name="pcp-pmda-cisco" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-cisco-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">16b8974ddde03ba517947709fb7fbfedc4e6b26585cf95b9a917f3510d77ceee</sum>
        </package>
        <package name="pcp" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">17eac06b9141303b3651480c7356e55181b8382ccfb046784fb25c9bc8c7be13</sum>
        </package>
        <package name="perl-PCP-PMDA" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>perl-PCP-PMDA-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">1a4f9aa587f7f96880924d39ea2dea0057cc341a49d6aa2400e20611c3e9a9e2</sum>
        </package>
        <package name="pcp-gui" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-gui-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">1b333cce6b4c5354a1f3b149d147f2119f3c737045b4bcb3401101455a4cd22e</sum>
        </package>
        <package name="pcp-export-pcp2elasticsearch" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-export-pcp2elasticsearch-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">1c9c0700af42c0ce2d6ca563c196bcbe1644bff01549831ee03e8e1e77ac813a</sum>
        </package>
        <package name="pcp-pmda-ds389" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-ds389-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">1fc88523f6c6e1eca46642d7ff6bf0d17bc6c82e2096f7f8adb30613500c0736</sum>
        </package>
        <package name="pcp-pmda-gpfs" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-gpfs-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">2317f71fe49ee7787cfd429878f0766dbca57a07ad4c05f1129d53611b7d7a08</sum>
        </package>
        <package name="pcp-pmda-oracle" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-oracle-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">2d963b9a1798a8221229f4df0f8bf0b00ac87e6d3e5253277408bd014639d55d</sum>
        </package>
        <package name="pcp-import-iostat2pcp" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-import-iostat2pcp-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">2eb92c8da5b96a2d38ca9e27a5fa53794337d01811ba00c157ca92851175021c</sum>
        </package>
        <package name="perl-PCP-MMV" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>perl-PCP-MMV-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">30d4b135786c6065576a93c44fa91c3baa6a869fb667fe32c9f7ae0747e71392</sum>
        </package>
        <package name="pcp-pmda-bpftrace" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-bpftrace-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">328e7118b63f91d607ead4fa9ed73b97f0a122e5ee1cda7ed6e0cdd4392bf753</sum>
        </package>
        <package name="pcp-pmda-bcc" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-bcc-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">34e8467f2044370546cd64f46a393d57c790b32f3e41160c456fce70438729b5</sum>
        </package>
        <package name="pcp-pmda-named" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-named-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">3d0a08ee53b1b6aaea6fb4e3eeb1257a198b2c20f2d0ebef3106ebe2c6ce61ff</sum>
        </package>
        <package name="pcp-pmda-nfsclient" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-nfsclient-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">3dc55bc2d752a5b9aa61ef3ff98e93fd15d99cd574ef6b18ca75cf20ffa64502</sum>
        </package>
        <package name="pcp-pmda-sendmail" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-sendmail-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">40814408c52c2c561208b74f5e46cd7b24f32b536ae81ce77d766b0efa55c4b6</sum>
        </package>
        <package name="pcp-export-pcp2xml" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-export-pcp2xml-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">4313c49bce6f1c1286e70980ac08253e54dcb2f4d0e5a85d4aa3a57f1b1017b6</sum>
        </package>
        <package name="pcp-pmda-rsyslog" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-rsyslog-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">4332f562b94a7ec5ac4ecaab768e0eb23bd7b4d8830bb633c7e7cb971db96301</sum>
        </package>
        <package name="pcp-pmda-cifs" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-cifs-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">44394af7a2300e1cd7fbdcc56ada5e9723205b55246813ebe88200d780a593bd</sum>
        </package>
        <package name="pcp-export-zabbix-agent" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-export-zabbix-agent-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">47582407fb08afcbd885695cbd2bef79aab53e912f6eb11cbce33df526f8614c</sum>
        </package>
        <package name="pcp-pmda-mongodb" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-mongodb-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">482764883bb8de7d0ac2b06b67b28685e5c0e2ee71bdf328f88bdbfa8a99fe28</sum>
        </package>
        <package name="pcp-pmda-elasticsearch" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-elasticsearch-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">4910831337553d947f988ee745f0dc4e6a67f2623bb71a730d45ed89e9e8dacc</sum>
        </package>
        <package name="pcp-pmda-zswap" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-zswap-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">4a46179160001d8352cf2f90763d9cb6b1f01756602a3376911dcfc758da9865</sum>
        </package>
        <package name="pcp-pmda-logger" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-logger-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">52aa3a09b980d0a7d0c0f4ab3549e5a538644999b545ee5d3f6cc7122a4f26a0</sum>
        </package>
        <package name="pcp-pmda-apache" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-apache-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">554e5c0007c6e87cffc7c08e99e0802f0db5dec438ffeb5b4f8c917491592982</sum>
        </package>
        <package name="pcp-pmda-gluster" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-gluster-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">567e9502a97d187de8952da56d9bc100a53ce1e6a373181d6c75ea37e7facc9c</sum>
        </package>
        <package name="pcp-pmda-hacluster" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-hacluster-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">5c7406938a19ce0dc92317dfb72ddb869eed266be6d35cec35bef58564f8857a</sum>
        </package>
        <package name="pcp-pmda-rabbitmq" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-rabbitmq-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">5cd49fe4d76dad685172ceeba50e764a866227bbf52779fc1fc3f4af82b28af9</sum>
        </package>
        <package name="pcp-pmda-redis" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-redis-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">5f60ebde375b8334b3ffef6685bb75e4e311ee32cbc90d66a8d1102529facde6</sum>
        </package>
        <package name="pcp-pmda-news" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-news-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">60ad9726a569c240bcf0096603965bcd6002dbc8b4de55f5990af13c3c68aa29</sum>
        </package>
        <package name="pcp-pmda-systemd" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-systemd-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">631b475bf86632512f3958e8f37df99eabf488c0a430eb253a7db825704856c8</sum>
        </package>
        <package name="pcp-pmda-unbound" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-unbound-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">64edb08c3c5b0520254c84e8eefcdd680015a15017ceb4d5a247ea447d2093e2</sum>
        </package>
        <package name="pcp-pmda-ds389log" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-ds389log-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">64ff9e329ff6f02006771473c90e7b4dafd6590272448a901681d2af35419885</sum>
        </package>
        <package name="pcp-pmda-weblog" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-weblog-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">650372a7f61e9ce84012fbd41dcac61c59dd0037ca7aa3aa2871cc0f9db0882f</sum>
        </package>
        <package name="pcp-doc" version="6.2.0" release="1.el9" epoch="0" arch="noarch" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-doc-6.2.0-1.el9.noarch.rpm</filename>
          <sum type="sha256">6af8b6815243e2a33ef5683259c3a8217cd1a2826ff0d5a021caff2e0377a593</sum>
        </package>
        <package name="pcp-pmda-memcache" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-memcache-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">6d3e6565dc62acfd260ccf4e5401fd62d81e59982d138887810905437c18331c</sum>
        </package>
        <package name="pcp-pmda-openmetrics" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-openmetrics-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">705d45f4527df4ebcf57a956a84db908780ed5740a99b5d688773dec79e1811b</sum>
        </package>
        <package name="pcp-pmda-gpsd" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-gpsd-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">743b4e06f0a09efe6258c0b0e49ad154300d54571f612208b007d674303af956</sum>
        </package>
        <package name="pcp-pmda-bonding" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-bonding-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">7acad112e6c7b1c54a635672179affb56bfd9bd38dc49d35674fcd068024aee4</sum>
        </package>
        <package name="pcp-libs" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-libs-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">8146ce6b657825e4623724df2b2c2490cb53b52a5c54b9ac5fca1e1eeeabbf0f</sum>
        </package>
        <package name="pcp-pmda-haproxy" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-haproxy-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">863ddf868e6363550ebfcca4ad82a43c4ac44b34a4f36eb96083d8316c821704</sum>
        </package>
        <package name="perl-PCP-LogSummary" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>perl-PCP-LogSummary-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">90d7084b9d37c2b522cc181c66a491d728b92cb0f2a5aa680a3e0dbff7aa7be3</sum>
        </package>
        <package name="pcp-pmda-podman" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-podman-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">90f1db34d926f3600a47f74728150a88bd1fe62143fe42f99f696319d5bf83ec</sum>
        </package>
        <package name="pcp-pmda-snmp" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-snmp-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">9220f3a2d0e6ff16b5ac2f6fc2827fd6b5683e06347c2e6c824a19fd65d5bdb3</sum>
        </package>
        <package name="pcp-system-tools" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-system-tools-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">97e0f1b956b081a77732376d23fca953688f09b30cb56d358428eb32110612e2</sum>
        </package>
        <package name="pcp-pmda-mysql" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-mysql-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">98188c20eaeacc648962c9e4943d7af0250c9e890fc11b70c3724e6b0a82f36e</sum>
        </package>
        <package name="pcp-pmda-shping" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-shping-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">992fbf5d41d1a7407a0e2366dff56d11f1acac14477fccf0138417f800839c39</sum>
        </package>
        <package name="pcp-pmda-netcheck" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-netcheck-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">9f03e88f286b534e42c5ac6765c9fb8d298376f6a2489eb25c8d3bcb03fdf51d</sum>
        </package>
        <package name="pcp-pmda-json" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-json-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">a08c2fce3ea68409e2f5ddc87f4f403e6526e2a42f93a8d09a1c5821e2b187d0</sum>
        </package>
        <package name="pcp-pmda-docker" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-docker-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">a2f090dfe5c32838e3d3f31e0cdf5b3b7587de0cf84fe6abdee1242868f0386d</sum>
        </package>
        <package name="pcp-export-pcp2json" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-export-pcp2json-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">a32bb92b162210cd479752653d388d51858d750412a790f6db3f37b1c5c89db4</sum>
        </package>
        <package name="pcp-pmda-gfs2" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-gfs2-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">a56990a0eb66ebc8270c57ccd75993cbf2c08bed54545bb71cee8d06a5887299</sum>
        </package>
        <package name="pcp-pmda-bind2" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-bind2-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">ad0d1427a49052ef961be70c714200fb7f2625431cf516b4b0ba970e43ca0239</sum>
        </package>
        <package name="pcp-export-pcp2zabbix" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-export-pcp2zabbix-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">ad7774554e78df2482e509282af4882e0438cecff25b46c333f0d5e47fb437fa</sum>
        </package>
        <package name="pcp-pmda-dm" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-dm-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">af0114d90423d113ac5a735d99edfb20e337674cf21891b12cd75f819ef9b67f</sum>
        </package>
        <package name="pcp-pmda-zimbra" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-zimbra-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">b4b9b446feeccb225146afa18499f46b0815e56a0b7b07f20c8af57162b58385</sum>
        </package>
        <package name="pcp-pmda-samba" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-samba-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">b50da1bc20dfa4fd3c381d65b01bbd0f12cab196e0d0648e59df5febd0e93f9f</sum>
        </package>
        <package name="pcp-pmda-postfix" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-postfix-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">b57f6cb3749bc255dd01c7537d5690171be77ff72f64114bc2923dd62da927c8</sum>
        </package>
        <package name="pcp-pmda-pdns" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-pdns-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">b62f8e1bc964698c7bde069f279a8acc42d43a9229426170972a24d8943a4913</sum>
        </package>
        <package name="perl-PCP-LogImport" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>perl-PCP-LogImport-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">b66974c9c77da99577bc76e75687c3420580ff984c38cb2d433384b9b8138ec8</sum>
        </package>
        <package name="pcp-pmda-sockets" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-sockets-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">b66a1335e73f77fe1cbcb0a6c58ab4331b7a5bd0c4453952d9eeb5f221c3853d</sum>
        </package>
        <package name="pcp-libs-devel" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-libs-devel-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">b77bfe7ad4b03448917abcd4aea18168d7417671eeaa7b6c5c4f74277d8354f3</sum>
        </package>
        <package name="pcp-pmda-denki" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-denki-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">bb2ead2dbc10da3d850c43e9d61b540fe4e35fe4bd4e555dfcd13147d68f1f4d</sum>
        </package>
        <package name="pcp-testsuite" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-testsuite-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">bbd9bdfec74091a599f9dfd6b415f8303ca07e7c576784d3be54b82fe97a6833</sum>
        </package>
        <package name="python3-pcp" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>python3-pcp-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">bfe50d09a0cb0b70b2a84117aa0ddca589ddc72af95ee67dbde40afc2a04c6af</sum>
        </package>
        <package name="pcp-import-ganglia2pcp" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-import-ganglia2pcp-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">c4a8df95aa5838f16e5d6d4d43f38431427685fe566612d3d95e9e40d154570f</sum>
        </package>
        <package name="pcp-selinux" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-selinux-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">c7846a6cd5dfe62ae94c622c71ee3b4385f3dd081206fb5e2e3c3adf8f746385</sum>
        </package>
        <package name="pcp-pmda-openvswitch" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-openvswitch-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">c8341c7bd4ba8ce7917f7e14e41bad8ac042be4acf0a7288d2757a278efcda2b</sum>
        </package>
        <package name="pcp-pmda-bash" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-bash-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">cd6597b345d2360b4200cc1df4020acbfcbaa8b27736caa5474cee9b5df2dbca</sum>
        </package>
        <package name="pcp-pmda-netfilter" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-netfilter-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">ceaa43f816a56e0e5e28eecf93c1fecd05fe71b3dc7202243dfe8b6932d3b77b</sum>
        </package>
        <package name="pcp-pmda-libvirt" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-libvirt-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">d51159467a76e660c5fb63bc2ced0a85b6f972815a97d49256f77cd86aa2ea53</sum>
        </package>
        <package name="pcp-pmda-mounts" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-mounts-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">d6ee7bc5ca8bb76af598fa5202aaaaf4a0dcd7737f85005531234b0ae38a6056</sum>
        </package>
        <package name="pcp-pmda-summary" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-summary-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">d74f0c1974c7586276e777e3013f3923ef5f85d60e3bc9de990db509267d3a54</sum>
        </package>
        <package name="pcp-export-pcp2graphite" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-export-pcp2graphite-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">d823493a0c6ee8cbeae54ee91527faa0e4dff55d3e554cbfe1b398b9af69d9c0</sum>
        </package>
        <package name="pcp-pmda-lmsensors" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-lmsensors-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">d93f086f5f3a0ecf125cfee206836a0398dd59adbf7a839476c8cc53fd90f8a6</sum>
        </package>
        <package name="pcp-pmda-trace" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-trace-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">dd27642674eb11d2c699b94ea5009f5d4ac1c5b5a39e0fcf4991670a5a354958</sum>
        </package>
        <package name="pcp-pmda-nvidia-gpu" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-nvidia-gpu-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">de2d036ac7815f9f7e8f7851615dd8c8eb641e7ad46b25e884573ee3b2b66550</sum>
        </package>
        <package name="pcp-pmda-nginx" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-nginx-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">e0ce8f44a8a887b98dd6574fb3fb67e8c629a0c06915bb2c5f0a9d88f3bb2905</sum>
        </package>
        <package name="pcp-pmda-postgresql" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-postgresql-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">e42a07923db32fad2604572eb6046bc4dd466594718fb166094e53d361031ffb</sum>
        </package>
        <package name="pcp-conf" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-conf-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">e4370bd95b97793650406cf0b56a5cce62d827019e000d339ff5363a718f22fb</sum>
        </package>
        <package name="pcp-pmda-dbping" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-dbping-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">e6d3c3b3f56d7e455d6a2ca04cb6370193c15ade7d4f7d59ae06155a23edd743</sum>
        </package>
        <package name="pcp-import-collectl2pcp" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-import-collectl2pcp-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">ed781c4c77ab523d77a483d1d802a29a748b54cc1d248074d2bdd66ec1a1eaef</sum>
        </package>
        <package name="pcp-export-pcp2influxdb" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-export-pcp2influxdb-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">eecac73c87e2df04a75cab4b44e6a2a6c2aa9f8354b4380fe83fbc6ff3299e98</sum>
        </package>
        <package name="pcp-pmda-statsd" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-statsd-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">efa8dd600ce2dbd903454ff3aeb0b4c8885dab3bfd34787c43ac88233437835c</sum>
        </package>
        <package name="pcp-pmda-slurm" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-slurm-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">f2cc8a24f9882a437b02ca6077e34915b4063f5bcc98bb344693744ddcced06b</sum>
        </package>
        <package name="pcp-pmda-lustrecomm" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-lustrecomm-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">f306a80c613d53c2843b50e3eb0e02ef8746cf2b722ad50a11625347062a3ab5</sum>
        </package>
        <package name="pcp-pmda-mic" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-mic-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">f30e8348a2acb1abd7ace39fcf73c17d814ef15924afb6faa8e96af71d2d61cb</sum>
        </package>
        <package name="pcp-import-mrtg2pcp" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-import-mrtg2pcp-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">f4f00f7102c4ec5c1c7948d2f6042acf95d955b53a53738444c03dc77e47745f</sum>
        </package>
        <package name="pcp-zeroconf" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-zeroconf-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">f63278e0000336a02df31e0031737524147b78595afba7a6c7367adabd1fef1f</sum>
        </package>
        <package name="pcp-geolocate" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-geolocate-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">f7950de261e46289deedd533364c5d2483b88cc0d8d14deaf157dd40dde2c7b7</sum>
        </package>
        <package name="pcp-pmda-roomtemp" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-roomtemp-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">fb909b726ccd35596fda65913a2f518b28a0c77b23b643f3690e53d01773c797</sum>
        </package>
        <package name="pcp-pmda-farm" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-pmda-farm-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">fbbd40fcd6b71c7723cabb0cf89c3bb263b0e42dd7f783fdf59de71eabc7217e</sum>
        </package>
        <package name="pcp-devel" version="6.2.0" release="1.el9" epoch="0" arch="s390x" src="pcp-6.2.0-1.el9.src.rpm">
          <filename>pcp-devel-6.2.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">ffc0df7ca7b3d6d7a45b57d50461e122103f46acd40d42defea3c5bd7a40b512</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2217</id>
    <title>Moderate: motif security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>motif security update</summary>
    <description>The motif packages include the Motif shared libraries needed to run applications which are dynamically linked against Motif, as well as MWM, the Motif Window Manager.

Security Fix(es):

* libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788)
* libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2217" id="RHSA-2024:2217" type="rhsa" title="RHSA-2024:2217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43788" id="CVE-2023-43788" type="cve" title="CVE-2023-43788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43789" id="CVE-2023-43789" type="cve" title="CVE-2023-43789"/>
      <reference href="https://bugzilla.redhat.com/2242248" id="2242248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242249" id="2242249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2217.html" id="ALSA-2024:2217" type="self" title="ALSA-2024:2217"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="motif-devel" version="2.3.4" release="28.el9" epoch="0" arch="s390x" src="motif-2.3.4-28.el9.src.rpm">
          <filename>motif-devel-2.3.4-28.el9.s390x.rpm</filename>
          <sum type="sha256">0cc6c6711f5ec59560f1cf709d20016f96a0a370257bb4f5b52e9623779e4ab4</sum>
        </package>
        <package name="motif" version="2.3.4" release="28.el9" epoch="0" arch="s390x" src="motif-2.3.4-28.el9.src.rpm">
          <filename>motif-2.3.4-28.el9.s390x.rpm</filename>
          <sum type="sha256">1aa10ee253604be8de839f1618693f34d5eaf3fbbcd80d870d517b91b2e9252b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2228</id>
    <title>Moderate: perl security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:17:42"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl security update</summary>
    <description>Perl is a high-level programming language that is commonly used for system administration utilities and web programming.

Security Fix(es):

* perl: Write past buffer end via illegal user-defined Unicode property (CVE-2023-47038)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2228" id="RHSA-2024:2228" type="rhsa" title="RHSA-2024:2228"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-47038" id="CVE-2023-47038" type="cve" title="CVE-2023-47038"/>
      <reference href="https://bugzilla.redhat.com/2249523" id="2249523" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2228.html" id="ALSA-2024:2228" type="self" title="ALSA-2024:2228"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="perl-DynaLoader" version="1.47" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-DynaLoader-1.47-481.el9.s390x.rpm</filename>
          <sum type="sha256">00e9dd0dc72bec3942ab95f9a664a2050547b586becb4fba02022bbbd1f66088</sum>
        </package>
        <package name="perl-Net" version="1.02" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Net-1.02-481.el9.noarch.rpm</filename>
          <sum type="sha256">0295d4efd94f1aa32449f49679998d099991304621ed967b1ad39db3937f619b</sum>
        </package>
        <package name="perl-ExtUtils-Constant" version="0.25" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-ExtUtils-Constant-0.25-481.el9.noarch.rpm</filename>
          <sum type="sha256">03f212aabeb68f36c57a3cadd93df43e03cdaf1db099aa9b7a2d54ea8b76033c</sum>
        </package>
        <package name="perl-IPC-Open3" version="1.21" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-IPC-Open3-1.21-481.el9.noarch.rpm</filename>
          <sum type="sha256">048ab2c41c1cc5c4d3448c08f7e816d21fc3ae79fd55bb3b0a1aa5aafcc52868</sum>
        </package>
        <package name="perl-Attribute-Handlers" version="1.01" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Attribute-Handlers-1.01-481.el9.noarch.rpm</filename>
          <sum type="sha256">05a00399c7d57ad34ac370de118853fd6e95cedbc8d87ef80bdbd74d5dac8961</sum>
        </package>
        <package name="perl-libnetcfg" version="5.32.1" release="481.el9" epoch="4" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-libnetcfg-5.32.1-481.el9.noarch.rpm</filename>
          <sum type="sha256">071a1b5609d19209e2f6b27ef19b43fb2057dc0d76c9f8a68ab141fec7d53add</sum>
        </package>
        <package name="perl-less" version="0.03" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-less-0.03-481.el9.noarch.rpm</filename>
          <sum type="sha256">0856348b54de84fa2d177f5e114d1614f3f9d13fecfeb360f31a3e6e09d1b5bf</sum>
        </package>
        <package name="perl-AutoSplit" version="5.74" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-AutoSplit-5.74-481.el9.noarch.rpm</filename>
          <sum type="sha256">09559d72c64f9d21e611855dd2cda5164b5c5e765ada4d549ccecc8e234c9cc4</sum>
        </package>
        <package name="perl-vars" version="1.05" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-vars-1.05-481.el9.noarch.rpm</filename>
          <sum type="sha256">0e90c6b801bee7e2662b8494f92c0d797e7d70f47e1735b8ff59a2dd2aa4ef47</sum>
        </package>
        <package name="perl-Devel-SelfStubber" version="1.06" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Devel-SelfStubber-1.06-481.el9.noarch.rpm</filename>
          <sum type="sha256">0f1255c0a57676ff9f3fde8908b3f1e07c144467d924ffe9751c415ca1078b82</sum>
        </package>
        <package name="perl-Tie-Memoize" version="1.1" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Tie-Memoize-1.1-481.el9.noarch.rpm</filename>
          <sum type="sha256">0fdfd1bad7dcbb4e49e9e4d6bfe17d25ca98d2547d1e1fafb738d0059a2b318a</sum>
        </package>
        <package name="perl-Thread-Semaphore" version="2.13" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Thread-Semaphore-2.13-481.el9.noarch.rpm</filename>
          <sum type="sha256">10ce3f264230a2cef197b020a0b928bc8e35929cc9e2a074ee2b74eb9adb74ed</sum>
        </package>
        <package name="perl-ExtUtils-Embed" version="1.35" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-ExtUtils-Embed-1.35-481.el9.noarch.rpm</filename>
          <sum type="sha256">129dd08fac6da18b36c95aaef428b148ffc8551e86b631fa7114b290891b3b91</sum>
        </package>
        <package name="perl-Sys-Hostname" version="1.23" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Sys-Hostname-1.23-481.el9.s390x.rpm</filename>
          <sum type="sha256">12b401c0ca6d83086e1b1f0f62c7e5f569df4dc9417fb5e2be7faa16f79dc9ac</sum>
        </package>
        <package name="perl-Fcntl" version="1.13" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Fcntl-1.13-481.el9.s390x.rpm</filename>
          <sum type="sha256">144a1c1a60328faabf764c59a2cd451b491c26fe971919da2edb84d95f13161d</sum>
        </package>
        <package name="perl-I18N-Collate" version="1.02" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-I18N-Collate-1.02-481.el9.noarch.rpm</filename>
          <sum type="sha256">16f98404d16a8232eb130cdba2897ad1bf6693ec0ee5639f79f100727459c20b</sum>
        </package>
        <package name="perl-FileHandle" version="2.03" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-FileHandle-2.03-481.el9.noarch.rpm</filename>
          <sum type="sha256">1928bd2377994731d104a6243c0d433827a7ec60db40da1a9b690dcf34d285ea</sum>
        </package>
        <package name="perl-FileCache" version="1.10" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-FileCache-1.10-481.el9.noarch.rpm</filename>
          <sum type="sha256">1c1748786d3843a0dde874f2319b6e953d201513abd7889358e92851cea369d5</sum>
        </package>
        <package name="perl-filetest" version="1.03" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-filetest-1.03-481.el9.noarch.rpm</filename>
          <sum type="sha256">21f01893899a1325f39a96d386a71cde22fb9f5a76d63f5b26e13770a751a493</sum>
        </package>
        <package name="perl-overloading" version="0.02" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-overloading-0.02-481.el9.noarch.rpm</filename>
          <sum type="sha256">26dc2bd86aff3ad8957271b6938dce89f32b09e3766eeaaa4c7abaeb05a40398</sum>
        </package>
        <package name="perl-Text-Abbrev" version="1.02" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Text-Abbrev-1.02-481.el9.noarch.rpm</filename>
          <sum type="sha256">2a89cfb4c0b2e11c383f5c76c8f780cc686b773d6b35f6c065a645f3f51ff480</sum>
        </package>
        <package name="perl-Memoize" version="1.03" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Memoize-1.03-481.el9.noarch.rpm</filename>
          <sum type="sha256">2e469414c2611244736ec9ff6af2154f0db69f87e7fa15ab295f84f46ebf21a6</sum>
        </package>
        <package name="perl-DirHandle" version="1.05" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-DirHandle-1.05-481.el9.noarch.rpm</filename>
          <sum type="sha256">3398f1bc7771927ad29f8d1f07f18cd2f289c197f702b8317cb15b7418160125</sum>
        </package>
        <package name="perl-mro" version="1.23" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-mro-1.23-481.el9.s390x.rpm</filename>
          <sum type="sha256">37838dcbbbd8890e48edea11c4a479ca277c98d7b337bb4bef20d0d6cb76fb3d</sum>
        </package>
        <package name="perl-Pod-Html" version="1.25" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Pod-Html-1.25-481.el9.noarch.rpm</filename>
          <sum type="sha256">38211f7cd5ea62f597220bf3c5eec6c4eb01e7bce988fba52a3d799c136f558d</sum>
        </package>
        <package name="perl-Hash-Util-FieldHash" version="1.20" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Hash-Util-FieldHash-1.20-481.el9.s390x.rpm</filename>
          <sum type="sha256">38cb07e096a74966158d96a8b6b088a641d0c82125b6f83b5947f78824cbc63b</sum>
        </package>
        <package name="perl-Module-Loaded" version="0.08" release="481.el9" epoch="1" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Module-Loaded-0.08-481.el9.noarch.rpm</filename>
          <sum type="sha256">3bc3aacd40a3003131485ba13b483103bfefdb41a5272dfe1a89a94024c9e564</sum>
        </package>
        <package name="perl-B" version="1.80" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-B-1.80-481.el9.s390x.rpm</filename>
          <sum type="sha256">3c3897139e03c93f9efe3407b23d511170dbe383081863f8be2194065ba6be0e</sum>
        </package>
        <package name="perl-Symbol" version="1.08" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Symbol-1.08-481.el9.noarch.rpm</filename>
          <sum type="sha256">3f15673449eba60988dbc72b8ae84c05d3f173fe2a7ab9894888d011a448b2e9</sum>
        </package>
        <package name="perl-autouse" version="1.11" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-autouse-1.11-481.el9.noarch.rpm</filename>
          <sum type="sha256">3fa35ceb4fcddf6e952dbdeb5d3b5dde5a98dc7a7c6593721a12e3e494d14c5b</sum>
        </package>
        <package name="perl-blib" version="1.07" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-blib-1.07-481.el9.noarch.rpm</filename>
          <sum type="sha256">413710c092e8f9245e20c4ff4ce3254f5383a5452e0ea9e7b9cddd4d8ff72da2</sum>
        </package>
        <package name="perl-Opcode" version="1.48" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Opcode-1.48-481.el9.s390x.rpm</filename>
          <sum type="sha256">46cc708e99e213d009dfc9eca0a84e2359d5d21d0546d4e276c881dc3c9504b3</sum>
        </package>
        <package name="perl-Locale-Maketext-Simple" version="0.21" release="481.el9" epoch="1" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Locale-Maketext-Simple-0.21-481.el9.noarch.rpm</filename>
          <sum type="sha256">4851313939f69a96a268e6ba728d2ba3cf0ba7dd56eafce29831b7fbef5ff00c</sum>
        </package>
        <package name="perl-encoding-warnings" version="0.13" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-encoding-warnings-0.13-481.el9.noarch.rpm</filename>
          <sum type="sha256">4949291b5916d2a1f30e44c641c2d16ae7a16d51f7ebb28d464c71e80e96468d</sum>
        </package>
        <package name="perl-File-Find" version="1.37" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-File-Find-1.37-481.el9.noarch.rpm</filename>
          <sum type="sha256">4d26e91151827aa4731cc93e100398ca87931559cb6a63be4177543876f66e0c</sum>
        </package>
        <package name="perl-locale" version="1.09" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-locale-1.09-481.el9.noarch.rpm</filename>
          <sum type="sha256">4e41195ed8687a39f55a386a864d58de055c25ac036e7e508d723cac46953906</sum>
        </package>
        <package name="perl-Pod-Functions" version="1.13" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Pod-Functions-1.13-481.el9.noarch.rpm</filename>
          <sum type="sha256">4ede75a3c1b342b5298ab2821d1716d495d847ffd1e0129e9bb3b65417f59ba1</sum>
        </package>
        <package name="perl-Class-Struct" version="0.66" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Class-Struct-0.66-481.el9.noarch.rpm</filename>
          <sum type="sha256">5059a16b850db181c9ca0a1c1cc4666fdda9fa1a45f7d15509524b3c7d5aa891</sum>
        </package>
        <package name="perl-NDBM_File" version="1.15" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-NDBM_File-1.15-481.el9.s390x.rpm</filename>
          <sum type="sha256">51b8075306c135a8d9e1ae3b29fa5e1988b20535eac4b9021ef343358c6fce62</sum>
        </package>
        <package name="perl-Term-ReadLine" version="1.17" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Term-ReadLine-1.17-481.el9.noarch.rpm</filename>
          <sum type="sha256">52be7ec09600471121a699ff1e4364b93ca2aea950dc7921a646e3d519c0f79e</sum>
        </package>
        <package name="perl-macros" version="5.32.1" release="481.el9" epoch="4" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-macros-5.32.1-481.el9.noarch.rpm</filename>
          <sum type="sha256">55191b08752197779dfe4264173d441209433b0bb97942c9e2d9b2957afc0fa0</sum>
        </package>
        <package name="perl-debugger" version="1.56" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-debugger-1.56-481.el9.noarch.rpm</filename>
          <sum type="sha256">57a817f4f9812c0d64d7c5151e1b03388466f6a78ac277e47a1bc901ee64bb20</sum>
        </package>
        <package name="perl-Getopt-Std" version="1.12" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Getopt-Std-1.12-481.el9.noarch.rpm</filename>
          <sum type="sha256">588affa63d25b60e837eb14736226a4db5bf89f6a010507373dc01f754263ccd</sum>
        </package>
        <package name="perl-if" version="0.60.800" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-if-0.60.800-481.el9.noarch.rpm</filename>
          <sum type="sha256">58e386b02173a7823b40a263b150fb0289c6732c482d9b880ea29341ca2ca341</sum>
        </package>
        <package name="perl-File-DosGlob" version="1.12" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-File-DosGlob-1.12-481.el9.s390x.rpm</filename>
          <sum type="sha256">5f552865c0e40095a665eab3a2dd975d9016d45a51d192c6a5c1c79ec447734a</sum>
        </package>
        <package name="perl-Time-Piece" version="1.3401" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Time-Piece-1.3401-481.el9.s390x.rpm</filename>
          <sum type="sha256">60364e5507e11e89670e669053ba1272d92f82720e18fe59f60f0f559127eacf</sum>
        </package>
        <package name="perl-DBM_Filter" version="0.06" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-DBM_Filter-0.06-481.el9.noarch.rpm</filename>
          <sum type="sha256">622279dbaf4bbd4de9d1a67996179daf2af598c527fdac73b8c15fa01ab8dad8</sum>
        </package>
        <package name="perl-I18N-Langinfo" version="0.19" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-I18N-Langinfo-0.19-481.el9.s390x.rpm</filename>
          <sum type="sha256">63305502f509a3ffbd7a1797a60dce287114330b0faf51c327c1b271aa2b8272</sum>
        </package>
        <package name="perl-sigtrap" version="1.09" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-sigtrap-1.09-481.el9.noarch.rpm</filename>
          <sum type="sha256">63c07920e9df66934c402860ade150186547fe9b922699b77b34d6067c451726</sum>
        </package>
        <package name="perl-User-pwent" version="1.03" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-User-pwent-1.03-481.el9.noarch.rpm</filename>
          <sum type="sha256">68791d69ca71125fdd6586e405c119d6ee467fede56aecc7be0f846683ba1b48</sum>
        </package>
        <package name="perl-File-Compare" version="1.100.600" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-File-Compare-1.100.600-481.el9.noarch.rpm</filename>
          <sum type="sha256">6c89e0ec688d1eb101bdbc0a0b179d972663775066c0f68855ae218c5bd833ac</sum>
        </package>
        <package name="perl-File-Basename" version="2.85" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-File-Basename-2.85-481.el9.noarch.rpm</filename>
          <sum type="sha256">70d472e930c25d30a6d00789e007a8d8bb01ac763f4fb64639fdf2b3411be0b4</sum>
        </package>
        <package name="perl-Safe" version="2.41" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Safe-2.41-481.el9.noarch.rpm</filename>
          <sum type="sha256">73eddfbbff6d7cd9c7bb95d2fe6952c3b72e090520c2d24f8b193de8d5f3cbd9</sum>
        </package>
        <package name="perl-Search-Dict" version="1.07" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Search-Dict-1.07-481.el9.noarch.rpm</filename>
          <sum type="sha256">76c09695f26829bf3c4815b88bfb549365adec70bde5f8c961fe58c5c27f70b2</sum>
        </package>
        <package name="perl-AutoLoader" version="5.74" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-AutoLoader-5.74-481.el9.noarch.rpm</filename>
          <sum type="sha256">78acac1cee3dcfce077b1474cc395f9cb4c698661fac9a80df3cc39178e07b31</sum>
        </package>
        <package name="perl-sort" version="2.04" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-sort-2.04-481.el9.noarch.rpm</filename>
          <sum type="sha256">78fc4ebb75866f96293d4bd7e3d14df82b656d6197dc76a0e118b6cf4a8452b8</sum>
        </package>
        <package name="perl-lib" version="0.65" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-lib-0.65-481.el9.s390x.rpm</filename>
          <sum type="sha256">7cc76459a5a7acd4f7dd1d8595a3ad93e4eb34b758509edbf12877a0366ba912</sum>
        </package>
        <package name="perl-Dumpvalue" version="2.27" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Dumpvalue-2.27-481.el9.noarch.rpm</filename>
          <sum type="sha256">84cfaa6a0448b84b69fb88eaf1613001bbde059fd707f0346326f970a83c4b50</sum>
        </package>
        <package name="perl-ODBM_File" version="1.16" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-ODBM_File-1.16-481.el9.s390x.rpm</filename>
          <sum type="sha256">8890e388d43bd4a907d0b71db1278feb14fd17f9f10f90383bebd1ec6cd0f18f</sum>
        </package>
        <package name="perl-SelfLoader" version="1.26" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-SelfLoader-1.26-481.el9.noarch.rpm</filename>
          <sum type="sha256">89055b10cc909c9762bd667914dae7b33fe2acda18681c269d0f1ffa0dbdcc90</sum>
        </package>
        <package name="perl-doc" version="5.32.1" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-doc-5.32.1-481.el9.noarch.rpm</filename>
          <sum type="sha256">8ce04a23d3ae8d2e7676336497de5dfb0ee10f57fe4604b779261d948d52d073</sum>
        </package>
        <package name="perl-File-stat" version="1.09" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-File-stat-1.09-481.el9.noarch.rpm</filename>
          <sum type="sha256">8df3190ef1f912154ac613fada8872fbb13d9e53b006d98e287a8c87f66995c9</sum>
        </package>
        <package name="perl-Term-Complete" version="1.403" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Term-Complete-1.403-481.el9.noarch.rpm</filename>
          <sum type="sha256">9a57fc846b8636f954a934cbf1257d04cfb5fb4cb8297e59f5b0fcc7899ac502</sum>
        </package>
        <package name="perl-diagnostics" version="1.37" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-diagnostics-1.37-481.el9.noarch.rpm</filename>
          <sum type="sha256">9b3800238bb25cf90044dd60f4fd374c203947d98084505180437b0107cc8a21</sum>
        </package>
        <package name="perl-ExtUtils-Miniperl" version="1.09" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-ExtUtils-Miniperl-1.09-481.el9.noarch.rpm</filename>
          <sum type="sha256">9bebd70a3655f17218aa3fd88eb2fed72ca77530d3b79383e561f87fd65f7ab1</sum>
        </package>
        <package name="perl-fields" version="2.27" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-fields-2.27-481.el9.noarch.rpm</filename>
          <sum type="sha256">9e815f46e9144a3beee8eb9f09ff69d1f96c35425c50a1b2ae034c205a873b24</sum>
        </package>
        <package name="perl-meta-notation" version="5.32.1" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-meta-notation-5.32.1-481.el9.noarch.rpm</filename>
          <sum type="sha256">a2ae305c426191cb53c83de2fc46e7e9eeec2fe194a8c0ca90fec074b0376c7e</sum>
        </package>
        <package name="perl-libs" version="5.32.1" release="481.el9" epoch="4" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-libs-5.32.1-481.el9.s390x.rpm</filename>
          <sum type="sha256">a3eb8e53f6ad27c0759a4dc88cd3d89e95051db9d76586cb54ed1a8d2821eb95</sum>
        </package>
        <package name="perl-Benchmark" version="1.23" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Benchmark-1.23-481.el9.noarch.rpm</filename>
          <sum type="sha256">a5182d64773f6b71d6afa91aaa1458c80574a1e298efde7498c1b74f413f66d6</sum>
        </package>
        <package name="perl-ph" version="5.32.1" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-ph-5.32.1-481.el9.s390x.rpm</filename>
          <sum type="sha256">a6667a434f9918a74276a2df649d7bdd7e0a074b89c18f11eaa4e1f62b71b2b1</sum>
        </package>
        <package name="perl-devel" version="5.32.1" release="481.el9" epoch="4" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-devel-5.32.1-481.el9.s390x.rpm</filename>
          <sum type="sha256">ab606a167ea15c4e798a6b936df67fedf2f2c8cda451f0ec516ec300c3896524</sum>
        </package>
        <package name="perl-utils" version="5.32.1" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-utils-5.32.1-481.el9.noarch.rpm</filename>
          <sum type="sha256">abb9f8f255a3deefb7489b6a5d5c8d404f913cc311f9b9be6ad8ed4b1ff5d8d0</sum>
        </package>
        <package name="perl-base" version="2.27" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-base-2.27-481.el9.noarch.rpm</filename>
          <sum type="sha256">b388bfb7221c509e8c7024e0438750006b1b0292344e134fd8b89084e6a0fc75</sum>
        </package>
        <package name="perl-Thread" version="3.05" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Thread-3.05-481.el9.noarch.rpm</filename>
          <sum type="sha256">b3a0034bdc617ead7a18b713770e4d4edaaffc8d44d6be79ab7606bbe18d8215</sum>
        </package>
        <package name="perl-Test" version="1.31" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Test-1.31-481.el9.noarch.rpm</filename>
          <sum type="sha256">ba5c4b0cb74d4329deefb73721dbecdc620100706eabfa9973f4eb398ddb3c2a</sum>
        </package>
        <package name="perl-subs" version="1.03" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-subs-1.03-481.el9.noarch.rpm</filename>
          <sum type="sha256">bcb72c58761890cb5ca2a95e9b89fdb3571f49a0a69a2468e8ceb12e4003b859</sum>
        </package>
        <package name="perl-Config-Extensions" version="0.03" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Config-Extensions-0.03-481.el9.noarch.rpm</filename>
          <sum type="sha256">bcd3645ab7adddea2c04915d2e8d762adc6f676410f7bc10662f9a9e6b461c97</sum>
        </package>
        <package name="perl-Devel-Peek" version="1.28" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Devel-Peek-1.28-481.el9.s390x.rpm</filename>
          <sum type="sha256">bf17a59f262c56718520e78845be4018c4d7b5e9c40d5bec0d598e5cc8a19cd4</sum>
        </package>
        <package name="perl-Time" version="1.03" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Time-1.03-481.el9.noarch.rpm</filename>
          <sum type="sha256">c50ed531cbabd7400676731c8dffae2e95d38f54f7107a5020aa38c2f9f1c443</sum>
        </package>
        <package name="perl-NEXT" version="0.67" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-NEXT-0.67-481.el9.noarch.rpm</filename>
          <sum type="sha256">c84e0a083f201ef71327a5e81431ac6e95bb3ea6dfb9d5535ba3110b4d3b3978</sum>
        </package>
        <package name="perl-deprecate" version="0.04" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-deprecate-0.04-481.el9.noarch.rpm</filename>
          <sum type="sha256">cae0c283625809d1121eb2f3302a4fef4082f4f51b54fd22910f3ffd50d3bd2f</sum>
        </package>
        <package name="perl-overload" version="1.31" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-overload-1.31-481.el9.noarch.rpm</filename>
          <sum type="sha256">cc7ed3ccbb90c2e8f7f2f1a6acfd618e4451c3c5d32b8382f40a2ba8960438c1</sum>
        </package>
        <package name="perl-POSIX" version="1.94" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-POSIX-1.94-481.el9.s390x.rpm</filename>
          <sum type="sha256">cd2fdd6a12ad65ce7eaafb742d56a11ac6ea065ee3ea8823df2e772ce93cd84d</sum>
        </package>
        <package name="perl-Math-Complex" version="1.59" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Math-Complex-1.59-481.el9.noarch.rpm</filename>
          <sum type="sha256">cf6df12e7e1f5f154fc2d4a69413546d66a7cb8283a76c3bc85da1dcd8cf9d83</sum>
        </package>
        <package name="perl-I18N-LangTags" version="0.44" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-I18N-LangTags-0.44-481.el9.noarch.rpm</filename>
          <sum type="sha256">d3b3e5dbd32a44b9b09f5e641a31c150b0529dafca151ae072efec5b8c98944b</sum>
        </package>
        <package name="perl-Errno" version="1.30" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Errno-1.30-481.el9.s390x.rpm</filename>
          <sum type="sha256">d51a1e51af9873aa0324a12c36afb8f75095b40a83967fcb90e38522b994154f</sum>
        </package>
        <package name="perl-SelectSaver" version="1.02" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-SelectSaver-1.02-481.el9.noarch.rpm</filename>
          <sum type="sha256">d5cf2a24cc26f50ac5c51ee8ae3fffe8e010061fbb90d8eb9e37d11065b1a95d</sum>
        </package>
        <package name="perl-File-Copy" version="2.34" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-File-Copy-2.34-481.el9.noarch.rpm</filename>
          <sum type="sha256">d7d52064da450830fd69aca6ad725f49910df7b0ea889453330dcc5a9b8eccaf</sum>
        </package>
        <package name="perl" version="5.32.1" release="481.el9" epoch="4" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-5.32.1-481.el9.s390x.rpm</filename>
          <sum type="sha256">d9d88bb0f6296ddae9330066bb2effededa005d11a69c0e26fb543e514e88feb</sum>
        </package>
        <package name="perl-Tie" version="4.6" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Tie-4.6-481.el9.noarch.rpm</filename>
          <sum type="sha256">dd3ca47bb9825c83de9fded399a6e10aaee7d7a5b206266cf1e3540e53cf3554</sum>
        </package>
        <package name="perl-FindBin" version="1.51" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-FindBin-1.51-481.el9.noarch.rpm</filename>
          <sum type="sha256">e6d94cae502308a6c73082e3a129534a9f53039ea5d1c140a41bb31e6f9066b7</sum>
        </package>
        <package name="perl-interpreter" version="5.32.1" release="481.el9" epoch="4" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-interpreter-5.32.1-481.el9.s390x.rpm</filename>
          <sum type="sha256">e7578335250b449c5d2db010cf975d2a807a3de66672ff2c8546dbe4d6f02e7d</sum>
        </package>
        <package name="perl-IO" version="1.43" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-IO-1.43-481.el9.s390x.rpm</filename>
          <sum type="sha256">e82a9879dbb902597834bf23760377fb4436731e9308ef0b2de9a57bedeebaee</sum>
        </package>
        <package name="perl-Tie-File" version="1.06" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Tie-File-1.06-481.el9.noarch.rpm</filename>
          <sum type="sha256">ebf10d2b643333271e0c0f59840c6d3ea9a4a763bfaceb701ee7919fb4175834</sum>
        </package>
        <package name="perl-GDBM_File" version="1.18" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-GDBM_File-1.18-481.el9.s390x.rpm</filename>
          <sum type="sha256">ec257f5a8bcae2c88b82acd78e5d4c77a40b3bba1c60a9b6e7ca3f06c32e6cc4</sum>
        </package>
        <package name="perl-open" version="1.12" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-open-1.12-481.el9.noarch.rpm</filename>
          <sum type="sha256">f4a9340b12509bd2533772f358d0a3f16358fd4ded743f4f12f26a86de351c76</sum>
        </package>
        <package name="perl-Hash-Util" version="0.23" release="481.el9" epoch="0" arch="s390x" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Hash-Util-0.23-481.el9.s390x.rpm</filename>
          <sum type="sha256">f5655112e6def991e3fd8f93b45d7cad3871118e4b9516a819a8c4b548f07c02</sum>
        </package>
        <package name="perl-vmsish" version="1.04" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-vmsish-1.04-481.el9.noarch.rpm</filename>
          <sum type="sha256">fb332fbb8e44e8b07e4e67f11eddb425d9b0780e9a8ed186d8423a41e20ec1a8</sum>
        </package>
        <package name="perl-Unicode-UCD" version="0.75" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-Unicode-UCD-0.75-481.el9.noarch.rpm</filename>
          <sum type="sha256">fd21c4087b050631d8d1e120893fd07de627cd9ae0c8f48a8646ed631c44520c</sum>
        </package>
        <package name="perl-English" version="1.11" release="481.el9" epoch="0" arch="noarch" src="perl-5.32.1-481.el9.src.rpm">
          <filename>perl-English-1.11-481.el9.noarch.rpm</filename>
          <sum type="sha256">fd7ec0810b6bd863ebfacfcc146c0416688f9df380c43790c32a515ac8750e7a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2236</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:10:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fix(es):

* libvirt: NULL pointer dereference in udevConnectListAllInterfaces() (CVE-2024-2496)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2236" id="RHSA-2024:2236" type="rhsa" title="RHSA-2024:2236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2496" id="CVE-2024-2496" type="cve" title="CVE-2024-2496"/>
      <reference href="https://bugzilla.redhat.com/2269672" id="2269672" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2236.html" id="ALSA-2024:2236" type="self" title="ALSA-2024:2236"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libvirt-daemon-driver-nwfilter" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">0e618a1fd16e1c8f8443e30644c3e9a1d15a467f59c054c7b1bb906aeea9d5f1</sum>
        </package>
        <package name="libvirt-daemon-plugin-lockd" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-lockd-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">2c0ba99ed3f8c4933cda5dbd766cd76e62572fe0c58c025746db6bcc4d4dd88b</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-kvm-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">2ea849a2b70db6d344ac1c271765ddf0de61f5bdf0bf90b46891d35aa1005394</sum>
        </package>
        <package name="libvirt-daemon-lock" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-lock-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">2ecb0393cc04f6f276a76abcc6cdb4a3758160454427c52832b391ad7eca489f</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-secret-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">3080b95f48b18412ca0d3712ce0560b63bcd7ed2ce40cfb589fd71f831b0bc97</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">36e66701002c6c4677e0b2f767ac2f26bec406d747842dfb897b4b60485722cd</sum>
        </package>
        <package name="libvirt-client-qemu" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-client-qemu-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">382fe16157437aafe8467f8d2208446c4b6fe4d65ad75451eb23ea7dcc4a14a1</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">48cb70c0806625f18d830fa031559625b26b7c609dc38cf5a2946db3bd474ec4</sum>
        </package>
        <package name="libvirt-daemon-common" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-common-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">5b7786b902e87eabeb2c83482929daa436e6f2b97a38c44a30787f72f57643f4</sum>
        </package>
        <package name="libvirt-nss" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-nss-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">5b9d1b5a3e54023607f2aabc5d8ec069442d5d048976086b7ca67c6656d25c35</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">5ce73e597a7486e5495c9433132d2d5f96491b577ea007657d0239e24f385b6b</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">608321cfd99b241ec2c1eb182af704ea11652a0b207b239b14950ef893798483</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">78a2a3611fd2afafc57edadc69a67488e907cd33d9f60a890a0697097c444aa1</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">8c9fd6653a3cb021f57730dbceb6fece56d865c32b30d90d7f6b54da5ffbd618</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">91b4e5670ac7024ae695c106a8fd532e2bedba9cee811d6674811f2e61345201</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-config-network-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">98dcc77189b441af3abdc691e92aee87a2d04d7497b2ff6a4281d56cfdec9737</sum>
        </package>
        <package name="libvirt-libs" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-libs-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">98f298cba7d59c41db37df1d2f23cfb77c995c5c905b5cf54cf74ab6cbb025c0</sum>
        </package>
        <package name="libvirt-daemon-proxy" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-proxy-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">a75ad9c7576694e29f969e4e22340e428233dd766303db19fc2178ca8463dd82</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-interface-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">aa4d46fbcc6214111b871860e7d64f4aca94072798fd64967d2ca76653ec0192</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">b02c1d5617ae8565ad097e9fca38a230707f4073edefa7fd60df674a10f3a1d6</sum>
        </package>
        <package name="libvirt-daemon-log" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-log-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">b12108190935ddbf93394c6750d599e1b0f9e1f76e69174122f3662a1dd23329</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-qemu-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">c66fe67f553bd0edfa8b71abf17cdc66026fb3faea1bb8d5473ee67fd817753d</sum>
        </package>
        <package name="libvirt-client" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-client-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d3b2e16b6bb6262677d1dd2a824c80b88f80a4ba69e68af4b61574072ad382bc</sum>
        </package>
        <package name="libvirt-daemon" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">de4df554548967707662aa54f9e3f25b92c2b86ac0885287015803510ddec241</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-network-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">e93ca0cb32ba299c50fd2ddd932a4de0a07e4f59d7e521bbdc123f1742b1bc23</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">f8d7f8f33cce2d0088c931712ef374e312942c2fd1544a915b0e6061d0e6fbbd</sum>
        </package>
        <package name="libvirt" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">f9a286e5aa3e83f632b5534797cb85c676f5f5a7cc9ffd7b86611264c34c8559</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">faeab53b7044c9c45c6f297a12e43bc87dee2473a51ac2934a2bf5f94e9bcd21</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2239</id>
    <title>Moderate: skopeo security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:19:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>skopeo security update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. 

Security Fix(es):

* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2239" id="RHSA-2024:2239" type="rhsa" title="RHSA-2024:2239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45287" id="CVE-2023-45287" type="cve" title="CVE-2023-45287"/>
      <reference href="https://bugzilla.redhat.com/2253193" id="2253193" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2239.html" id="ALSA-2024:2239" type="self" title="ALSA-2024:2239"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="skopeo" version="1.14.3" release="0.1.el9" epoch="2" arch="s390x" src="skopeo-1.14.3-0.1.el9.src.rpm">
          <filename>skopeo-1.14.3-0.1.el9.s390x.rpm</filename>
          <sum type="sha256">8d6ff5f61f5d6be4e458c14e5295814bd9b20be572a7714682f3eaecd97eaa15</sum>
        </package>
        <package name="skopeo-tests" version="1.14.3" release="0.1.el9" epoch="2" arch="s390x" src="skopeo-1.14.3-0.1.el9.src.rpm">
          <filename>skopeo-tests-1.14.3-0.1.el9.s390x.rpm</filename>
          <sum type="sha256">f86bb1ed60a0ef5ce873f0ce0fb7d9f60056cf9827935ae42214f04f4407cdbd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2245</id>
    <title>Moderate: buildah security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:07:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. 

Security Fix(es):

* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)
* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2245" id="RHSA-2024:2245" type="rhsa" title="RHSA-2024:2245"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39326" id="CVE-2023-39326" type="cve" title="CVE-2023-39326"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45287" id="CVE-2023-45287" type="cve" title="CVE-2023-45287"/>
      <reference href="https://bugzilla.redhat.com/2253193" id="2253193" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253330" id="2253330" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2245.html" id="ALSA-2024:2245" type="self" title="ALSA-2024:2245"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="buildah" version="1.33.6" release="2.el9" epoch="2" arch="s390x" src="buildah-1.33.6-2.el9.src.rpm">
          <filename>buildah-1.33.6-2.el9.s390x.rpm</filename>
          <sum type="sha256">271fa7bdb4b4c44dd65b584284ce1016899bf9f5dc85139b24bec807cc17f2b7</sum>
        </package>
        <package name="buildah-tests" version="1.33.6" release="2.el9" epoch="2" arch="s390x" src="buildah-1.33.6-2.el9.src.rpm">
          <filename>buildah-tests-1.33.6-2.el9.s390x.rpm</filename>
          <sum type="sha256">67bc5eff13f5c0ea02cef144f2cc195ed910ca15449c6fd516fc2a9656dc243c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2246</id>
    <title>Moderate: ansible-core bug fix, enhancement, and security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ansible-core bug fix, enhancement, and security update</summary>
    <description>Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically.

Security Fix(es):

* ansible-core: possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration (CVE-2024-0690)

Bug Fix(es):

* Update ansible-core to 2.14.14 (JIRA:AlmaLinux-23783)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2246" id="RHSA-2024:2246" type="rhsa" title="RHSA-2024:2246"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0690" id="CVE-2024-0690" type="cve" title="CVE-2024-0690"/>
      <reference href="https://bugzilla.redhat.com/2259013" id="2259013" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2246.html" id="ALSA-2024:2246" type="self" title="ALSA-2024:2246"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="ansible-test" version="2.14.14" release="1.el9" epoch="1" arch="s390x" src="ansible-core-2.14.14-1.el9.src.rpm">
          <filename>ansible-test-2.14.14-1.el9.s390x.rpm</filename>
          <sum type="sha256">41bf53e74bb3aef3ef3864c1d89cd44cfd3d24ae23cf7589f462c2fa887710f8</sum>
        </package>
        <package name="ansible-core" version="2.14.14" release="1.el9" epoch="1" arch="s390x" src="ansible-core-2.14.14-1.el9.src.rpm">
          <filename>ansible-core-2.14.14-1.el9.s390x.rpm</filename>
          <sum type="sha256">684f6470b4a3ce836abe2b0d3c3e1c9216e69ca5c6d8da11abf7e0e8537f2dc9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2272</id>
    <title>Moderate: containernetworking-plugins security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>containernetworking-plugins security update</summary>
    <description>The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. 

Security Fix(es):

* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)
* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2272" id="RHSA-2024:2272" type="rhsa" title="RHSA-2024:2272"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39326" id="CVE-2023-39326" type="cve" title="CVE-2023-39326"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45287" id="CVE-2023-45287" type="cve" title="CVE-2023-45287"/>
      <reference href="https://bugzilla.redhat.com/2253193" id="2253193" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253330" id="2253330" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2272.html" id="ALSA-2024:2272" type="self" title="ALSA-2024:2272"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="containernetworking-plugins" version="1.4.0" release="2.el9_4" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-2.el9_4.src.rpm">
          <filename>containernetworking-plugins-1.4.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">fc936d003814d66424c98bb3e7f7cee45d4fa779a81af7b8499481cafb3d8649</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2276</id>
    <title>Moderate: qt5-qtbase security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:05:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qt: incorrect integer overflow check (CVE-2023-51714)
* qtbase: potential buffer overflow when reading KTX images (CVE-2024-25580)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2276" id="RHSA-2024:2276" type="rhsa" title="RHSA-2024:2276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51714" id="CVE-2023-51714" type="cve" title="CVE-2023-51714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25580" id="CVE-2024-25580" type="cve" title="CVE-2024-25580"/>
      <reference href="https://bugzilla.redhat.com/2255856" id="2255856" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264423" id="2264423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2276.html" id="ALSA-2024:2276" type="self" title="ALSA-2024:2276"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="qt5-qtbase-devel" version="5.15.9" release="9.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-9.el9.src.rpm">
          <filename>qt5-qtbase-devel-5.15.9-9.el9.s390x.rpm</filename>
          <sum type="sha256">49a0efee80b8b9f41f542343c1f11258f261e5715c9a6c008fd5218ac58de7ce</sum>
        </package>
        <package name="qt5-qtbase-mysql" version="5.15.9" release="9.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-9.el9.src.rpm">
          <filename>qt5-qtbase-mysql-5.15.9-9.el9.s390x.rpm</filename>
          <sum type="sha256">8eb0f33eaecc8d4eb5f74ef54fc90e4b8b5c1edd83f4381531c9083c1e93348f</sum>
        </package>
        <package name="qt5-qtbase-examples" version="5.15.9" release="9.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-9.el9.src.rpm">
          <filename>qt5-qtbase-examples-5.15.9-9.el9.s390x.rpm</filename>
          <sum type="sha256">9110941496d9faed3edc7bbe89cdedb815a28f00bbf90d4417e173bee4acfb42</sum>
        </package>
        <package name="qt5-qtbase-postgresql" version="5.15.9" release="9.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-9.el9.src.rpm">
          <filename>qt5-qtbase-postgresql-5.15.9-9.el9.s390x.rpm</filename>
          <sum type="sha256">9dfb83c057fa8b11c5d26878826c89967ef2766a3b38e00adacd2a9307433cd2</sum>
        </package>
        <package name="qt5-qtbase-gui" version="5.15.9" release="9.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-9.el9.src.rpm">
          <filename>qt5-qtbase-gui-5.15.9-9.el9.s390x.rpm</filename>
          <sum type="sha256">b85182a05d9a656050d13dc2581eae8dff14acd607e7b9ceb2e4d90d7b6dcd92</sum>
        </package>
        <package name="qt5-qtbase-common" version="5.15.9" release="9.el9" epoch="0" arch="noarch" src="qt5-qtbase-5.15.9-9.el9.src.rpm">
          <filename>qt5-qtbase-common-5.15.9-9.el9.noarch.rpm</filename>
          <sum type="sha256">dd44a1f1ae33d4b240175f6bde45a73c18ddc2ab5ccd92b5fe97ccb8ed0fc99f</sum>
        </package>
        <package name="qt5-qtbase-odbc" version="5.15.9" release="9.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-9.el9.src.rpm">
          <filename>qt5-qtbase-odbc-5.15.9-9.el9.s390x.rpm</filename>
          <sum type="sha256">e253f7b0d3d308664723bb6d0ed833956ce3124e6a3f7ff76e20933b2c3ec7b5</sum>
        </package>
        <package name="qt5-qtbase" version="5.15.9" release="9.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-9.el9.src.rpm">
          <filename>qt5-qtbase-5.15.9-9.el9.s390x.rpm</filename>
          <sum type="sha256">fcfe5e4d689bb7a9506dda0243fbd9dd9521a8cebf28a61ee55c18b7b6b35b84</sum>
        </package>
        <package name="qt5-qtbase-private-devel" version="5.15.9" release="9.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-9.el9.src.rpm">
          <filename>qt5-qtbase-private-devel-5.15.9-9.el9.s390x.rpm</filename>
          <sum type="sha256">ff0af1ac28c0441cf9fc020eddd8fdaa132841c96789c1a2beb17a2597390c83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2278</id>
    <title>Moderate: httpd security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:06:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>httpd security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_macro: out-of-bounds read vulnerability (CVE-2023-31122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2278" id="RHSA-2024:2278" type="rhsa" title="RHSA-2024:2278"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31122" id="CVE-2023-31122" type="cve" title="CVE-2023-31122"/>
      <reference href="https://bugzilla.redhat.com/2245332" id="2245332" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2278.html" id="ALSA-2024:2278" type="self" title="ALSA-2024:2278"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="httpd-tools" version="2.4.57" release="8.el9" epoch="0" arch="s390x" src="httpd-2.4.57-8.el9.src.rpm">
          <filename>httpd-tools-2.4.57-8.el9.s390x.rpm</filename>
          <sum type="sha256">0b31627a8d5248d6f06bdb6ba9ec26b4ff4325ce50b8bbe329fd3982d105fbe2</sum>
        </package>
        <package name="mod_ldap" version="2.4.57" release="8.el9" epoch="0" arch="s390x" src="httpd-2.4.57-8.el9.src.rpm">
          <filename>mod_ldap-2.4.57-8.el9.s390x.rpm</filename>
          <sum type="sha256">2a688be449a1ec12a8313ef123d130a6e8605bc3ed3c0006ea757bf61b88385d</sum>
        </package>
        <package name="httpd" version="2.4.57" release="8.el9" epoch="0" arch="s390x" src="httpd-2.4.57-8.el9.src.rpm">
          <filename>httpd-2.4.57-8.el9.s390x.rpm</filename>
          <sum type="sha256">2a9f21d9eda84782ef09cf50531091aa30073d6ae3f8bb071e081c55d1e0dd22</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.57" release="8.el9" epoch="0" arch="noarch" src="httpd-2.4.57-8.el9.src.rpm">
          <filename>httpd-filesystem-2.4.57-8.el9.noarch.rpm</filename>
          <sum type="sha256">2ab36a5c74e62f31f570c01fe4312b7e8d60488429e28e07a8a5395b005f68e0</sum>
        </package>
        <package name="mod_lua" version="2.4.57" release="8.el9" epoch="0" arch="s390x" src="httpd-2.4.57-8.el9.src.rpm">
          <filename>mod_lua-2.4.57-8.el9.s390x.rpm</filename>
          <sum type="sha256">2c4cd71775146547c0cfb3688eee6234b20e5cc665f82fd75860c6a0207acd35</sum>
        </package>
        <package name="httpd-core" version="2.4.57" release="8.el9" epoch="0" arch="s390x" src="httpd-2.4.57-8.el9.src.rpm">
          <filename>httpd-core-2.4.57-8.el9.s390x.rpm</filename>
          <sum type="sha256">2fb70c253e67725db75c63264c096dadfbf9850134f8b1037720cc577e36691c</sum>
        </package>
        <package name="httpd-devel" version="2.4.57" release="8.el9" epoch="0" arch="s390x" src="httpd-2.4.57-8.el9.src.rpm">
          <filename>httpd-devel-2.4.57-8.el9.s390x.rpm</filename>
          <sum type="sha256">431e1cb3ebf8f91537ff01caec9ef32b4b29bc8c207e5c1816f2cede8366012c</sum>
        </package>
        <package name="mod_session" version="2.4.57" release="8.el9" epoch="0" arch="s390x" src="httpd-2.4.57-8.el9.src.rpm">
          <filename>mod_session-2.4.57-8.el9.s390x.rpm</filename>
          <sum type="sha256">4b9a678901aa022f550f290f3c037cb27e805a59cc5b537bb9315f18476b04f8</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.57" release="8.el9" epoch="1" arch="s390x" src="httpd-2.4.57-8.el9.src.rpm">
          <filename>mod_proxy_html-2.4.57-8.el9.s390x.rpm</filename>
          <sum type="sha256">737227f7c5d0ed303093ab9cfe1458c69ba36b8bac5a1bac43b46eb99434e1b9</sum>
        </package>
        <package name="mod_ssl" version="2.4.57" release="8.el9" epoch="1" arch="s390x" src="httpd-2.4.57-8.el9.src.rpm">
          <filename>mod_ssl-2.4.57-8.el9.s390x.rpm</filename>
          <sum type="sha256">7dbfa23e9dc1b1b29dfca4e107fc9d9ed90888642fe378636ec3d07a0add58c1</sum>
        </package>
        <package name="httpd-manual" version="2.4.57" release="8.el9" epoch="0" arch="noarch" src="httpd-2.4.57-8.el9.src.rpm">
          <filename>httpd-manual-2.4.57-8.el9.noarch.rpm</filename>
          <sum type="sha256">fbcf58ec068a000054e200feb51f9895f88c020e0957e544f35b5c450e8dc47b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2287</id>
    <title>Moderate: gstreamer1-plugins-bad-free security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
* gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)
* gstreamer-plugins-bad-free: buffer overflow vulnerability (CVE-2023-50186)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2287" id="RHSA-2024:2287" type="rhsa" title="RHSA-2024:2287"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40474" id="CVE-2023-40474" type="cve" title="CVE-2023-40474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40475" id="CVE-2023-40475" type="cve" title="CVE-2023-40475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40476" id="CVE-2023-40476" type="cve" title="CVE-2023-40476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50186" id="CVE-2023-50186" type="cve" title="CVE-2023-50186"/>
      <reference href="https://bugzilla.redhat.com/2254587" id="2254587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254588" id="2254588" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254589" id="2254589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255639" id="2255639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2287.html" id="ALSA-2024:2287" type="self" title="ALSA-2024:2287"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="gstreamer1-plugins-bad-free" version="1.22.1" release="4.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.1-4.el9.src.rpm">
          <filename>gstreamer1-plugins-bad-free-1.22.1-4.el9.s390x.rpm</filename>
          <sum type="sha256">5ad4f98a8d5670f69af34ca6a35a881948abb50b629722afa429175326eb8886</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2289</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: infinite loop via a crafted TIFF file (CVE-2022-40090)
* libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c (CVE-2023-3618)
* libtiff: integer overflow in tiffcp.c (CVE-2023-40745)
* libtiff: potential integer overflow in raw2tiff.c (CVE-2023-41175)
* libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2289" id="RHSA-2024:2289" type="rhsa" title="RHSA-2024:2289"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40090" id="CVE-2022-40090" type="cve" title="CVE-2022-40090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3618" id="CVE-2023-3618" type="cve" title="CVE-2023-3618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40745" id="CVE-2023-40745" type="cve" title="CVE-2023-40745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41175" id="CVE-2023-41175" type="cve" title="CVE-2023-41175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6228" id="CVE-2023-6228" type="cve" title="CVE-2023-6228"/>
      <reference href="https://bugzilla.redhat.com/2215865" id="2215865" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2234970" id="2234970" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2235264" id="2235264" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2235265" id="2235265" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240995" id="2240995" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2289.html" id="ALSA-2024:2289" type="self" title="ALSA-2024:2289"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libtiff-devel" version="4.4.0" release="12.el9" epoch="0" arch="s390x" src="libtiff-4.4.0-12.el9.src.rpm">
          <filename>libtiff-devel-4.4.0-12.el9.s390x.rpm</filename>
          <sum type="sha256">062cbd864cef9021e9a2c706a4ab4cc32e7bd025d291031a497589da9f64596c</sum>
        </package>
        <package name="libtiff" version="4.4.0" release="12.el9" epoch="0" arch="s390x" src="libtiff-4.4.0-12.el9.src.rpm">
          <filename>libtiff-4.4.0-12.el9.s390x.rpm</filename>
          <sum type="sha256">4ffb9a2dee15cf0e01150fec685200f1072ad120d8b6f66b208c95138067c229</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2290</id>
    <title>Moderate: mutt security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mutt security update</summary>
    <description>Mutt is a low resource, highly configurable, text-based MIME e-mail client. Mutt supports most e-mail storing formats, such as mbox and Maildir, as well as most protocols, including POP3 and IMAP.

Security Fix(es):

* mutt: null pointer dereference (CVE-2023-4874)
* mutt: null pointer dereference (CVE-2023-4875)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2290" id="RHSA-2024:2290" type="rhsa" title="RHSA-2024:2290"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4874" id="CVE-2023-4874" type="cve" title="CVE-2023-4874"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4875" id="CVE-2023-4875" type="cve" title="CVE-2023-4875"/>
      <reference href="https://bugzilla.redhat.com/2238240" id="2238240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238241" id="2238241" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2290.html" id="ALSA-2024:2290" type="self" title="ALSA-2024:2290"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="mutt" version="2.2.6" release="2.el9" epoch="5" arch="s390x" src="mutt-2.2.6-2.el9.src.rpm">
          <filename>mutt-2.2.6-2.el9.s390x.rpm</filename>
          <sum type="sha256">271ee9ec47fcb2be6bf0c5deae82853a231431ab38ee8820029504c82633b3c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2292</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:57:51"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2292" id="RHSA-2024:2292" type="rhsa" title="RHSA-2024:2292"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2292.html" id="ALSA-2024:2292" type="self" title="ALSA-2024:2292"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.11-tkinter" version="3.11.7" release="1.el9" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9.src.rpm">
          <filename>python3.11-tkinter-3.11.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">0ea385bcce98236441d7cc0d4dad2715a8dbcbc3a53dd75445b075173ecd0aff</sum>
        </package>
        <package name="python3.11" version="3.11.7" release="1.el9" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9.src.rpm">
          <filename>python3.11-3.11.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">1b0e5af2f5470d8cd8f230e588df336c07995fb9e1f953bb49956ec93883bb88</sum>
        </package>
        <package name="python3.11-libs" version="3.11.7" release="1.el9" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9.src.rpm">
          <filename>python3.11-libs-3.11.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">42d1fcd46927d9e2873ebc1e538494aa507598aeb5ec38fdd61c44f010ae3ea4</sum>
        </package>
        <package name="python3.11-devel" version="3.11.7" release="1.el9" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9.src.rpm">
          <filename>python3.11-devel-3.11.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">ed4327d387da194b6819cb21eb07cfde5dca345fbb73a6230cbe5231a216e361</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2295</id>
    <title>Moderate: libjpeg-turbo security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:55:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libjpeg-turbo security update</summary>
    <description>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

* libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c (CVE-2021-29390)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2295" id="RHSA-2024:2295" type="rhsa" title="RHSA-2024:2295"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-29390" id="CVE-2021-29390" type="cve" title="CVE-2021-29390"/>
      <reference href="https://bugzilla.redhat.com/2235521" id="2235521" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2295.html" id="ALSA-2024:2295" type="self" title="ALSA-2024:2295"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libjpeg-turbo" version="2.0.90" release="7.el9" epoch="0" arch="s390x" src="libjpeg-turbo-2.0.90-7.el9.src.rpm">
          <filename>libjpeg-turbo-2.0.90-7.el9.s390x.rpm</filename>
          <sum type="sha256">3801bb7e60ea4fe3fc9e047ff863a56d1a958a943325e25457f9b48a2e8bccff</sum>
        </package>
        <package name="libjpeg-turbo-devel" version="2.0.90" release="7.el9" epoch="0" arch="s390x" src="libjpeg-turbo-2.0.90-7.el9.src.rpm">
          <filename>libjpeg-turbo-devel-2.0.90-7.el9.s390x.rpm</filename>
          <sum type="sha256">bed7d426effc1e492258249a157d02e985910d9b975aa8701b70b51a7e2aa403</sum>
        </package>
        <package name="libjpeg-turbo-utils" version="2.0.90" release="7.el9" epoch="0" arch="s390x" src="libjpeg-turbo-2.0.90-7.el9.src.rpm">
          <filename>libjpeg-turbo-utils-2.0.90-7.el9.s390x.rpm</filename>
          <sum type="sha256">ea699d88c344a6baa3f4d2b3f7b4ee0e481cfc21b8ca6351d71e9f532a1e8a70</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2298</id>
    <title>Important: tigervnc security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:14:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: Use-after-free bug in DamageDestroy (CVE-2023-5574)
* xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2298" id="RHSA-2024:2298" type="rhsa" title="RHSA-2024:2298"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5380" id="CVE-2023-5380" type="cve" title="CVE-2023-5380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5574" id="CVE-2023-5574" type="cve" title="CVE-2023-5574"/>
      <reference href="https://bugzilla.redhat.com/2244735" id="2244735" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244736" id="2244736" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2298.html" id="ALSA-2024:2298" type="self" title="ALSA-2024:2298"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="tigervnc-selinux" version="1.13.1" release="8.el9" epoch="0" arch="noarch" src="tigervnc-1.13.1-8.el9.src.rpm">
          <filename>tigervnc-selinux-1.13.1-8.el9.noarch.rpm</filename>
          <sum type="sha256">1b4bc52ba827c1770a7def1186a1504849384f92f681963770b92aedaf8430cf</sum>
        </package>
        <package name="tigervnc" version="1.13.1" release="8.el9" epoch="0" arch="s390x" src="tigervnc-1.13.1-8.el9.src.rpm">
          <filename>tigervnc-1.13.1-8.el9.s390x.rpm</filename>
          <sum type="sha256">5ec413cd7a553b519f6ebcbedbb666e0c3a11ce9dc778a5e65b2942556af8767</sum>
        </package>
        <package name="tigervnc-server" version="1.13.1" release="8.el9" epoch="0" arch="s390x" src="tigervnc-1.13.1-8.el9.src.rpm">
          <filename>tigervnc-server-1.13.1-8.el9.s390x.rpm</filename>
          <sum type="sha256">7ef5ff1d6e1684a82455f683a2c9ae6f58eac24dea4977b089718ef0e396d1ba</sum>
        </package>
        <package name="tigervnc-icons" version="1.13.1" release="8.el9" epoch="0" arch="noarch" src="tigervnc-1.13.1-8.el9.src.rpm">
          <filename>tigervnc-icons-1.13.1-8.el9.noarch.rpm</filename>
          <sum type="sha256">979a5550d7a93b3b7c3315d677c68e470613c62749d044aff57d64a6f23d6153</sum>
        </package>
        <package name="tigervnc-license" version="1.13.1" release="8.el9" epoch="0" arch="noarch" src="tigervnc-1.13.1-8.el9.src.rpm">
          <filename>tigervnc-license-1.13.1-8.el9.noarch.rpm</filename>
          <sum type="sha256">bd0c418ae3f80bd20978191c7c8771eaa24e156fe3f255c792c2af4e8869ec28</sum>
        </package>
        <package name="tigervnc-server-module" version="1.13.1" release="8.el9" epoch="0" arch="s390x" src="tigervnc-1.13.1-8.el9.src.rpm">
          <filename>tigervnc-server-module-1.13.1-8.el9.s390x.rpm</filename>
          <sum type="sha256">d4d4fb550a295cb252cdd3fb0dc075695c873cda3d076d3b7bd735b5e4d72d39</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.13.1" release="8.el9" epoch="0" arch="s390x" src="tigervnc-1.13.1-8.el9.src.rpm">
          <filename>tigervnc-server-minimal-1.13.1-8.el9.s390x.rpm</filename>
          <sum type="sha256">de2faddfa3d8bb99f9c43c39e1375055453f9ee02cc06911537c18945f6ad434</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2302</id>
    <title>Moderate: gstreamer1-plugins-base security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:55:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-base security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

Security Fix(es):

* gstreamer-plugins-base: heap overwrite in subtitle parsing (CVE-2023-37328)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2302" id="RHSA-2024:2302" type="rhsa" title="RHSA-2024:2302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37328" id="CVE-2023-37328" type="cve" title="CVE-2023-37328"/>
      <reference href="https://bugzilla.redhat.com/2254540" id="2254540" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2302.html" id="ALSA-2024:2302" type="self" title="ALSA-2024:2302"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="gstreamer1-plugins-base-tools" version="1.22.1" release="2.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.22.1-2.el9.src.rpm">
          <filename>gstreamer1-plugins-base-tools-1.22.1-2.el9.s390x.rpm</filename>
          <sum type="sha256">095fdff4d123cf7b6fe103b41291b1441a73239ad0363b857965f4bb5d363b22</sum>
        </package>
        <package name="gstreamer1-plugins-base-devel" version="1.22.1" release="2.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.22.1-2.el9.src.rpm">
          <filename>gstreamer1-plugins-base-devel-1.22.1-2.el9.s390x.rpm</filename>
          <sum type="sha256">50bfebbd5ef321a4ee08718bf70513945838935297e1ad9ed6ec5bd7bccc6195</sum>
        </package>
        <package name="gstreamer1-plugins-base" version="1.22.1" release="2.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.22.1-2.el9.src.rpm">
          <filename>gstreamer1-plugins-base-1.22.1-2.el9.s390x.rpm</filename>
          <sum type="sha256">a72867f2131a9864acde3ad1a6608c44b660095b84b69167b757ea4ef4993f51</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2303</id>
    <title>Moderate: gstreamer1-plugins-good security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-good security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

* gstreamer-plugins-good: integer overflow leading to heap overwrite in FLAC image tag handling (CVE-2023-37327)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2303" id="RHSA-2024:2303" type="rhsa" title="RHSA-2024:2303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37327" id="CVE-2023-37327" type="cve" title="CVE-2023-37327"/>
      <reference href="https://bugzilla.redhat.com/2254539" id="2254539" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2303.html" id="ALSA-2024:2303" type="self" title="ALSA-2024:2303"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="gstreamer1-plugins-good-gtk" version="1.22.1" release="2.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.22.1-2.el9.src.rpm">
          <filename>gstreamer1-plugins-good-gtk-1.22.1-2.el9.s390x.rpm</filename>
          <sum type="sha256">96857a86d361ccc666308ade3fab1917031dd1b887adc1d77c72c2bfe62161f5</sum>
        </package>
        <package name="gstreamer1-plugins-good" version="1.22.1" release="2.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.22.1-2.el9.src.rpm">
          <filename>gstreamer1-plugins-good-1.22.1-2.el9.s390x.rpm</filename>
          <sum type="sha256">d85f1ccf62b2573cabbcc785cf172f303d987c729db6cb19f30367c4aced3532</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2337</id>
    <title>Moderate: python3.11-cryptography security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-cryptography security update</summary>
    <description>The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers.

Security Fix(es):

* python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2337" id="RHSA-2024:2337" type="rhsa" title="RHSA-2024:2337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-49083" id="CVE-2023-49083" type="cve" title="CVE-2023-49083"/>
      <reference href="https://bugzilla.redhat.com/2255331" id="2255331" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2337.html" id="ALSA-2024:2337" type="self" title="ALSA-2024:2337"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.11-cryptography" version="37.0.2" release="6.el9" epoch="0" arch="s390x" src="python3.11-cryptography-37.0.2-6.el9.src.rpm">
          <filename>python3.11-cryptography-37.0.2-6.el9.s390x.rpm</filename>
          <sum type="sha256">b5f777b80c421bb63778a2b538c8a98f59c4e31459505e0768f89a84bbea36b1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2348</id>
    <title>Moderate: python-jinja2 security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:04:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-jinja2 security update</summary>
    <description>The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. 

Security Fix(es):

* jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2348" id="RHSA-2024:2348" type="rhsa" title="RHSA-2024:2348"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22195" id="CVE-2024-22195" type="cve" title="CVE-2024-22195"/>
      <reference href="https://bugzilla.redhat.com/2257854" id="2257854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2348.html" id="ALSA-2024:2348" type="self" title="ALSA-2024:2348"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3-jinja2" version="2.11.3" release="5.el9" epoch="0" arch="noarch" src="python-jinja2-2.11.3-5.el9.src.rpm">
          <filename>python3-jinja2-2.11.3-5.el9.noarch.rpm</filename>
          <sum type="sha256">26ea89d6c53af8b9395a9165cc42afafb92cb1bb71b81bffbed08898e33a2487</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2366</id>
    <title>Moderate: freeglut security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freeglut security update</summary>
    <description>freeglut is a completely open source alternative to the OpenGL Utility Toolkit (GLUT) library with an OSI approved free software license.

Security Fix(es):

* freeglut: memory leak via glutAddSubMenu() function (CVE-2024-24258)
* freeglut: memory leak via glutAddMenuEntry() function (CVE-2024-24259)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2366" id="RHSA-2024:2366" type="rhsa" title="RHSA-2024:2366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24258" id="CVE-2024-24258" type="cve" title="CVE-2024-24258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24259" id="CVE-2024-24259" type="cve" title="CVE-2024-24259"/>
      <reference href="https://bugzilla.redhat.com/2263939" id="2263939" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263943" id="2263943" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2366.html" id="ALSA-2024:2366" type="self" title="ALSA-2024:2366"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="freeglut-devel" version="3.2.1" release="10.el9" epoch="0" arch="s390x" src="freeglut-3.2.1-10.el9.src.rpm">
          <filename>freeglut-devel-3.2.1-10.el9.s390x.rpm</filename>
          <sum type="sha256">6425cc3ca012681348468836ab808bf5843b86f546f9ea9ea9ce1398eb28fe2a</sum>
        </package>
        <package name="freeglut" version="3.2.1" release="10.el9" epoch="0" arch="s390x" src="freeglut-3.2.1-10.el9.src.rpm">
          <filename>freeglut-3.2.1-10.el9.s390x.rpm</filename>
          <sum type="sha256">dec2a365426bdc12ac8439045fc93f657cc70ee348c152c32556b6ad2216f512</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2368</id>
    <title>Moderate: mod_http2 security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:03:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mod_http2 security update</summary>
    <description>The mod_http2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.

Security Fix(es):

* httpd: mod_http2: DoS in HTTP/2 with initial window size 0 (CVE-2023-43622)
* mod_http2: reset requests exhaust memory (incomplete fix of CVE-2023-44487) (CVE-2023-45802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2368" id="RHSA-2024:2368" type="rhsa" title="RHSA-2024:2368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43622" id="CVE-2023-43622" type="cve" title="CVE-2023-43622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45802" id="CVE-2023-45802" type="cve" title="CVE-2023-45802"/>
      <reference href="https://bugzilla.redhat.com/2243877" id="2243877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245153" id="2245153" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2368.html" id="ALSA-2024:2368" type="self" title="ALSA-2024:2368"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="mod_http2" version="2.0.26" release="1.el9" epoch="0" arch="s390x" src="mod_http2-2.0.26-1.el9.src.rpm">
          <filename>mod_http2-2.0.26-1.el9.s390x.rpm</filename>
          <sum type="sha256">edddcc9b8fcc5e1a318b3136aa8f784ba1aade9452cb270b086be95a68df9953</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2377</id>
    <title>Moderate: zziplib security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zziplib security update</summary>
    <description>The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

* zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c (CVE-2020-18770)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2377" id="RHSA-2024:2377" type="rhsa" title="RHSA-2024:2377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-18770" id="CVE-2020-18770" type="cve" title="CVE-2020-18770"/>
      <reference href="https://bugzilla.redhat.com/2246907" id="2246907" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2377.html" id="ALSA-2024:2377" type="self" title="ALSA-2024:2377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="zziplib" version="0.13.71" release="11.el9_4" epoch="0" arch="s390x" src="zziplib-0.13.71-11.el9_4.src.rpm">
          <filename>zziplib-0.13.71-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">56f1f8f0a483727b82fed0b0b20f65c71b0585bfab50875ed4e7b6697f5886bf</sum>
        </package>
        <package name="zziplib-utils" version="0.13.71" release="11.el9_4" epoch="0" arch="s390x" src="zziplib-0.13.71-11.el9_4.src.rpm">
          <filename>zziplib-utils-0.13.71-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">5e0f384880ecd264f253dd94f6dabdc1a09942a12a69dde26502dd30a8888729</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2387</id>
    <title>Moderate: mod_jk and mod_proxy_cluster security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mod_jk and mod_proxy_cluster security update</summary>
    <description>The mod_jk module is a plugin for the Apache HTTP Server to connect it with the Apache Tomcat servlet engine.

The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality.

Security Fix(es):

* httpd: Apache Tomcat Connectors (mod_jk) Information Disclosure (CVE-2023-41081)
* mod_cluster/mod_proxy_cluster: Stored Cross site Scripting (CVE-2023-6710)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2387" id="RHSA-2024:2387" type="rhsa" title="RHSA-2024:2387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41081" id="CVE-2023-41081" type="cve" title="CVE-2023-41081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6710" id="CVE-2023-6710" type="cve" title="CVE-2023-6710"/>
      <reference href="https://bugzilla.redhat.com/2238847" id="2238847" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254128" id="2254128" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2387.html" id="ALSA-2024:2387" type="self" title="ALSA-2024:2387"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="mod_jk" version="1.2.49" release="1.el9_4" epoch="0" arch="s390x" src="mod_jk-1.2.49-1.el9_4.src.rpm">
          <filename>mod_jk-1.2.49-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">1dbf1bfbfc9c76b3feb16feb3854b21cec86a5cc24b2283265958db4b6b69ee9</sum>
        </package>
        <package name="mod_proxy_cluster" version="1.3.20" release="1.el9_4" epoch="0" arch="s390x" src="mod_proxy_cluster-1.3.20-1.el9_4.src.rpm">
          <filename>mod_proxy_cluster-1.3.20-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">40ee496dba076c0a85cc45936df0df60274f659a9273e51d850d5a2e10800879</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2394</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-11-03 22:05:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546)
  * kernel: multiple use-after-free vulnerabilities (CVE-2024-1086, CVE-2023-3567, CVE-2023-4133, CVE-2023-6932, CVE-2023-39198, CVE-2023-51043, CVE-2023-51779, CVE-2023-51780, CVE-2024-1085, CVE-2024-26582)
  * kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
  * kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480)
  * kernel: multiple NULL pointer dereference vulnerabilities (CVE-2022-38096, CVE-2023-6622, CVE-2023-6915, CVE-2023-42754, CVE-2023-46862, CVE-2023-52574, CVE-2024-0841, CVE-2023-52448)
  * kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c (CVE-2022-45934)
  * kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable() (CVE-2023-6040)
  * kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF (CVE-2023-6531)
  * kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size (CVE-2023-6931)
  * kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses (CVE-2023-24023)
  * kernel: irdma: Improper access control (CVE-2023-25775)
  * Kernel: double free in hci_conn_cleanup of the bluetooth subsystem (CVE-2023-28464)
  * kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c (CVE-2023-28866)
  * kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl (CVE-2023-31083)
  * kernel: multiple out-of-bounds read vulnerabilities (CVE-2023-37453, CVE-2023-39189, CVE-2023-39193, CVE-2023-6121, CVE-2023-39194)
  * kernel: netfilter: race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP (CVE-2023-42756)
  * kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write (CVE-2023-45863)
  * kernel: smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434)
  * kernel: mm/sparsemem: fix race in accessing memory_section-&gt;usage (CVE-2023-52489)
  * kernel: net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522)
  * kernel: multiple memory leak vulnerabilities (CVE-2023-52529, CVE-2023-52581)
  * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
  * kernel: net/core: kernel crash in ETH_P_1588 flow dissector (CVE-2023-52580)
  * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
  * kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client (CVE-2024-0565)
  * kernel: tls: race between async notify and socket close (CVE-2024-26583)
  * kernel: tls: handle backlogging of crypto requests (CVE-2024-26584)
  * kernel: tls: race between tx work scheduling and socket close (CVE-2024-26585)
  * kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586)
  * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
  * kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602)
  * kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters (CVE-2024-26609)
  * kernel: local dos vulnerability in scatterwalk_copychunks (CVE-2023-6176)
  * kernel: perf/x86/lbr: Filter vsyscall addresses (CVE-2023-52476)
  * kernel: netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620)
  * kernel: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (CVE-2024-26633)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2394" id="RHSA-2024:2394" type="rhsa" title="RHSA-2024:2394"/>
      <reference href="https://bugzilla.redhat.com/1918601" id="1918601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2049700" id="2049700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133452" id="2133452" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151959" id="2151959" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2177759" id="2177759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2185519" id="2185519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188102" id="2188102" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210024" id="2210024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213132" id="2213132" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218332" id="2218332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219359" id="2219359" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221039" id="2221039" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221463" id="2221463" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221702" id="2221702" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226777" id="2226777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226787" id="2226787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226788" id="2226788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231410" id="2231410" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2239845" id="2239845" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2239848" id="2239848" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244720" id="2244720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2246980" id="2246980" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250043" id="2250043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2252731" id="2252731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253034" id="2253034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253632" id="2253632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254961" id="2254961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254982" id="2254982" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255283" id="2255283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255498" id="2255498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256490" id="2256490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256822" id="2256822" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257682" id="2257682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258013" id="2258013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258518" id="2258518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2260005" id="2260005" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2262126" id="2262126" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2262127" id="2262127" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265285" id="2265285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265517" id="2265517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265518" id="2265518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265519" id="2265519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265520" id="2265520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265645" id="2265645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265646" id="2265646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265653" id="2265653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267041" id="2267041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267695" id="2267695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267750" id="2267750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267758" id="2267758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267760" id="2267760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267761" id="2267761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267788" id="2267788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267795" id="2267795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269189" id="2269189" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269217" id="2269217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270080" id="2270080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270118" id="2270118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270883" id="2270883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2394.html" id="ALSA-2024:2394" type="self" title="ALSA-2024:2394"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2020-26555.html" id="CVE-2020-26555" type="cve" title="CVE-2020-26555"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-0480.html" id="CVE-2022-0480" type="cve" title="CVE-2022-0480"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-38096.html" id="CVE-2022-38096" type="cve" title="CVE-2022-38096"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-45934.html" id="CVE-2022-45934" type="cve" title="CVE-2022-45934"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-24023.html" id="CVE-2023-24023" type="cve" title="CVE-2023-24023"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-25775.html" id="CVE-2023-25775" type="cve" title="CVE-2023-25775"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-28464.html" id="CVE-2023-28464" type="cve" title="CVE-2023-28464"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-28866.html" id="CVE-2023-28866" type="cve" title="CVE-2023-28866"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-31083.html" id="CVE-2023-31083" type="cve" title="CVE-2023-31083"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-3567.html" id="CVE-2023-3567" type="cve" title="CVE-2023-3567"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-37453.html" id="CVE-2023-37453" type="cve" title="CVE-2023-37453"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39189.html" id="CVE-2023-39189" type="cve" title="CVE-2023-39189"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39193.html" id="CVE-2023-39193" type="cve" title="CVE-2023-39193"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39194.html" id="CVE-2023-39194" type="cve" title="CVE-2023-39194"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39198.html" id="CVE-2023-39198" type="cve" title="CVE-2023-39198"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-4133.html" id="CVE-2023-4133" type="cve" title="CVE-2023-4133"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-42754.html" id="CVE-2023-42754" type="cve" title="CVE-2023-42754"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-42756.html" id="CVE-2023-42756" type="cve" title="CVE-2023-42756"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-45863.html" id="CVE-2023-45863" type="cve" title="CVE-2023-45863"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-46862.html" id="CVE-2023-46862" type="cve" title="CVE-2023-46862"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-51043.html" id="CVE-2023-51043" type="cve" title="CVE-2023-51043"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-51779.html" id="CVE-2023-51779" type="cve" title="CVE-2023-51779"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-51780.html" id="CVE-2023-51780" type="cve" title="CVE-2023-51780"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52434.html" id="CVE-2023-52434" type="cve" title="CVE-2023-52434"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52448.html" id="CVE-2023-52448" type="cve" title="CVE-2023-52448"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52450.html" id="CVE-2023-52450" type="cve" title="CVE-2023-52450"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52476.html" id="CVE-2023-52476" type="cve" title="CVE-2023-52476"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52489.html" id="CVE-2023-52489" type="cve" title="CVE-2023-52489"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52522.html" id="CVE-2023-52522" type="cve" title="CVE-2023-52522"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52529.html" id="CVE-2023-52529" type="cve" title="CVE-2023-52529"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52574.html" id="CVE-2023-52574" type="cve" title="CVE-2023-52574"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52578.html" id="CVE-2023-52578" type="cve" title="CVE-2023-52578"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52580.html" id="CVE-2023-52580" type="cve" title="CVE-2023-52580"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52581.html" id="CVE-2023-52581" type="cve" title="CVE-2023-52581"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52597.html" id="CVE-2023-52597" type="cve" title="CVE-2023-52597"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52610.html" id="CVE-2023-52610" type="cve" title="CVE-2023-52610"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52620.html" id="CVE-2023-52620" type="cve" title="CVE-2023-52620"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6040.html" id="CVE-2023-6040" type="cve" title="CVE-2023-6040"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6121.html" id="CVE-2023-6121" type="cve" title="CVE-2023-6121"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6176.html" id="CVE-2023-6176" type="cve" title="CVE-2023-6176"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6531.html" id="CVE-2023-6531" type="cve" title="CVE-2023-6531"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6546.html" id="CVE-2023-6546" type="cve" title="CVE-2023-6546"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6622.html" id="CVE-2023-6622" type="cve" title="CVE-2023-6622"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6915.html" id="CVE-2023-6915" type="cve" title="CVE-2023-6915"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6931.html" id="CVE-2023-6931" type="cve" title="CVE-2023-6931"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6932.html" id="CVE-2023-6932" type="cve" title="CVE-2023-6932"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-0565.html" id="CVE-2024-0565" type="cve" title="CVE-2024-0565"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-0841.html" id="CVE-2024-0841" type="cve" title="CVE-2024-0841"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-1085.html" id="CVE-2024-1085" type="cve" title="CVE-2024-1085"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-1086.html" id="CVE-2024-1086" type="cve" title="CVE-2024-1086"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-25744.html" id="CVE-2024-25744" type="cve" title="CVE-2024-25744"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26582.html" id="CVE-2024-26582" type="cve" title="CVE-2024-26582"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26583.html" id="CVE-2024-26583" type="cve" title="CVE-2024-26583"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26584.html" id="CVE-2024-26584" type="cve" title="CVE-2024-26584"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26585.html" id="CVE-2024-26585" type="cve" title="CVE-2024-26585"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26586.html" id="CVE-2024-26586" type="cve" title="CVE-2024-26586"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26593.html" id="CVE-2024-26593" type="cve" title="CVE-2024-26593"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26602.html" id="CVE-2024-26602" type="cve" title="CVE-2024-26602"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26609.html" id="CVE-2024-26609" type="cve" title="CVE-2024-26609"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26633.html" id="CVE-2024-26633" type="cve" title="CVE-2024-26633"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26671.html" id="CVE-2024-26671" type="cve" title="CVE-2024-26671"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-427.13.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">44005a7f1d50c1e8a68b15ee316a603d4661ee890a68e3537c3c756d3ae1179d</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-427.13.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">4db8893c0cc9f2ac93489d461bd36d74098a6194e0818125a4e67ecc12af09ac</sum>
        </package>
        <package name="rv" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>rv-5.14.0-427.13.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">6cdf73a13a3c4f2f3cef6f66e39d79b9f5d8ca53dcef7ba057b268ebdfd1b870</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-5.14.0-427.13.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">7396186306e4659013666eccd6de26c0bec946f9cff266ae0db24aad87a82a90</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-headers-5.14.0-427.13.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">810e9741ca19b4ea21a54fe01dbdff8c13e4ae0376acc89ca0f807be069ac204</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-devel-5.14.0-427.13.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">9317cf76b5a04ad3ad417945f138dc1691a8fdb429e5e424d1ea19f40d4d940d</sum>
        </package>
        <package name="rtla" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>rtla-5.14.0-427.13.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">a756d909a567729b6958d69e0bcfbabfc0f10e4da5db100e09cf600f64c00e09</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-427.13.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">b46dcb19a9381853469d6f2a8eee1077fa69f604bc8839204f796afaf9a92bd3</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-doc-5.14.0-427.13.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">b67841ac61f12b5f5a84ccb263ccb3c6d9369085ada5f0bd898995885898c7ec</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-devel-matched-5.14.0-427.13.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">cc43f06b2c11fec74a13d9e6b3b24cede324567acb50f5935e70aa3aec647abf</sum>
        </package>
        <package name="perf" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>perf-5.14.0-427.13.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">f3198b6535b378f3419654b86b23cc20e013fb4e120af831658414408adab7b5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2410</id>
    <title>Moderate: harfbuzz security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:56:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>harfbuzz security update</summary>
    <description>HarfBuzz is an implementation of the OpenType Layout engine.

Security Fix(es):

* harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks (CVE-2023-25193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2410" id="RHSA-2024:2410" type="rhsa" title="RHSA-2024:2410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2410.html" id="ALSA-2024:2410" type="self" title="ALSA-2024:2410"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="harfbuzz-devel" version="2.7.4" release="10.el9" epoch="0" arch="s390x" src="harfbuzz-2.7.4-10.el9.src.rpm">
          <filename>harfbuzz-devel-2.7.4-10.el9.s390x.rpm</filename>
          <sum type="sha256">37a722815691c7ef201e376bbea3145b3bc03f2186a3c341b893f95bdfd3bb2e</sum>
        </package>
        <package name="harfbuzz" version="2.7.4" release="10.el9" epoch="0" arch="s390x" src="harfbuzz-2.7.4-10.el9.src.rpm">
          <filename>harfbuzz-2.7.4-10.el9.s390x.rpm</filename>
          <sum type="sha256">41712944238648492b1c29fc8379782fe8869fc2ad9151363a710088321aa4a0</sum>
        </package>
        <package name="harfbuzz-icu" version="2.7.4" release="10.el9" epoch="0" arch="s390x" src="harfbuzz-2.7.4-10.el9.src.rpm">
          <filename>harfbuzz-icu-2.7.4-10.el9.s390x.rpm</filename>
          <sum type="sha256">647c133c879eab3848bcd0f66ee84acbbd0f415e4898932fc06c1524a94755ee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2433</id>
    <title>Moderate: avahi security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469)
* avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470)
* avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471)
* avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472)
* avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2433" id="RHSA-2024:2433" type="rhsa" title="RHSA-2024:2433"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38469" id="CVE-2023-38469" type="cve" title="CVE-2023-38469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38470" id="CVE-2023-38470" type="cve" title="CVE-2023-38470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38471" id="CVE-2023-38471" type="cve" title="CVE-2023-38471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38472" id="CVE-2023-38472" type="cve" title="CVE-2023-38472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38473" id="CVE-2023-38473" type="cve" title="CVE-2023-38473"/>
      <reference href="https://bugzilla.redhat.com/2191687" id="2191687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191690" id="2191690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191691" id="2191691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191692" id="2191692" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191694" id="2191694" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2433.html" id="ALSA-2024:2433" type="self" title="ALSA-2024:2433"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="avahi-glib" version="0.8" release="20.el9" epoch="0" arch="s390x" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-glib-0.8-20.el9.s390x.rpm</filename>
          <sum type="sha256">a23db422b279474ae07119e399e120efa0096979cfe8a6ecc8bb0c51c1e841fc</sum>
        </package>
        <package name="avahi-tools" version="0.8" release="20.el9" epoch="0" arch="s390x" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-tools-0.8-20.el9.s390x.rpm</filename>
          <sum type="sha256">aa6852f40daa4490e5ac802a43e8eb06c6ba8651ba84a4ae172b6f9d956d3e00</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2438</id>
    <title>Moderate: pam security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>pam security update</summary>
    <description>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.

Security Fix(es):

* pam: allowing unprivileged user to block another user namespace (CVE-2024-22365)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2438" id="RHSA-2024:2438" type="rhsa" title="RHSA-2024:2438"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22365" id="CVE-2024-22365" type="cve" title="CVE-2024-22365"/>
      <reference href="https://bugzilla.redhat.com/2257722" id="2257722" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2438.html" id="ALSA-2024:2438" type="self" title="ALSA-2024:2438"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="pam-devel" version="1.5.1" release="19.el9" epoch="0" arch="s390x" src="pam-1.5.1-19.el9.src.rpm">
          <filename>pam-devel-1.5.1-19.el9.s390x.rpm</filename>
          <sum type="sha256">17f58398ddc09c50d2f543d0a406894bc57de1fa8bc37371b15008893b187377</sum>
        </package>
        <package name="pam-docs" version="1.5.1" release="19.el9" epoch="0" arch="s390x" src="pam-1.5.1-19.el9.src.rpm">
          <filename>pam-docs-1.5.1-19.el9.s390x.rpm</filename>
          <sum type="sha256">cdf205092f062bc5d59166d34425f482b588c90c8b3d16b3f0c2e05889cfd781</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2447</id>
    <title>Low: openssl and openssl-fips-provider security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openssl and openssl-fips-provider security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries (CVE-2023-2975)
* openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)
* OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817)
* openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (CVE-2023-5678)
* openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
* openssl: Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
* openssl: denial of service via null dereference (CVE-2024-0727)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2447" id="RHSA-2024:2447" type="rhsa" title="RHSA-2024:2447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2975" id="CVE-2023-2975" type="cve" title="CVE-2023-2975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3446" id="CVE-2023-3446" type="cve" title="CVE-2023-3446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3817" id="CVE-2023-3817" type="cve" title="CVE-2023-3817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5678" id="CVE-2023-5678" type="cve" title="CVE-2023-5678"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6129" id="CVE-2023-6129" type="cve" title="CVE-2023-6129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6237" id="CVE-2023-6237" type="cve" title="CVE-2023-6237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0727" id="CVE-2024-0727" type="cve" title="CVE-2024-0727"/>
      <reference href="https://bugzilla.redhat.com/2223016" id="2223016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224962" id="2224962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2227852" id="2227852" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248616" id="2248616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257571" id="2257571" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258502" id="2258502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259944" id="2259944" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2447.html" id="ALSA-2024:2447" type="self" title="ALSA-2024:2447"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="openssl-devel" version="3.0.7" release="27.el9" epoch="1" arch="s390x" src="openssl-3.0.7-27.el9.src.rpm">
          <filename>openssl-devel-3.0.7-27.el9.s390x.rpm</filename>
          <sum type="sha256">a9b6f2800503a2d199717f9c57b36f5a8aa8da761961a8e043d3ef2a3aa9dc8b</sum>
        </package>
        <package name="openssl-perl" version="3.0.7" release="27.el9" epoch="1" arch="s390x" src="openssl-3.0.7-27.el9.src.rpm">
          <filename>openssl-perl-3.0.7-27.el9.s390x.rpm</filename>
          <sum type="sha256">d3ee05bd35fa9648b874d7dfc82867205412da2d8defd39619666e32094099da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2463</id>
    <title>Moderate: systemd security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>systemd security update</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

* systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2463" id="RHSA-2024:2463" type="rhsa" title="RHSA-2024:2463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-7008" id="CVE-2023-7008" type="cve" title="CVE-2023-7008"/>
      <reference href="https://bugzilla.redhat.com/2222672" id="2222672" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2463.html" id="ALSA-2024:2463" type="self" title="ALSA-2024:2463"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="systemd-devel" version="252" release="32.el9_4.alma.1" epoch="0" arch="s390x" src="systemd-252-32.el9_4.alma.1.src.rpm">
          <filename>systemd-devel-252-32.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">5ce8db9b3a059576ee280b4743c46304d515513e06c0380e2bf63b4022d5cd03</sum>
        </package>
        <package name="systemd-journal-remote" version="252" release="32.el9_4.alma.1" epoch="0" arch="s390x" src="systemd-252-32.el9_4.alma.1.src.rpm">
          <filename>systemd-journal-remote-252-32.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">b6b7f173e281d758600545c0b978cb5197946bdbd553a8c9655199950ac9dbba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2504</id>
    <title>Low: libssh security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

* libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (CVE-2023-6004)
* libssh: Missing checks for return values for digests (CVE-2023-6918)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2504" id="RHSA-2024:2504" type="rhsa" title="RHSA-2024:2504"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6004" id="CVE-2023-6004" type="cve" title="CVE-2023-6004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6918" id="CVE-2023-6918" type="cve" title="CVE-2023-6918"/>
      <reference href="https://bugzilla.redhat.com/2251110" id="2251110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254997" id="2254997" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2504.html" id="ALSA-2024:2504" type="self" title="ALSA-2024:2504"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libssh-devel" version="0.10.4" release="13.el9" epoch="0" arch="s390x" src="libssh-0.10.4-13.el9.src.rpm">
          <filename>libssh-devel-0.10.4-13.el9.s390x.rpm</filename>
          <sum type="sha256">0ee9aa4b6b5765f1135935919ddcb73d02ed6a622eb8fe57cb0ceb63fee90423</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2512</id>
    <title>Low: file security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:04:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>file security update</summary>
    <description>The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats.

Security Fix(es):

* file: stack-based buffer over-read in file_copystr in funcs.c (CVE-2022-48554)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2512" id="RHSA-2024:2512" type="rhsa" title="RHSA-2024:2512"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48554" id="CVE-2022-48554" type="cve" title="CVE-2022-48554"/>
      <reference href="https://bugzilla.redhat.com/2235714" id="2235714" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2512.html" id="ALSA-2024:2512" type="self" title="ALSA-2024:2512"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3-file-magic" version="5.39" release="16.el9" epoch="0" arch="noarch" src="file-5.39-16.el9.src.rpm">
          <filename>python3-file-magic-5.39-16.el9.noarch.rpm</filename>
          <sum type="sha256">62fb8e14b9695ce3cc2bd865118725b0051215cac1cc03649dc2308fb701bcae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2548</id>
    <title>Moderate: podman security and bug fix update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:04:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>podman security and bug fix update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fixes:

* podman: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)
* podman: buildah: full container escape at build time (CVE-2024-1753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fixes:

* liveness probe not called by podman when using httpGet (JIRA:AlmaLinux-28633)
* Unable to copy image from one virtual machine to another using "podman image scp" (JIRA:AlmaLinux-28629)
* [v4.9] Backport two docker CLI compatibility fixes (JIRA:AlmaLinux-28636)
* Issue in podman causing S2I to fail in overwriting ENTRYPOINT (JIRA:AlmaLinux-14922)
* Need to backport podman fix for SIGSEGV in AlmaLinux 9.3/8.9 for UBI based containers (JIRA:AlmaLinux-26843)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2548" id="RHSA-2024:2548" type="rhsa" title="RHSA-2024:2548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1753" id="CVE-2024-1753" type="cve" title="CVE-2024-1753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24786" id="CVE-2024-24786" type="cve" title="CVE-2024-24786"/>
      <reference href="https://bugzilla.redhat.com/2265513" id="2265513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268046" id="2268046" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2548.html" id="ALSA-2024:2548" type="self" title="ALSA-2024:2548"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="podman" version="4.9.4" release="3.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-3.el9_4.src.rpm">
          <filename>podman-4.9.4-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">48402bd0fb0a16967674d3601f4db871d016e4fa7b4d425897d75f9bb3929f6c</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="3.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-3.el9_4.src.rpm">
          <filename>podman-plugins-4.9.4-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">7dff49b06f1aea0f079b9de987cb23e326e0b44c7f682e9c2e0841fd9c8da06f</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="3.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-3.el9_4.src.rpm">
          <filename>podman-remote-4.9.4-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">9677aef4f072fafcbd132e3b2a4ec028a5b53c7c5a0672397f5528afdcd70157</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="3.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-3.el9_4.src.rpm">
          <filename>podman-tests-4.9.4-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">a5000827c76c68c65dd24018b7032e1093ae7493c95c061a358da45df9e39eb5</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="3.el9_4" epoch="4" arch="noarch" src="podman-4.9.4-3.el9_4.src.rpm">
          <filename>podman-docker-4.9.4-3.el9_4.noarch.rpm</filename>
          <sum type="sha256">edc23a43c6ee0d766ffe41a44709a24a1f5464266842fb1c10b47288866212f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2549</id>
    <title>Moderate: skopeo security and bug fix update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>skopeo security and bug fix update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. 

Security Fix(es):

* golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)

Bug Fix(es):

* TRIAGE CVE-2024-24786 skopeo: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [almalinux-9] - AlmaLinux 9.4 0day (JIRA:AlmaLinux-28235)
* skopeo: jose-go: improper handling of highly compressed data [almalinux-9] (JIRA:AlmaLinux-28736)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2549" id="RHSA-2024:2549" type="rhsa" title="RHSA-2024:2549"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24786" id="CVE-2024-24786" type="cve" title="CVE-2024-24786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28180" id="CVE-2024-28180" type="cve" title="CVE-2024-28180"/>
      <reference href="https://bugzilla.redhat.com/2268046" id="2268046" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268854" id="2268854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2549.html" id="ALSA-2024:2549" type="self" title="ALSA-2024:2549"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="skopeo-tests" version="1.14.3" release="2.el9_4" epoch="2" arch="s390x" src="skopeo-1.14.3-2.el9_4.src.rpm">
          <filename>skopeo-tests-1.14.3-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">337a9c0a5b3833120b8416e9f59593a895387a2b47ebc567564e98f0f77377c0</sum>
        </package>
        <package name="skopeo" version="1.14.3" release="2.el9_4" epoch="2" arch="s390x" src="skopeo-1.14.3-2.el9_4.src.rpm">
          <filename>skopeo-1.14.3-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">e95a30993a7de472be93715ef4c0aeb14d0a91f7972e3d09ca759f5cc8d6c23f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2550</id>
    <title>Moderate: buildah bug fix update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>buildah bug fix update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. 

Bug Fix(es):

* TRIAGE CVE-2024-24786 buildah: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [almalinux-9] AlmaLinux9.4 0Day (JIRA:AlmaLinux-28230)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2550" id="RHSA-2024:2550" type="rhsa" title="RHSA-2024:2550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24786" id="CVE-2024-24786" type="cve" title="CVE-2024-24786"/>
      <reference href="https://bugzilla.redhat.com/2268046" id="2268046" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2550.html" id="ALSA-2024:2550" type="self" title="ALSA-2024:2550"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="buildah-tests" version="1.33.7" release="1.el9_4" epoch="2" arch="s390x" src="buildah-1.33.7-1.el9_4.src.rpm">
          <filename>buildah-tests-1.33.7-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">6a84705764f14026e26df62c0cd3284ccca0914b8bfb458912f4a2a082d8bc73</sum>
        </package>
        <package name="buildah" version="1.33.7" release="1.el9_4" epoch="2" arch="s390x" src="buildah-1.33.7-1.el9_4.src.rpm">
          <filename>buildah-1.33.7-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">f429d8dc39b9a0cd835ac1b7e888b2ddd5b599b5859a4eca86b5f1900cadf029</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2551</id>
    <title>Important: bind security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:07:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)
* bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)
* bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)
* bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)
* bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)

Bug Fix(es):

* bind-dyndb-ldap: rebuilt to adapt ABI changes in bind

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2551" id="RHSA-2024:2551" type="rhsa" title="RHSA-2024:2551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4408" id="CVE-2023-4408" type="cve" title="CVE-2023-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5517" id="CVE-2023-5517" type="cve" title="CVE-2023-5517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5679" id="CVE-2023-5679" type="cve" title="CVE-2023-5679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6516" id="CVE-2023-6516" type="cve" title="CVE-2023-6516"/>
      <reference href="https://bugzilla.redhat.com/2263896" id="2263896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263897" id="2263897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263909" id="2263909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263911" id="2263911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2551.html" id="ALSA-2024:2551" type="self" title="ALSA-2024:2551"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3-bind" version="9.16.23" release="18.el9_4.1" epoch="32" arch="noarch" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>python3-bind-9.16.23-18.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">3353e9654688cd38306bd37aa10893fbfae95a52fc000889d856ce6c964dfd28</sum>
        </package>
        <package name="bind-license" version="9.16.23" release="18.el9_4.1" epoch="32" arch="noarch" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>bind-license-9.16.23-18.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">ae7bf12a28a5753931c0725bf5b9bbea371aa3cbefdd5fe0075bedd29c59be6a</sum>
        </package>
        <package name="bind-libs" version="9.16.23" release="18.el9_4.1" epoch="32" arch="s390x" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>bind-libs-9.16.23-18.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">bd375fbdf9e6af651316f0cb2677a847f55ff03aab99d51847370b1b43e73ef6</sum>
        </package>
        <package name="bind-dnssec-utils" version="9.16.23" release="18.el9_4.1" epoch="32" arch="s390x" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>bind-dnssec-utils-9.16.23-18.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">cfa95b34c82b7fa734a95f2213229dda189990dea4b11a17fc70d38fc52db571</sum>
        </package>
        <package name="bind-utils" version="9.16.23" release="18.el9_4.1" epoch="32" arch="s390x" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>bind-utils-9.16.23-18.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">d651fd40033b2bee4c988f1084686e959cdaf8e11af9de733fc41dce97b8165e</sum>
        </package>
        <package name="bind-dyndb-ldap" version="11.9" release="9.el9_4.alma.1" epoch="0" arch="s390x" src="bind-dyndb-ldap-11.9-9.el9_4.alma.1.src.rpm">
          <filename>bind-dyndb-ldap-11.9-9.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d96b3bf06c0ef711f24a821f5e74c28c329aed8209e4697a4541e8f4d8feb709</sum>
        </package>
        <package name="bind-dnssec-doc" version="9.16.23" release="18.el9_4.1" epoch="32" arch="noarch" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>bind-dnssec-doc-9.16.23-18.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">e4388e0eef62d2414d5a5aee824ba06b2443eea617ae13bfeac580a1f2ea3939</sum>
        </package>
        <package name="bind-chroot" version="9.16.23" release="18.el9_4.1" epoch="32" arch="s390x" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>bind-chroot-9.16.23-18.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">f619354188b2370021b502de0b9b0d16e4b1c3d9e23d3362f1d6ee6ddc92c46d</sum>
        </package>
        <package name="bind" version="9.16.23" release="18.el9_4.1" epoch="32" arch="s390x" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>bind-9.16.23-18.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">fe48569595f8a63c043dfba3fb75994da60f4f588dd4f122a1ef29d70ca57c1a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2559</id>
    <title>Moderate: python-jwcrypto security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:04:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-jwcrypto security update</summary>
    <description>The python-jwcrypto package provides Python implementations of the JSON Web Key (JWK), JSON Web Signature (JWS), JSON Web Encryption (JWE), and JSON Web Token (JWT) JOSE (JSON Object Signing and Encryption) standards.

Security Fix(es):

* python-jwcrypto: malicious JWE token can cause denial of service (CVE-2024-28102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2559" id="RHSA-2024:2559" type="rhsa" title="RHSA-2024:2559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28102" id="CVE-2024-28102" type="cve" title="CVE-2024-28102"/>
      <reference href="https://bugzilla.redhat.com/2268758" id="2268758" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2559.html" id="ALSA-2024:2559" type="self" title="ALSA-2024:2559"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3-jwcrypto" version="0.8" release="5.el9_4" epoch="0" arch="noarch" src="python-jwcrypto-0.8-5.el9_4.src.rpm">
          <filename>python3-jwcrypto-0.8-5.el9_4.noarch.rpm</filename>
          <sum type="sha256">93ea7fb7badf93b8413264ae4031101bd9e3faedcad0899428155e0068cf5575</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2560</id>
    <title>Moderate: libvirt security and bug fix update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:05:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security and bug fix update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fixes:

* libvirt: off-by-one error in udevListInterfacesByStatus() (CVE-2024-1441)
* libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fixes:

* libvirt: off-by-one error in udevListInterfacesByStatus() [almalinux-9] (JIRA:AlmaLinux-25081)
* libvirt: negative g_new0 length can lead to unbounded memory allocation [almalinux-9] (JIRA:AlmaLinux-29515)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2560" id="RHSA-2024:2560" type="rhsa" title="RHSA-2024:2560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1441" id="CVE-2024-1441" type="cve" title="CVE-2024-1441"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2494" id="CVE-2024-2494" type="cve" title="CVE-2024-2494"/>
      <reference href="https://bugzilla.redhat.com/2263841" id="2263841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270115" id="2270115" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2560.html" id="ALSA-2024:2560" type="self" title="ALSA-2024:2560"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libvirt-daemon-plugin-lockd" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-lockd-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">12b653a50520064035d51a7d479f94a1a2d5f3999099d3badef21fa511ea9d2a</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">135f48ec1289f98409bbeda3035b705024dfd35c3134aef129019adb450ed7eb</sum>
        </package>
        <package name="libvirt-libs" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-libs-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">16ea35166ef2de3bc780fcc06ee14161087786089e77ae2e0b18335e81731913</sum>
        </package>
        <package name="libvirt-daemon-proxy" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-proxy-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">1747a19921662cefd13c3efd565aad08f4014bd768da61770e2f40f1dbe0bf66</sum>
        </package>
        <package name="libvirt-daemon-common" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-common-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">200fe39a5949181c8a9f9dfa776db77344f4ec48fcd1f463e13dc61040be59f0</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-network-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">2b7d55e3bd042ad2825bf377db12b42f09b80cd15eb34e64aca47f499294499c</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">2f8171240f189201ead53e3a90a2b24d9996e66fa38349f7ae5be8d44b166456</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-interface-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">361f9b43a7759b52bb64c537e939f4d2add370e297d2aab766c71f1867121db4</sum>
        </package>
        <package name="libvirt-daemon-lock" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-lock-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">363b691fca8e81129de3d863364ae7c420ad73395d31eb45dc58d0c436f27a32</sum>
        </package>
        <package name="libvirt-daemon-log" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-log-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">3d11f3cc96a714237edcea14246fe0ea541a6b25b2f7fb56498e11aa9f6c0f95</sum>
        </package>
        <package name="libvirt-nss" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-nss-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">41d6e69c377240cc7c1b038465c5fe728559bf681c540abcf7a54bc0b1442455</sum>
        </package>
        <package name="libvirt" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">45d485b4050f34d9708bd667668720bbf5198f1124a3bdfd5a8fce200af47cdf</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">54f717aff02127c6591c0bdd83413e70aff0af0e4dd3caa9c2dc82fcf3fd378f</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">5915a39a1b0255c43c044329c2eb835a11b7baddc8bb353f40139acc66c39b88</sum>
        </package>
        <package name="libvirt-client-qemu" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-client-qemu-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">59b425a439a71dc27f73e83945b880626b6b31c3bce072760f47afcddaef3023</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-qemu-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">79af3e94acfa961841f0a9a64164033b6cc3d196f81df2fde571739ad36c6c5c</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">86900905fd2ec4264e3cdbc165e44783d1f3503c29356de423b54b415501a3c0</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">8f9ee599376feefb2d5717f2cd7b75548844deb12b25ee66628f241b1ed13c86</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-kvm-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">9454a3d5a46d5e066847c90dc4c7ddf7bc560c7ef56b607d3b871a1963b0ccf1</sum>
        </package>
        <package name="libvirt-client" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-client-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">9d6d43e91e8d4fc7aafe16a44433ba8d26ee36fa0d0555d47b8e40d0b491a619</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-config-network-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">9df1be57657a2794bd30a00f6893a0876471ed47d37bda7d8756b693b5debdda</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">bb7176f0e938933d8fb131dce3b2e13eff9ea73345d000a93defc3bc7961a38d</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">be38d53f002b46db782be05aa3bc614b5afa9778ae48f95837684fd39f1cc89b</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-secret-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">c479171196df2eda2b9446b1a6d0005be0089403a3df0077a4652abd97c73b41</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">cf72464ffe12c4c602e4a72de3a4297513d599e57e8be3e7efb7fb7943d4d0d4</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d32142a1b5a915b9c1802f2cdfcf1a10e069aedeaef7fd35cafb691d1f76d00b</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d5a1b7d6086ff0acbce1261055c1ebec757f65a5f61d7ebf315d80749dfda80e</sum>
        </package>
        <package name="libvirt-daemon" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d81107b600106ce6dadabacebc4e6d4e032ef4554218fe1776f9380e4aa335eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2562</id>
    <title>Important: golang security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:07:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.

Security Fix(es):

* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
* golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
* golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (CVE-2023-45289)
* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)
* golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)
* golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785)
* golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2562" id="RHSA-2024:2562" type="rhsa" title="RHSA-2024:2562"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45288" id="CVE-2023-45288" type="cve" title="CVE-2023-45288"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45289" id="CVE-2023-45289" type="cve" title="CVE-2023-45289"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45290" id="CVE-2023-45290" type="cve" title="CVE-2023-45290"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24783" id="CVE-2024-24783" type="cve" title="CVE-2024-24783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24784" id="CVE-2024-24784" type="cve" title="CVE-2024-24784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24785" id="CVE-2024-24785" type="cve" title="CVE-2024-24785"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268017" id="2268017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268018" id="2268018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268019" id="2268019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268021" id="2268021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268022" id="2268022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268273" id="2268273" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2562.html" id="ALSA-2024:2562" type="self" title="ALSA-2024:2562"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="golang" version="1.21.9" release="2.el9_4" epoch="0" arch="s390x" src="golang-1.21.9-2.el9_4.src.rpm">
          <filename>golang-1.21.9-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">457bc541ef8fcadfa9ebbfea453da05d5833212bc878cd729918423c51738627</sum>
        </package>
        <package name="golang-bin" version="1.21.9" release="2.el9_4" epoch="0" arch="s390x" src="golang-1.21.9-2.el9_4.src.rpm">
          <filename>golang-bin-1.21.9-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">796dd6bf45e3bac5a2f68de98df787cf2c80934b95c6ca2b01625821b6d87785</sum>
        </package>
        <package name="golang-misc" version="1.21.9" release="2.el9_4" epoch="0" arch="noarch" src="golang-1.21.9-2.el9_4.src.rpm">
          <filename>golang-misc-1.21.9-2.el9_4.noarch.rpm</filename>
          <sum type="sha256">a53b40dbec2876ebcdaf54a0f1575f5f7a0e75b6c82ad1bcc0d6acfef1b02fa5</sum>
        </package>
        <package name="golang-tests" version="1.21.9" release="2.el9_4" epoch="0" arch="noarch" src="golang-1.21.9-2.el9_4.src.rpm">
          <filename>golang-tests-1.21.9-2.el9_4.noarch.rpm</filename>
          <sum type="sha256">a9a260ca1ee00ce2fbd31e1d9c44bfdfb901f9b21fac658b0efd08596d6e3009</sum>
        </package>
        <package name="go-toolset" version="1.21.9" release="2.el9_4" epoch="0" arch="s390x" src="golang-1.21.9-2.el9_4.src.rpm">
          <filename>go-toolset-1.21.9-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">b4149163db5df196fcf5cda7ec48d038d6807e9910bc344ccb17e6863669f3be</sum>
        </package>
        <package name="golang-src" version="1.21.9" release="2.el9_4" epoch="0" arch="noarch" src="golang-1.21.9-2.el9_4.src.rpm">
          <filename>golang-src-1.21.9-2.el9_4.noarch.rpm</filename>
          <sum type="sha256">c896dc6ca35a3612feec754f9c5c5a1b0ec322576d34fa5ecf0846d4abe20afc</sum>
        </package>
        <package name="golang-docs" version="1.21.9" release="2.el9_4" epoch="0" arch="noarch" src="golang-1.21.9-2.el9_4.src.rpm">
          <filename>golang-docs-1.21.9-2.el9_4.noarch.rpm</filename>
          <sum type="sha256">f44154f1729f1277a3d8cbb6eee053a8617f3d0d2542d6f824d2fe978a0455ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2564</id>
    <title>Moderate: mod_http2 security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mod_http2 security update</summary>
    <description>The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.

Security Fix(es):

* mod_http2: httpd: CONTINUATION frames DoS (CVE-2024-27316)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2564" id="RHSA-2024:2564" type="rhsa" title="RHSA-2024:2564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27316" id="CVE-2024-27316" type="cve" title="CVE-2024-27316"/>
      <reference href="https://bugzilla.redhat.com/2268277" id="2268277" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2564.html" id="ALSA-2024:2564" type="self" title="ALSA-2024:2564"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="mod_http2" version="2.0.26" release="2.el9_4" epoch="0" arch="s390x" src="mod_http2-2.0.26-2.el9_4.src.rpm">
          <filename>mod_http2-2.0.26-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">89e634276578f4902e9ec136a7938242c21d68b9f1d1f5ba879ab8931d4bd588</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2565</id>
    <title>Moderate: libreswan security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreswan security update</summary>
    <description>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2565" id="RHSA-2024:2565" type="rhsa" title="RHSA-2024:2565"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2357" id="CVE-2024-2357" type="cve" title="CVE-2024-2357"/>
      <reference href="https://bugzilla.redhat.com/2268952" id="2268952" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2565.html" id="ALSA-2024:2565" type="self" title="ALSA-2024:2565"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libreswan" version="4.12" release="2.el9_4.alma.1" epoch="0" arch="s390x" src="libreswan-4.12-2.el9_4.alma.1.src.rpm">
          <filename>libreswan-4.12-2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">ae7eff5b7a0dd06eaa6d84139a806130795b1ae9249f28aecd78e8034693e563</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2566</id>
    <title>Important: pcp security, bug fix, and enhancement update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:08:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pcp security, bug fix, and enhancement update</summary>
    <description>Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.

Security Fix(es):

* pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2566" id="RHSA-2024:2566" type="rhsa" title="RHSA-2024:2566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3019" id="CVE-2024-3019" type="cve" title="CVE-2024-3019"/>
      <reference href="https://bugzilla.redhat.com/2271898" id="2271898" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2566.html" id="ALSA-2024:2566" type="self" title="ALSA-2024:2566"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="pcp-pmda-summary" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-summary-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">00bd0e7c06b2b918a44d2fe81ff6ed2843a64545ae5a78159a23d0a21bab88ef</sum>
        </package>
        <package name="pcp-pmda-zimbra" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-zimbra-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">0702f7ebff7fcaa00f5ae3b283935215b9572081527e4a543c07a7fe1cd2ecb3</sum>
        </package>
        <package name="pcp-pmda-redis" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-redis-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">0a3d292a0cab705d86267aea961ba17508046a662ca024b75e17c733e229fe11</sum>
        </package>
        <package name="pcp-pmda-slurm" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-slurm-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">0d848915ad47bc0e5e54e1bf3ef60a9a5af01a0a7173e820cd23873b854777ef</sum>
        </package>
        <package name="pcp-import-mrtg2pcp" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-import-mrtg2pcp-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">0e253bce2a8056c2c1818b3f21dd68a9a59a3f287d4ca41403a1b0ae39abe388</sum>
        </package>
        <package name="pcp-pmda-sockets" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-sockets-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">11d0185dc0744cbeb650b0fb2b5cabd8cc1730076c2df2e074b2bf32cfd652e1</sum>
        </package>
        <package name="pcp-pmda-zswap" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-zswap-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">142e330b5f7c099f5372bdd4f67b8941f141d8909a4b7a6584b023813f531e31</sum>
        </package>
        <package name="perl-PCP-MMV" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>perl-PCP-MMV-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">1613f64331ea4fa99a193d3314700c953533de5c49deb55b34a77cc7e4728fe3</sum>
        </package>
        <package name="pcp-geolocate" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-geolocate-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">1691d59531a6c63b9cc25b64dc8d7f5caa4a91d446f22dd60e7ac5d25646dbb5</sum>
        </package>
        <package name="pcp-testsuite" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-testsuite-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">175b953a7e5f6fc31b8e2951efd1ff5db9b45690f9d4c2b8bb2043b0e1915655</sum>
        </package>
        <package name="pcp-pmda-smart" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-smart-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">1887d53b4882e83fea29fb16afb88fc58dcc3e8f6a567e7c88508d05e5023eec</sum>
        </package>
        <package name="pcp-pmda-lmsensors" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-lmsensors-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">1a55d5d4ffec6420655b541ed055f8d8451ae0c46465534e103d2a4b21eaa6f0</sum>
        </package>
        <package name="pcp-pmda-bpftrace" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-bpftrace-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">1ccdb572d9091ee997fadf376cc9e15960df1c9829017b2b4a3a412138e514b0</sum>
        </package>
        <package name="perl-PCP-PMDA" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>perl-PCP-PMDA-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">1cf5ebbdc652263ed2fc1ec753dac2d56759aca4954ea438db4ce2960cf68f72</sum>
        </package>
        <package name="pcp-pmda-postfix" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-postfix-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">1e15adccb2e6d9be81e76e143b8f9c49bbb467744a2a87835781ad65e8f9244e</sum>
        </package>
        <package name="pcp-pmda-farm" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-farm-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">1fbdad99008ae1cbb4ce081920e4b49ec7708926aefc0058bee16eac0a8c8dd0</sum>
        </package>
        <package name="pcp-pmda-systemd" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-systemd-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">213b8e157082e8596f28a0e1b8d99c77db794977fb14535d3b8b1979ecf50294</sum>
        </package>
        <package name="pcp-pmda-json" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-json-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">28256fb1a27aecb24d67bf34e3942754cff0c65c8d53dee483efd6f004a45862</sum>
        </package>
        <package name="pcp-pmda-rabbitmq" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-rabbitmq-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">291ffe26efc9f3b7665184ebf54513d7bc84e3a28e6efe47a92445bef5a8cec9</sum>
        </package>
        <package name="pcp-pmda-ds389" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-ds389-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">30f6837fa0e0cff56fb2a60457a87f40ee306da8b5766330003b4c8695290d66</sum>
        </package>
        <package name="pcp-pmda-hacluster" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-hacluster-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">31d7bc8202575fb0aa5e0080fc73407e1cfc1e20666f201c16425e0845ebdb43</sum>
        </package>
        <package name="pcp-pmda-roomtemp" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-roomtemp-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">37551658dea28b2ac5c8927b87e51c2619e5e1cb3176a1fd37932bf6045c5e80</sum>
        </package>
        <package name="pcp-pmda-dm" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-dm-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">39b8da603852b2255b292fd13170c8b689d01ff01a0cfbcd25cf61f631cc92e6</sum>
        </package>
        <package name="pcp-import-ganglia2pcp" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-import-ganglia2pcp-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">3f04709e3f60208db10044bc56e6262e6046eb1b1072d4e203a18a1b62233f9b</sum>
        </package>
        <package name="pcp-pmda-gpsd" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-gpsd-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">453b3bd668ee513c871e137ec8ea7c9cf56399e6e7ad612a2811b21a97b47c1f</sum>
        </package>
        <package name="pcp-export-pcp2elasticsearch" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-export-pcp2elasticsearch-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">4551a5e5600ae4a143e5a87d80f9f432a5f36b8ff145354b87369a67f5382c2b</sum>
        </package>
        <package name="pcp-pmda-gluster" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-gluster-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">4c70b2f161c18dd1ef12ade45b0e956b0550246b3c99e3eb09f24bf464578169</sum>
        </package>
        <package name="pcp-pmda-mysql" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-mysql-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">4efe112bffeeca8d6a92fe0477e5af50649256fd6e0bbfd50791b39ba1525dad</sum>
        </package>
        <package name="pcp-pmda-bcc" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-bcc-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">50982dcee1dfa3079e54a75a9ff8935ef4962c051e84484def5aafe5d765227d</sum>
        </package>
        <package name="pcp-selinux" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-selinux-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">531e9aaeb40b0d2de8e528860cb0c87291f7c17b3f01a22934eb9f7e15f9b5da</sum>
        </package>
        <package name="pcp-pmda-oracle" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-oracle-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">546e78d0e49a5337578321a119c983302fb27ae0a6f1a35416dc9469add1597e</sum>
        </package>
        <package name="pcp-export-pcp2spark" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-export-pcp2spark-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">55c1956f9d761c7af84e3c41216e93d6ec14407cfc9ff444418ad76ea3c0b550</sum>
        </package>
        <package name="pcp-pmda-snmp" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-snmp-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">5afb4cba7a5abfcff6f4c219134fcddad791147d2cebfe828e3667fc76caaf65</sum>
        </package>
        <package name="pcp-pmda-podman" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-podman-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">5d9294ac8ff4e67205441251cd6d0a175a06eeb1086ee404fc829dc748db6b40</sum>
        </package>
        <package name="pcp-pmda-elasticsearch" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-elasticsearch-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">5e0ea7a5ced5526f5519ad0dd1876f0710f8a870d17597ebbb5b089d5f4377f5</sum>
        </package>
        <package name="pcp-pmda-news" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-news-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">63b4455d91b67247a0e76980eaa62755830e2d7acfc57ca4f8a05e0451791571</sum>
        </package>
        <package name="pcp-conf" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-conf-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">66d1331c80d27d12c7014cdf3c5e95e7c826acb209ad14b96fb4421e68ef7a70</sum>
        </package>
        <package name="pcp-libs" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-libs-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">73639b409148d1d3cb531f0c99975591d2bdd95930dc3d37a9bf345489ca90bc</sum>
        </package>
        <package name="perl-PCP-LogSummary" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>perl-PCP-LogSummary-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">73861f922fa829c56e52bf8cd253aaa570cba14f8005599844bad2f14d183e58</sum>
        </package>
        <package name="pcp-pmda-mongodb" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-mongodb-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">7843eb317c207dbde709b001df0a7b8a4a41ec861a5ad020ca3053cd7953fa60</sum>
        </package>
        <package name="pcp-export-pcp2zabbix" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-export-pcp2zabbix-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">79034143d117cb4b667bb8e03a084e2ea7aa5e9520e0531bc3971675fd4b6d51</sum>
        </package>
        <package name="pcp-pmda-memcache" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-memcache-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">7f17b8b046495cd17586259e8305ef1012757ca75e41666e7c0498cda3055138</sum>
        </package>
        <package name="pcp-pmda-openvswitch" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-openvswitch-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">8047bec6ca605414749fb49ff3c3d0db9d8001d3fc2bd17459f76f3d68ce375c</sum>
        </package>
        <package name="pcp-export-pcp2json" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-export-pcp2json-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">84b20af62feacb7fd12964496cb9bd93ea4336f14ba92e9c99baa408ae2fd0a0</sum>
        </package>
        <package name="pcp-pmda-bonding" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-bonding-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">852e52933e2c83ee8427ea7c7d2c27e2f40a382773ead2618298a575fbe5c32c</sum>
        </package>
        <package name="pcp-pmda-lio" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-lio-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">856f77a4db1136d9f6718b2ff2dbb636a9f39dd9e0b551268a0f690098c32fbd</sum>
        </package>
        <package name="pcp-pmda-nginx" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-nginx-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">8f91a90b7898cd6a7359c8ad4f4458a4ea72a5e589b2b3a58a46feeeee79ab11</sum>
        </package>
        <package name="pcp-pmda-mic" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-mic-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">8f94e42fbe29d756d5fbb7140601c5764a55f76f6a2c9d85edb6656a9935ddb4</sum>
        </package>
        <package name="pcp-pmda-lustre" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-lustre-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">9036ea9d61a8b513f553ba8087be8ee2f5145d8ff1d8f6c4c5ff7c369f307354</sum>
        </package>
        <package name="pcp-pmda-netcheck" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-netcheck-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">95139eb90ebefd76f94de24e35b050573ee8c9225778ce3d453df736196d7f3f</sum>
        </package>
        <package name="pcp-pmda-gfs2" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-gfs2-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">9c87cc685d838ef6d52bc7dbae930a757a9d72412bd97f26185a53f2f9f8284e</sum>
        </package>
        <package name="pcp-pmda-samba" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-samba-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">9ddca5744559f71f5207145a5b605d2563e113a24143d501627603fa84a87ba8</sum>
        </package>
        <package name="pcp-pmda-mounts" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-mounts-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">a5a2a05d22f6e987dab7061e501527c241d83c66f48cef3d05770de0ee378238</sum>
        </package>
        <package name="python3-pcp" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>python3-pcp-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">a82066e0079f898251d41a4a880913580730c23f885d56f46efe8cdfdd761d27</sum>
        </package>
        <package name="pcp-pmda-bind2" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-bind2-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">a99c87c306f773c8672401c7c131f682a493ae974396acd78e40ffe70021a340</sum>
        </package>
        <package name="pcp-pmda-bash" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-bash-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">ad3982ef7c292ae115f245f4fafc419ddd94aec3e1685a7723460abb053f78bd</sum>
        </package>
        <package name="pcp-pmda-openmetrics" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-openmetrics-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">ad976aecf438fd50741b1096c3f4a1ef954f9dedc96894898ac96d6013340303</sum>
        </package>
        <package name="pcp-pmda-shping" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-shping-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">b140babdc4be8e1d6ac301b97857e2adf50a648645d00ab06d65bbb14aa26bd8</sum>
        </package>
        <package name="pcp-pmda-haproxy" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-haproxy-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">b2d7c64aa5e023a84796f8452c42c42f7dcf139c324312b2b807af9ad55f53d5</sum>
        </package>
        <package name="pcp-pmda-statsd" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-statsd-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">b5460bda62575f76ff34521496245027661b68f3cafc6c2512d28cfe6d472d04</sum>
        </package>
        <package name="pcp-pmda-ds389log" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-ds389log-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">b8a059a0e9107c9db8871f4a232666a66ac66e2a86442d5b29b772d226ef692d</sum>
        </package>
        <package name="pcp-pmda-gpfs" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-gpfs-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">bac7365e3cccc8d85053af1fcb66c532b429b1f4631d37a9ba14126074572a76</sum>
        </package>
        <package name="pcp-pmda-weblog" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-weblog-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">baf8c6a221d1d8d414d8102fe526031871b4b5492a0d9108a614bd2af1276f1f</sum>
        </package>
        <package name="pcp-libs-devel" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-libs-devel-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">be0b004128f01a9fa077dd8aeb406f9776e9990e4c99593eae2fe576c33efc10</sum>
        </package>
        <package name="pcp-pmda-logger" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-logger-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">bf52ab4c62b313ecfbcd08f6ba5b639630dcca30c41a7f87e90620797f8a1697</sum>
        </package>
        <package name="pcp-import-sar2pcp" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-import-sar2pcp-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">bff53249527a57e95bf6b398a7bad0da6d8a9a038bb87ec5997fa95a73fdf120</sum>
        </package>
        <package name="perl-PCP-LogImport" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>perl-PCP-LogImport-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">c0de39ef878972d4a60a2d4192cd030fee89b6317d5384e9498bec191456514e</sum>
        </package>
        <package name="pcp-pmda-lustrecomm" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-lustrecomm-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">c32917f2d3931309f822f71c6bf0506ce632fd589f73aacc034d7ea435f9880e</sum>
        </package>
        <package name="pcp-pmda-denki" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-denki-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">c455ede17f5e8a37dd9c1c49b8c1fa8e2cb6b9e4c1257da07668a6707982dd4f</sum>
        </package>
        <package name="pcp-pmda-trace" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-trace-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">c522ac9020fe40d9c410f7264cec393dea72aafd5f15d6167b6102baa37125df</sum>
        </package>
        <package name="pcp-pmda-libvirt" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-libvirt-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">c5a8d544b7a7d33d20c70681d4ab645e3f549a8c495220f037d8a08e1099a74f</sum>
        </package>
        <package name="pcp-pmda-named" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-named-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">c66a801149d81765b718d452bf93b46ce00f8de0b39f55f84f4c48c346dfaa10</sum>
        </package>
        <package name="pcp-export-pcp2graphite" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-export-pcp2graphite-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">cb8ca817efe391d4b86593360b48ce9d427c4bb189fb45586a98dc7a6e9ed70a</sum>
        </package>
        <package name="pcp-pmda-sendmail" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-sendmail-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">cd5ec9f6e9bf4ab3d91ab29ea4de48e265f59b3d00b1b1f0c7a810865165f2b5</sum>
        </package>
        <package name="pcp-zeroconf" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-zeroconf-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">cfeadae56e751af96a23926663b027a57eb7f1cd497336ed7ad89ff0ea255654</sum>
        </package>
        <package name="pcp-pmda-mailq" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-mailq-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">d12e11ae4afd9bd4b93bc1b6a945835c1209da71bf8b4433227333ec2f73eb29</sum>
        </package>
        <package name="pcp-export-zabbix-agent" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-export-zabbix-agent-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">d18f77bf1fe3a9d92186fef9ede844731a781c309cf7fd26930d259b700610f6</sum>
        </package>
        <package name="pcp-import-iostat2pcp" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-import-iostat2pcp-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">d1f1778d487715494ca5d7f9d6f7671815c24ebd5b2f39f0e932d93134db6edf</sum>
        </package>
        <package name="pcp-pmda-netfilter" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-netfilter-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">d431af5860fe79017b8c1ce3ff3c747d4926a074871b86896e738820891a963a</sum>
        </package>
        <package name="pcp-pmda-docker" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-docker-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">d71868864751ecec66db1b623f2f1d9b9252d3ba5ba24e9f824c15cd010c49de</sum>
        </package>
        <package name="pcp-pmda-activemq" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-activemq-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">d8647afeb7d6320131c2987e68995e819440560872a2e68b6525829321a1357f</sum>
        </package>
        <package name="pcp-system-tools" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-system-tools-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">d948b7752377a6f026e6b022ad36c8a9589a102c5a8a1725a9dcc581199b6611</sum>
        </package>
        <package name="pcp-doc" version="6.2.0" release="2.el9_4" epoch="0" arch="noarch" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-doc-6.2.0-2.el9_4.noarch.rpm</filename>
          <sum type="sha256">d9ebf07165b85e07494e2a654f6430ae6d81a524001434e3cede4ee9f5d93b5c</sum>
        </package>
        <package name="pcp-pmda-postgresql" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-postgresql-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">dd3b521d1bfeca3b4e19c5e0c2f4ad3ee6e8ec54900090911c113a16534fb60b</sum>
        </package>
        <package name="pcp-pmda-apache" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-apache-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">de44c204a77c2abc774b11add98b2f9e66c48f96db070f73522cc128fff522af</sum>
        </package>
        <package name="pcp-pmda-nvidia-gpu" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-nvidia-gpu-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">e1190852129eaf8cbec51e6a1145a3cee08632b9a157f46ba4e63858e4dbb899</sum>
        </package>
        <package name="pcp-pmda-unbound" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-unbound-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">e235184738c3d5a5f32e5fc361e9df926ff4dc73072392efc8ee1a47dfb3ca1b</sum>
        </package>
        <package name="pcp-pmda-cifs" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-cifs-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">e24c10b1a455585020711dce4b2291561cad0fc43530f63287210a4bd43163b1</sum>
        </package>
        <package name="pcp-pmda-rsyslog" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-rsyslog-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">e2dd13e7f61902c7fc6ea883504dd9002b9970b8b5fefffcbde0473a585be43a</sum>
        </package>
        <package name="pcp" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">e47581415c9f85dc2c326de3ae5cd42f3077a8806265407c3e7c25119aadec32</sum>
        </package>
        <package name="pcp-pmda-pdns" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-pdns-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">e69d5b2e2cb34e5efd4802061f664ff7cbefa65c788d04bbe15f8d02865f6e2e</sum>
        </package>
        <package name="pcp-pmda-nfsclient" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-nfsclient-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">e91e2309dc47c4c4204b340950e566f2dec724879e2f2ecb4003db32e42a3504</sum>
        </package>
        <package name="pcp-import-collectl2pcp" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-import-collectl2pcp-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">eb7ddc23e2cf271de59b9382faebc1fd22af4fdba8c9e13bb622a45b6274a1bc</sum>
        </package>
        <package name="pcp-devel" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-devel-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">edfdae4110d327f482b346564d6432a87514734b877bb61e9e7af3247b956571</sum>
        </package>
        <package name="pcp-pmda-cisco" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-cisco-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">f43ed865b43dbee2a1e7252fc16fc39fb3967584a0331d50db530f7a5aa112a6</sum>
        </package>
        <package name="pcp-export-pcp2xml" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-export-pcp2xml-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">f558786f5a9b9bf52bb72a8f509642b28a8eb4413234f821dcc75b62a9917f43</sum>
        </package>
        <package name="pcp-gui" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-gui-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">f71e352ce25e252eb04ac01447316794833531dc4e6f62913ed877a9bfb9792c</sum>
        </package>
        <package name="pcp-pmda-dbping" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-pmda-dbping-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">f82034cd9e47bfeae52f422210470f926e08591db4e27f82ccc09768053a2ddb</sum>
        </package>
        <package name="pcp-export-pcp2influxdb" version="6.2.0" release="2.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-2.el9_4.src.rpm">
          <filename>pcp-export-pcp2influxdb-6.2.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">f85338ba4918f52b14a2b87ed5bff497373d02568047971af8407423566b7db6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2568</id>
    <title>Moderate: grafana security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.

Security Fix(es):

* grafana: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
* grafana: vulnerable to authorization bypass (CVE-2024-1313)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2568" id="RHSA-2024:2568" type="rhsa" title="RHSA-2024:2568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1313" id="CVE-2024-1313" type="cve" title="CVE-2024-1313"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271903" id="2271903" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2568.html" id="ALSA-2024:2568" type="self" title="ALSA-2024:2568"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="grafana" version="9.2.10" release="16.el9_4.alma.1" epoch="0" arch="s390x" src="grafana-9.2.10-16.el9_4.alma.1.src.rpm">
          <filename>grafana-9.2.10-16.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">39a865347fee0f74c1c9102aab4044f3c5f3392c95f31a4780b208bd6021732f</sum>
        </package>
        <package name="grafana-selinux" version="9.2.10" release="16.el9_4.alma.1" epoch="0" arch="s390x" src="grafana-9.2.10-16.el9_4.alma.1.src.rpm">
          <filename>grafana-selinux-9.2.10-16.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">e218b764ed3fb8a1bdce479a5f1bd4a2fa84da84f8e32932d7d8ae9033d34f1a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2569</id>
    <title>Important: grafana-pcp security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana-pcp security update</summary>
    <description>grafana-pcp is an open source Grafana plugin for PCP.

Security Fix(es):

* grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2569" id="RHSA-2024:2569" type="rhsa" title="RHSA-2024:2569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2569.html" id="ALSA-2024:2569" type="self" title="ALSA-2024:2569"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="grafana-pcp" version="5.1.1" release="2.el9_4.alma.1" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-2.el9_4.alma.1.src.rpm">
          <filename>grafana-pcp-5.1.1-2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">21c2e83f802174b26945ad11e6b68424bbfab8624dcde703d4dacd59655e4353</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2570</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:59:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls package provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)
* gnutls: potential crash during chain building/verification (CVE-2024-28835)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2570" id="RHSA-2024:2570" type="rhsa" title="RHSA-2024:2570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28834" id="CVE-2024-28834" type="cve" title="CVE-2024-28834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28835" id="CVE-2024-28835" type="cve" title="CVE-2024-28835"/>
      <reference href="https://bugzilla.redhat.com/2269084" id="2269084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269228" id="2269228" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2570.html" id="ALSA-2024:2570" type="self" title="ALSA-2024:2570"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="gnutls-devel" version="3.8.3" release="4.el9_4" epoch="0" arch="s390x" src="gnutls-3.8.3-4.el9_4.src.rpm">
          <filename>gnutls-devel-3.8.3-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">366c5713c169f96c0c074124b7aebff39d4dbfcd356c3f7114c6d56baddf33ba</sum>
        </package>
        <package name="gnutls-dane" version="3.8.3" release="4.el9_4" epoch="0" arch="s390x" src="gnutls-3.8.3-4.el9_4.src.rpm">
          <filename>gnutls-dane-3.8.3-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">4e908018cef8a8452120963ad86ac91cba0d86b67ef14aed6a924e38d9a1f193</sum>
        </package>
        <package name="gnutls-c++" version="3.8.3" release="4.el9_4" epoch="0" arch="s390x" src="gnutls-3.8.3-4.el9_4.src.rpm">
          <filename>gnutls-c++-3.8.3-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">7656fa22b659a9b422a0a5e947510ee4a6b49bd6f5781db3ae6f80ace70c2103</sum>
        </package>
        <package name="gnutls-utils" version="3.8.3" release="4.el9_4" epoch="0" arch="s390x" src="gnutls-3.8.3-4.el9_4.src.rpm">
          <filename>gnutls-utils-3.8.3-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">ba3a3e6387654ff3316b404d9369e20f61f63f4fc0b86587b617d45706a1e3b2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2571</id>
    <title>Moderate: sssd security and bug fix update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sssd security and bug fix update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

Bug Fix(es):

* socket leak (JIRA:AlmaLinux-22340)
* Passkey cannot fall back to password (JIRA:AlmaLinux-28161)
* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (JIRA:AlmaLinux-27209)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2571" id="RHSA-2024:2571" type="rhsa" title="RHSA-2024:2571"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3758" id="CVE-2023-3758" type="cve" title="CVE-2023-3758"/>
      <reference href="https://bugzilla.redhat.com/2223762" id="2223762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2571.html" id="ALSA-2024:2571" type="self" title="ALSA-2024:2571"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="sssd-idp" version="2.9.4" release="6.el9_4" epoch="0" arch="s390x" src="sssd-2.9.4-6.el9_4.src.rpm">
          <filename>sssd-idp-2.9.4-6.el9_4.s390x.rpm</filename>
          <sum type="sha256">ec316ed20cd59f83d8c87a01e2f757f406b6f7e2ca07d1a0a5a7e93e02bdf78b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2616</id>
    <title>Important: tigervnc security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:07:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
* xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
* xorg-x11-server: User-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2616" id="RHSA-2024:2616" type="rhsa" title="RHSA-2024:2616"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31080" id="CVE-2024-31080" type="cve" title="CVE-2024-31080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31081" id="CVE-2024-31081" type="cve" title="CVE-2024-31081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31083" id="CVE-2024-31083" type="cve" title="CVE-2024-31083"/>
      <reference href="https://bugzilla.redhat.com/2271997" id="2271997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271998" id="2271998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272000" id="2272000" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2616.html" id="ALSA-2024:2616" type="self" title="ALSA-2024:2616"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="tigervnc-server-minimal" version="1.13.1" release="8.el9_4.3" epoch="0" arch="s390x" src="tigervnc-1.13.1-8.el9_4.3.src.rpm">
          <filename>tigervnc-server-minimal-1.13.1-8.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">52a9f604559d6e2ba43959e344e4abe48342968ddccd4a5b529f0cbf7e77e97c</sum>
        </package>
        <package name="tigervnc-server" version="1.13.1" release="8.el9_4.3" epoch="0" arch="s390x" src="tigervnc-1.13.1-8.el9_4.3.src.rpm">
          <filename>tigervnc-server-1.13.1-8.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">6749bf2f1ade1c4319e4cd99502367a5bc7f00b403eb4ffdb58dd72c3de631b3</sum>
        </package>
        <package name="tigervnc-selinux" version="1.13.1" release="8.el9_4.3" epoch="0" arch="noarch" src="tigervnc-1.13.1-8.el9_4.3.src.rpm">
          <filename>tigervnc-selinux-1.13.1-8.el9_4.3.noarch.rpm</filename>
          <sum type="sha256">88652459ddee8141a01cb5d645b69d58dedb3a05a9566afcaa09e66ea70b3603</sum>
        </package>
        <package name="tigervnc-license" version="1.13.1" release="8.el9_4.3" epoch="0" arch="noarch" src="tigervnc-1.13.1-8.el9_4.3.src.rpm">
          <filename>tigervnc-license-1.13.1-8.el9_4.3.noarch.rpm</filename>
          <sum type="sha256">a1dbfd534a994217c669b5b8951f5cc408536fc21ed62f9ff803c3f2251e6efe</sum>
        </package>
        <package name="tigervnc-icons" version="1.13.1" release="8.el9_4.3" epoch="0" arch="noarch" src="tigervnc-1.13.1-8.el9_4.3.src.rpm">
          <filename>tigervnc-icons-1.13.1-8.el9_4.3.noarch.rpm</filename>
          <sum type="sha256">a421fb125245971d1fc8ec645d9ca3e6ced04403cb7342fa35834f4b276df45e</sum>
        </package>
        <package name="tigervnc-server-module" version="1.13.1" release="8.el9_4.3" epoch="0" arch="s390x" src="tigervnc-1.13.1-8.el9_4.3.src.rpm">
          <filename>tigervnc-server-module-1.13.1-8.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">df5b16866d49d917fdff14f9bd691fab9ea84f53400c0d4b2fd96c8eec6011d2</sum>
        </package>
        <package name="tigervnc" version="1.13.1" release="8.el9_4.3" epoch="0" arch="s390x" src="tigervnc-1.13.1-8.el9_4.3.src.rpm">
          <filename>tigervnc-1.13.1-8.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">f504ce4661c8e0294100ce83757ec6e7d4aa8738a3d81d625a04c6d21c30716b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2679</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2024-05-02 00:00:00"/>
    <updated date="2024-05-09 11:58:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: use-after-free in XMLReader (CVE-2024-25062)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2679" id="RHSA-2024:2679" type="rhsa" title="RHSA-2024:2679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25062" id="CVE-2024-25062" type="cve" title="CVE-2024-25062"/>
      <reference href="https://bugzilla.redhat.com/2262726" id="2262726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2679.html" id="ALSA-2024:2679" type="self" title="ALSA-2024:2679"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libxml2-devel" version="2.9.13" release="6.el9_4" epoch="0" arch="s390x" src="libxml2-2.9.13-6.el9_4.src.rpm">
          <filename>libxml2-devel-2.9.13-6.el9_4.s390x.rpm</filename>
          <sum type="sha256">d36a1856384075faf4543fcdc3a6f7d662c3b8311a00a663625bb3bcadc72ca9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2724</id>
    <title>Important: git-lfs security update</title>
    <issued date="2024-05-07 00:00:00"/>
    <updated date="2024-05-09 12:11:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

* golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)
* golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (CVE-2023-45289)
* golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2724" id="RHSA-2024:2724" type="rhsa" title="RHSA-2024:2724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45288" id="CVE-2023-45288" type="cve" title="CVE-2023-45288"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45289" id="CVE-2023-45289" type="cve" title="CVE-2023-45289"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45290" id="CVE-2023-45290" type="cve" title="CVE-2023-45290"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24783" id="CVE-2024-24783" type="cve" title="CVE-2024-24783"/>
      <reference href="https://bugzilla.redhat.com/2268017" id="2268017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268018" id="2268018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268019" id="2268019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268273" id="2268273" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2724.html" id="ALSA-2024:2724" type="self" title="ALSA-2024:2724"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="git-lfs" version="3.4.1" release="2.el9_4" epoch="0" arch="s390x" src="git-lfs-3.4.1-2.el9_4.src.rpm">
          <filename>git-lfs-3.4.1-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">179991142ba9deeaa2de5e21626b82b6212ea9fc5a01c9f85e673d7554a9357e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2758</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-05-08 00:00:00"/>
    <updated date="2024-11-03 22:08:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
  * CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743)


Bug Fix(es):  

  * ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:AlmaLinux-27009)
  * mm/mglru: fix underprotected page cache (JIRA:AlmaLinux-29235)
  * [EMR] [TBOOT OS] SUT could not go to S3 state with AlmaLinux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:AlmaLinux-29673)
  * system hangs completely - NMI not possible (JIRA:AlmaLinux-30678)
  * ice 0000:6f:00.0: PTP failed to get time (JIRA:AlmaLinux-30110)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2758" id="RHSA-2024:2758" type="rhsa" title="RHSA-2024:2758"/>
      <reference href="https://bugzilla.redhat.com/2250843" id="2250843" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270836" id="2270836" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2758.html" id="ALSA-2024:2758" type="self" title="ALSA-2024:2758"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-5090.html" id="CVE-2023-5090" type="cve" title="CVE-2023-5090"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6240.html" id="CVE-2023-6240" type="cve" title="CVE-2023-6240"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-25742.html" id="CVE-2024-25742" type="cve" title="CVE-2024-25742"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-25743.html" id="CVE-2024-25743" type="cve" title="CVE-2024-25743"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-427.16.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">025094d6df0075f2bf078ebd1f0dae0d2da93026cae4ae19120538785cf67c3d</sum>
        </package>
        <package name="rtla" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>rtla-5.14.0-427.16.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">034108f3d79519c2cc2de50a11fa3e83f222b08c72be7897946551966fe7d845</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-devel-5.14.0-427.16.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">5b68f1eede99c00840242455271181b22fa16a360614cf96d1a9ee0e1bda68c2</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-doc-5.14.0-427.16.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">6f78a2b532e7e545c5b2c34448a44f42fcf5ca898f3b3abba26b8a660583b7ff</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-427.16.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">7756d44c8ec51afbd6bd1330fb184179e5ff01d9e36934e8c12563a6e4889e3f</sum>
        </package>
        <package name="rv" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>rv-5.14.0-427.16.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">7ddf680dd2bcf14cdcad6597ffe45e9894a5341fa0c4ca09377ed9c11f931d03</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-5.14.0-427.16.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">8cf54df6d0cb10ebe92b1808174bafd29ebfc149c235580c572d550a7f0ccc36</sum>
        </package>
        <package name="perf" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>perf-5.14.0-427.16.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">92f1b19476b986af7253743c9a9d6d8b62189d29c941a2361ed6c95f9d038445</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-devel-matched-5.14.0-427.16.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">cbd6cf68d489113032a7e2b2918f47d1604dfc1bc65d22b996511e7dc05c2bd4</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-headers-5.14.0-427.16.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">f1f991f49ab5691b3a225b24acc4330f1a63e24af93868e6535096c129e2655d</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-427.16.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">f8bd250a8246cef003add1054ab4833929ecfa419ca4feca27ce3cb320a43d6d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2779</id>
    <title>Important: nodejs:18 security update</title>
    <issued date="2024-05-09 00:00:00"/>
    <updated date="2024-05-10 19:34:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:18 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* nodejs: CONTINUATION frames DoS (CVE-2024-27983)
* nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
* nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)
* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2779" id="RHSA-2024:2779" type="rhsa" title="RHSA-2024:2779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22025" id="CVE-2024-22025" type="cve" title="CVE-2024-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25629" id="CVE-2024-25629" type="cve" title="CVE-2024-25629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27982" id="CVE-2024-27982" type="cve" title="CVE-2024-27982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27983" id="CVE-2024-27983" type="cve" title="CVE-2024-27983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28182" id="CVE-2024-28182" type="cve" title="CVE-2024-28182"/>
      <reference href="https://bugzilla.redhat.com/2265713" id="2265713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268639" id="2268639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270559" id="2270559" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272764" id="2272764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275392" id="2275392" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2779.html" id="ALSA-2024:2779" type="self" title="ALSA-2024:2779"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <module name="nodejs" stream="18" version="9040020240510175312" context="8cf767d6" arch="s390x"/>
        <package name="npm" version="10.5.0" release="1.18.20.2.2.module_el9.4.0+99+a01f7676" epoch="1" arch="s390x" src="nodejs-18.20.2-2.module_el9.4.0+99+a01f7676.src.rpm">
          <filename>npm-10.5.0-1.18.20.2.2.module_el9.4.0+99+a01f7676.s390x.rpm</filename>
          <sum type="sha256">131cd8beac23c513c7d525b077795b16f068d830c2e57bff7eff19ddccb1298c</sum>
        </package>
        <package name="nodejs-devel" version="18.20.2" release="2.module_el9.4.0+99+a01f7676" epoch="1" arch="s390x" src="nodejs-18.20.2-2.module_el9.4.0+99+a01f7676.src.rpm">
          <filename>nodejs-devel-18.20.2-2.module_el9.4.0+99+a01f7676.s390x.rpm</filename>
          <sum type="sha256">3f26d8194c092068bd17c1efb605b2d1c84b18aa96c71124556f567babb55004</sum>
        </package>
        <package name="nodejs-docs" version="18.20.2" release="2.module_el9.4.0+99+a01f7676" epoch="1" arch="noarch" src="nodejs-18.20.2-2.module_el9.4.0+99+a01f7676.src.rpm">
          <filename>nodejs-docs-18.20.2-2.module_el9.4.0+99+a01f7676.noarch.rpm</filename>
          <sum type="sha256">5046029717db3f41b95ac1e0a4d7e166800f21dcaeb1f00767c2fdb2498e7df7</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.2.0+36+853e48f5" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm</filename>
          <sum type="sha256">6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8</sum>
        </package>
        <package name="nodejs" version="18.20.2" release="2.module_el9.4.0+99+a01f7676" epoch="1" arch="s390x" src="nodejs-18.20.2-2.module_el9.4.0+99+a01f7676.src.rpm">
          <filename>nodejs-18.20.2-2.module_el9.4.0+99+a01f7676.s390x.rpm</filename>
          <sum type="sha256">7d8175707b2c2f36e3e44f38d6ea23ceb05687aebf7e98630c209ee9ed2ac781</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.20.2" release="2.module_el9.4.0+99+a01f7676" epoch="1" arch="s390x" src="nodejs-18.20.2-2.module_el9.4.0+99+a01f7676.src.rpm">
          <filename>nodejs-full-i18n-18.20.2-2.module_el9.4.0+99+a01f7676.s390x.rpm</filename>
          <sum type="sha256">fe5591f91e88dca0ee96ec7df5c50878619df0b03989d6a2e86c590b71e20d4c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2842</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-05-14 00:00:00"/>
    <updated date="2024-05-16 07:52:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2842" id="RHSA-2024:2842" type="rhsa" title="RHSA-2024:2842"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2842.html" id="ALSA-2024:2842" type="self" title="ALSA-2024:2842"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="dotnet-templates-8.0" version="8.0.105" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-templates-8.0-8.0.105-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">11098d4de98ec09959ee4b178a9cb2dbc52f5f839e2a36e2998f2fc991e717ce</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.5" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">11b6e255f613bfdf3d9ba5897f0e89a7ec642f4b32bb52c182831602f2b53e4c</sum>
        </package>
        <package name="dotnet-host" version="8.0.5" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-host-8.0.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">14ed3d38ade57b0147f1f418c7f8e5793c7ff7fb2f8464afd44c6be201650383</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.5" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">577826f6e12a5b410d16edfca9bda5c762fe758a59f591fc98af47a4ad559004</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.5" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">5fc2e6baaf68f4e4b2af0cc779d0f217511f2f6249af7834731529468e30ef76</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.105" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.105-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">7813049549b39f110c62f8781ecd71036dc8f1af8b9a4149573e90543436e8ac</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="8.0.105" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.105-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">806f1208ae311f8f14a759fe8406f416143e7b59e564513f924560b33cd3f078</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.105" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.105-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">a477348c0a2878f71a7761290873739a1e3d4949ac55866e860904adc1708ae9</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.5" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c20acf676ab6e85058eee6a33f2f028272268c34549bb9f8b8e5042076eb24b8</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.5" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">e100a691f27365182e11655511c51b45a74a8f55c81772afeefb0395e6195302</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.5" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">f91bc5da82d6e6143a1b5bf911ce391cd4a203f256ce5f93a54e13bf66abb344</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.5" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">fb30fb4fa1ea75001ae16c34f906601c82ba8e59bf568472e6a821d2bbca87e4</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.5" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">ffc2cbcbd9e411843af74b75599c5b7137cbc17690fd522b2ea9687f75e7cc46</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2843</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2024-05-15 00:00:00"/>
    <updated date="2024-05-16 07:51:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2843" id="RHSA-2024:2843" type="rhsa" title="RHSA-2024:2843"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2843.html" id="ALSA-2024:2843" type="self" title="ALSA-2024:2843"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="dotnet-sdk-7.0" version="7.0.119" release="1.el9_4" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el9_4.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.119-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">195f09b1cc820a174724c26c038efb07c45ff269f261f54f9ecd3b830f7a1554</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.19" release="1.el9_4" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el9_4.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.19-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">37e6494404601bb3a1b195db51f1d3fa4ab8a1476b68f88a3cc3c3cd86c82210</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.19" release="1.el9_4" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el9_4.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.19-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">3ebece77eacdecf0ab3d02e8df4f5e3104fc5a0c970647a91c070ad383178c61</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.119" release="1.el9_4" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el9_4.src.rpm">
          <filename>dotnet-templates-7.0-7.0.119-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">421902584edd9fee5885176f0e3718a8be8553da69ab1a3cfcae161e94d51038</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.19" release="1.el9_4" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el9_4.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.19-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">bdbdf2284fef7799b7d96459c9a4b2e921d172c254b6decee5aa889e8fbca2db</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.19" release="1.el9_4" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el9_4.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.19-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c18114c6d2e3362cbee481f4b0e3cc83b26dcf8a41bfecd742429bb85a9e6cdc</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.19" release="1.el9_4" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el9_4.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.19-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c47db1ccbb3ca7c0adbaca963a74d274e51086125ebd20a2a4296f524ab6edb4</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.19" release="1.el9_4" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el9_4.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.19-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">df3a617017454d014e47fa51049d8082ceeb244090cc89dc28306b32a0462a78</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2853</id>
    <title>Important: nodejs:20 security update</title>
    <issued date="2024-05-15 00:00:00"/>
    <updated date="2024-05-16 07:49:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable
network applications in the JavaScript programming language.

Security Fix(es):

* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)
* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
* nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
* nodejs: CONTINUATION frames DoS (CVE-2024-27983)
* nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2853" id="RHSA-2024:2853" type="rhsa" title="RHSA-2024:2853"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22025" id="CVE-2024-22025" type="cve" title="CVE-2024-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25629" id="CVE-2024-25629" type="cve" title="CVE-2024-25629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27982" id="CVE-2024-27982" type="cve" title="CVE-2024-27982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27983" id="CVE-2024-27983" type="cve" title="CVE-2024-27983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28182" id="CVE-2024-28182" type="cve" title="CVE-2024-28182"/>
      <reference href="https://bugzilla.redhat.com/2265713" id="2265713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268639" id="2268639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270559" id="2270559" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272764" id="2272764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275392" id="2275392" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2853.html" id="ALSA-2024:2853" type="self" title="ALSA-2024:2853"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <module name="nodejs" stream="20" version="9040020240516053207" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-docs" version="20.12.2" release="2.module_el9.4.0+100+71fc9528" epoch="1" arch="noarch" src="nodejs-20.12.2-2.module_el9.4.0+100+71fc9528.src.rpm">
          <filename>nodejs-docs-20.12.2-2.module_el9.4.0+100+71fc9528.noarch.rpm</filename>
          <sum type="sha256">0ba467930563644df03005a17524df078431cab3658d3ee5b9a819179762c049</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.12.2" release="2.module_el9.4.0+100+71fc9528" epoch="1" arch="s390x" src="nodejs-20.12.2-2.module_el9.4.0+100+71fc9528.src.rpm">
          <filename>nodejs-full-i18n-20.12.2-2.module_el9.4.0+100+71fc9528.s390x.rpm</filename>
          <sum type="sha256">0c1ce19c8133ab1456f54f00e40768d3106b1a10896b890acfb03bf83eb24341</sum>
        </package>
        <package name="nodejs" version="20.12.2" release="2.module_el9.4.0+100+71fc9528" epoch="1" arch="s390x" src="nodejs-20.12.2-2.module_el9.4.0+100+71fc9528.src.rpm">
          <filename>nodejs-20.12.2-2.module_el9.4.0+100+71fc9528.s390x.rpm</filename>
          <sum type="sha256">12dbaa193db70860e8ce0cfec62a38ccd2aa56a5e899435a4344effb8e7c0aff</sum>
        </package>
        <package name="npm" version="10.5.0" release="1.20.12.2.2.module_el9.4.0+100+71fc9528" epoch="1" arch="s390x" src="nodejs-20.12.2-2.module_el9.4.0+100+71fc9528.src.rpm">
          <filename>npm-10.5.0-1.20.12.2.2.module_el9.4.0+100+71fc9528.s390x.rpm</filename>
          <sum type="sha256">28880dbf573172aeabe781795f0b240cb7663f316666ae5b1a78a046fb918634</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.3.0+47+c33bc288" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.3.0+47+c33bc288.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.3.0+47+c33bc288.noarch.rpm</filename>
          <sum type="sha256">6c7def7dbed327b375d30e7aafa1c2627afb0c3399bfdf50f9721a64a87488aa</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.3.0+88+29afeaa2" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm</filename>
          <sum type="sha256">8014b60b14856a94feb49d7f2a8754c6fd531ac93bf52e19702e32eea1fb729f</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.3.0+88+29afeaa2" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm</filename>
          <sum type="sha256">94ac92c4ae695d87df9c616a6d3ecafca411d07358cf60516392e320eefcb3c6</sum>
        </package>
        <package name="nodejs-devel" version="20.12.2" release="2.module_el9.4.0+100+71fc9528" epoch="1" arch="s390x" src="nodejs-20.12.2-2.module_el9.4.0+100+71fc9528.src.rpm">
          <filename>nodejs-devel-20.12.2-2.module_el9.4.0+100+71fc9528.s390x.rpm</filename>
          <sum type="sha256">c1dc088ce88adc6814b56f3667e25e81cbd0bc9ed9e34f1e41a2bd5d4e0a1794</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2883</id>
    <title>Important: firefox security update</title>
    <issued date="2024-05-16 00:00:00"/>
    <updated date="2024-05-21 07:56:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.11.0 ESR.

Security Fix(es):
  

* firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
* firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767)
* firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768)
* firefox: Cross-origin responses could be distinguished between script and non-script content-types (CVE-2024-4769)
* firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770)
* firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 (CVE-2024-4777)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2883" id="RHSA-2024:2883" type="rhsa" title="RHSA-2024:2883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4367" id="CVE-2024-4367" type="cve" title="CVE-2024-4367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4767" id="CVE-2024-4767" type="cve" title="CVE-2024-4767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4768" id="CVE-2024-4768" type="cve" title="CVE-2024-4768"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4769" id="CVE-2024-4769" type="cve" title="CVE-2024-4769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4770" id="CVE-2024-4770" type="cve" title="CVE-2024-4770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4777" id="CVE-2024-4777" type="cve" title="CVE-2024-4777"/>
      <reference href="https://bugzilla.redhat.com/2280382" id="2280382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280383" id="2280383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280384" id="2280384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280385" id="2280385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280386" id="2280386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280387" id="2280387" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2883.html" id="ALSA-2024:2883" type="self" title="ALSA-2024:2883"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="firefox" version="115.11.0" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-115.11.0-1.el9_4.alma.1.src.rpm">
          <filename>firefox-115.11.0-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">19da8633fc0877a24a07d9b33e0f20f38846195ec68d84a634f8af23a4d63c8a</sum>
        </package>
        <package name="firefox-x11" version="115.11.0" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-115.11.0-1.el9_4.alma.1.src.rpm">
          <filename>firefox-x11-115.11.0-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d595111073f40d70d4f95e7c9e4b00e611eedb8a874f2fae539a0cf3c13541e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2888</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-05-16 00:00:00"/>
    <updated date="2024-05-21 07:54:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.11.0.

Security Fix(es):

* firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
* firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767)
* firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768)
* firefox: Cross-origin responses could be distinguished between script and
non-script content-types (CVE-2024-4769)
* firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770)
* firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and
Thunderbird 115.11 (CVE-2024-4777)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2888" id="RHSA-2024:2888" type="rhsa" title="RHSA-2024:2888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4367" id="CVE-2024-4367" type="cve" title="CVE-2024-4367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4767" id="CVE-2024-4767" type="cve" title="CVE-2024-4767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4768" id="CVE-2024-4768" type="cve" title="CVE-2024-4768"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4769" id="CVE-2024-4769" type="cve" title="CVE-2024-4769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4770" id="CVE-2024-4770" type="cve" title="CVE-2024-4770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4777" id="CVE-2024-4777" type="cve" title="CVE-2024-4777"/>
      <reference href="https://bugzilla.redhat.com/2280382" id="2280382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280383" id="2280383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280384" id="2280384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280385" id="2280385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280386" id="2280386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280387" id="2280387" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2888.html" id="ALSA-2024:2888" type="self" title="ALSA-2024:2888"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="thunderbird" version="115.11.0" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="thunderbird-115.11.0-1.el9_4.alma.1.src.rpm">
          <filename>thunderbird-115.11.0-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">c9502b1644983b23ece27f85a81724480070c2cca71db00c209a12d7f62edba5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2910</id>
    <title>Important: nodejs security update</title>
    <issued date="2024-05-20 00:00:00"/>
    <updated date="2024-05-20 07:23:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* nodejs: CONTINUATION frames DoS (CVE-2024-27983)
* nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
* nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)
* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2910" id="RHSA-2024:2910" type="rhsa" title="RHSA-2024:2910"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22025" id="CVE-2024-22025" type="cve" title="CVE-2024-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25629" id="CVE-2024-25629" type="cve" title="CVE-2024-25629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27982" id="CVE-2024-27982" type="cve" title="CVE-2024-27982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27983" id="CVE-2024-27983" type="cve" title="CVE-2024-27983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28182" id="CVE-2024-28182" type="cve" title="CVE-2024-28182"/>
      <reference href="https://bugzilla.redhat.com/2265713" id="2265713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268639" id="2268639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270559" id="2270559" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272764" id="2272764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275392" id="2275392" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2910.html" id="ALSA-2024:2910" type="self" title="ALSA-2024:2910"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="nodejs" version="16.20.2" release="8.el9_4" epoch="1" arch="s390x" src="nodejs-16.20.2-8.el9_4.src.rpm">
          <filename>nodejs-16.20.2-8.el9_4.s390x.rpm</filename>
          <sum type="sha256">5e1f703bdbde91d1d516acd232018376a5c988b2dd67baf3b2fd866f1ae4cfcb</sum>
        </package>
        <package name="npm" version="8.19.4" release="1.16.20.2.8.el9_4" epoch="1" arch="s390x" src="nodejs-16.20.2-8.el9_4.src.rpm">
          <filename>npm-8.19.4-1.16.20.2.8.el9_4.s390x.rpm</filename>
          <sum type="sha256">7f92eadc97d1e3451107866be0d70d4473daca58a491f61237046867a3bc839b</sum>
        </package>
        <package name="nodejs-libs" version="16.20.2" release="8.el9_4" epoch="1" arch="s390x" src="nodejs-16.20.2-8.el9_4.src.rpm">
          <filename>nodejs-libs-16.20.2-8.el9_4.s390x.rpm</filename>
          <sum type="sha256">9ec9b5500ab500f3d845903e32367e3f21de0a4f2778f6e5793e40649e241311</sum>
        </package>
        <package name="nodejs-docs" version="16.20.2" release="8.el9_4" epoch="1" arch="noarch" src="nodejs-16.20.2-8.el9_4.src.rpm">
          <filename>nodejs-docs-16.20.2-8.el9_4.noarch.rpm</filename>
          <sum type="sha256">b1b792b69a5411822d1b67865bfa0e978b9dbeeb54e65ac1739ca4d446ca1803</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.20.2" release="8.el9_4" epoch="1" arch="s390x" src="nodejs-16.20.2-8.el9_4.src.rpm">
          <filename>nodejs-full-i18n-16.20.2-8.el9_4.s390x.rpm</filename>
          <sum type="sha256">c471c11fb541b5cec6f1d1522b91f3ce0ba9f7aaf83b2954338c206aad90c57e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3306</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-11-03 22:11:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
  * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
  * kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673)
  * kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3306" id="RHSA-2024:3306" type="rhsa" title="RHSA-2024:3306"/>
      <reference href="https://bugzilla.redhat.com/2270879" id="2270879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270881" id="2270881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272816" id="2272816" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273423" id="2273423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3306.html" id="ALSA-2024:3306" type="self" title="ALSA-2024:3306"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26642.html" id="CVE-2024-26642" type="cve" title="CVE-2024-26642"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26643.html" id="CVE-2024-26643" type="cve" title="CVE-2024-26643"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26673.html" id="CVE-2024-26673" type="cve" title="CVE-2024-26673"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26804.html" id="CVE-2024-26804" type="cve" title="CVE-2024-26804"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-35890.html" id="CVE-2024-35890" type="cve" title="CVE-2024-35890"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="kernel-debug-devel" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-5.14.0-427.18.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">05e113bd7a23252952c3f6543be835d40dd214c73cff885ae5380e980de15a15</sum>
        </package>
        <package name="rv" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>rv-5.14.0-427.18.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">36b7439c68f196ce10ce543f106c111e37e1d3e39c7d8d46884e718902a063c2</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-devel-5.14.0-427.18.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">482dd4bc78054e08e1b543202b6e4d6c4a4f0bfb481168d1d10fef5d59f40326</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-doc-5.14.0-427.18.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">4a845b6d8740ef83d332d1ce8b7a50fb36d3eb855277cea863aa8360b5ae886c</sum>
        </package>
        <package name="perf" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>perf-5.14.0-427.18.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">53418f74ad6625dd92d6db89ae186a3e322c3704e1557cd40e990601aa8b7ffd</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-427.18.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">5f4357b243ba609b49fb96ca18ceab084332209972918a4bad74fb3b443803b5</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-devel-matched-5.14.0-427.18.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">64810e7f70ca076c694b8f31ea9cfed268f23caa994259cc8dc132e2e3312ff3</sum>
        </package>
        <package name="rtla" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>rtla-5.14.0-427.18.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">746cd86d77fc104163a3981c574212ed680698c425b2fcdb7ebbdcd5d505dc59</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-427.18.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">7496189b3cd8df1fc0af2a978fa8a5701fc934324948033974556cd0e4b93111</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-headers-5.14.0-427.18.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">ad6567a6afdf6bee3a3af6ddc94290ecd898bb2ecc11d85e5c4338c8d7e19d67</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-427.18.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">dc504676b1a48c00f29a20193a52975840c7ba122e63bfa1dd6390685be029b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3307</id>
    <title>Important: tomcat security and bug fix update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-28 10:01:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security and bug fix update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

* Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549)
* Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672)

Bug Fix(es) and Enhancement(s):

* Rebase tomcat to version 9.0.87 (JIRA:AlmaLinux-34815)
* Amend tomcat's changelog so that fixed CVEs are mentioned explicitly (JIRA:AlmaLinux-35328)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3307" id="RHSA-2024:3307" type="rhsa" title="RHSA-2024:3307"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23672" id="CVE-2024-23672" type="cve" title="CVE-2024-23672"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24549" id="CVE-2024-24549" type="cve" title="CVE-2024-24549"/>
      <reference href="https://bugzilla.redhat.com/2269607" id="2269607" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269608" id="2269608" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3307.html" id="ALSA-2024:3307" type="self" title="ALSA-2024:3307"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="tomcat-admin-webapps" version="9.0.87" release="1.el9_4.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.1.src.rpm">
          <filename>tomcat-admin-webapps-9.0.87-1.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">46911e3fcb7bb32ce6d7d81c6698016965d3dfa9f3ade42b26e732dcab6e9307</sum>
        </package>
        <package name="tomcat-lib" version="9.0.87" release="1.el9_4.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.1.src.rpm">
          <filename>tomcat-lib-9.0.87-1.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">5511b3cd77efb66f00bf306124bed6a090b4a389f4bb4e48ede9c632400d1fe6</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.87" release="1.el9_4.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.1.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.87-1.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">55f1470202d68436d5fd10ff5277d39df5927d895900c2f28f5e4a43865dff55</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.87" release="1.el9_4.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.1.src.rpm">
          <filename>tomcat-docs-webapp-9.0.87-1.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">5c1c7654f603de561dd9dcb1b43070e39e7dda1bef73d488674d16b3cf4a3076</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.87" release="1.el9_4.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.1.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.87-1.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">5ef90b8d4e322bd28bc710cd268bd41d4618900d553a1a7fb0ed7ab2cce4e85b</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.87" release="1.el9_4.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.1.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.87-1.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">67e1fffe94eb51ff39131c4ea514e47e8b9c29a8b6f8844dedb77d5017b82a69</sum>
        </package>
        <package name="tomcat" version="9.0.87" release="1.el9_4.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.1.src.rpm">
          <filename>tomcat-9.0.87-1.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">b709e0f99858126ef0e3035d83810b8e0b9345bcc35eb0c15dca2a5a5f7abc51</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.87" release="1.el9_4.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.1.src.rpm">
          <filename>tomcat-webapps-9.0.87-1.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">c494ce9d83a4ea89b913b175b6144beeb28fd0a6c1d8fb03ad6c108094850b51</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3339</id>
    <title>Important: glibc security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-28 10:18:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT
(CVE-2024-2961)
* glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)
* glibc: null pointer dereferences after failed netgroup cache insertion
(CVE-2024-33600)
* glibc: netgroup cache may terminate daemon on memory allocation failure
(CVE-2024-33601)
* glibc: netgroup cache assumes NSS callback uses in-buffer strings
(CVE-2024-33602)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3339" id="RHSA-2024:3339" type="rhsa" title="RHSA-2024:3339"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2961" id="CVE-2024-2961" type="cve" title="CVE-2024-2961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33599" id="CVE-2024-33599" type="cve" title="CVE-2024-33599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33600" id="CVE-2024-33600" type="cve" title="CVE-2024-33600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33601" id="CVE-2024-33601" type="cve" title="CVE-2024-33601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33602" id="CVE-2024-33602" type="cve" title="CVE-2024-33602"/>
      <reference href="https://bugzilla.redhat.com/2273404" id="2273404" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277202" id="2277202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277204" id="2277204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277205" id="2277205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277206" id="2277206" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3339.html" id="ALSA-2024:3339" type="self" title="ALSA-2024:3339"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="glibc-doc" version="2.34" release="100.el9_4.2" epoch="0" arch="noarch" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-doc-2.34-100.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">48321f383378f0cf27fb6f86b30c2e16ff71d185127f15398de09ce5f88cf5c1</sum>
        </package>
        <package name="glibc-devel" version="2.34" release="100.el9_4.2" epoch="0" arch="s390x" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-devel-2.34-100.el9_4.2.s390x.rpm</filename>
          <sum type="sha256">54e52ee25e681bd9bd8c40fab3eae7c5ad1f195d2cbde664285462cd1cd0ea49</sum>
        </package>
        <package name="glibc-utils" version="2.34" release="100.el9_4.2" epoch="0" arch="s390x" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-utils-2.34-100.el9_4.2.s390x.rpm</filename>
          <sum type="sha256">96362aaa9a7cd134488c31a6c090ba5f1ae93abf71df44886912a6e2d1e92583</sum>
        </package>
        <package name="glibc-headers" version="2.34" release="100.el9_4.2" epoch="0" arch="s390x" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-headers-2.34-100.el9_4.2.s390x.rpm</filename>
          <sum type="sha256">9985d6d672311b61177c9eec65ca773557c368c9641fd79337672b4d9b8f49fe</sum>
        </package>
        <package name="glibc-locale-source" version="2.34" release="100.el9_4.2" epoch="0" arch="s390x" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-locale-source-2.34-100.el9_4.2.s390x.rpm</filename>
          <sum type="sha256">fa8f7f8cf817bedb9d5a98984dcde8cbda79fd0a5f115e711e7ce19e793a12e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3619</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-06-05 00:00:00"/>
    <updated date="2024-11-03 22:14:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
  * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3619" id="RHSA-2024:3619" type="rhsa" title="RHSA-2024:3619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26735" id="CVE-2024-26735" type="cve" title="CVE-2024-26735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26993" id="CVE-2024-26993" type="cve" title="CVE-2024-26993"/>
      <reference href="https://bugzilla.redhat.com/2273278" id="2273278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278314" id="2278314" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3619.html" id="ALSA-2024:3619" type="self" title="ALSA-2024:3619"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-427.20.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">0520c9e96b8bacc7fe28a5799d9aa280b4c596f24a4422f70c6f1e2f93a502d1</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-headers-5.14.0-427.20.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">5db730e3442dba85d8c49263c9d8cb210509f9bdfcbd299e8d5d0748ee58e1eb</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-427.20.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">5ddc7d3cbb401b18c07b778c71f80cd80cf0ad0b04708f2880ac0b781a33bd6a</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-5.14.0-427.20.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">7a1f7becb9ef59c383ed805d421682982a16ced1ee7e73a9f2d68d4b437db989</sum>
        </package>
        <package name="rtla" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>rtla-5.14.0-427.20.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">9849ab069fe5e0f0a0adf7888379e69229de2c463515e76e6cebd83b9b4e8c74</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-doc-5.14.0-427.20.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">adc196792686bce2e8a341674ec0d450d7d08ce4d32cfd2313aaec3c818d5677</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-devel-matched-5.14.0-427.20.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">bfbb33386a47ffa2e88a3326cf4519416bfbedd3a637c35dcde487710d393cb9</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-427.20.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c7d7ee5ab8ab0294b4f00af90dbcef059e6a7a51414f9650190dfd7ede234229</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-devel-5.14.0-427.20.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">d35016d4d4bc96054dff47cb8ee4f03448ee1a59b30140d49b7bbd24917baa53</sum>
        </package>
        <package name="rv" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>rv-5.14.0-427.20.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">df1a864f68319180036d1dc09345e7afe635430c402d382832dedd91624730fd</sum>
        </package>
        <package name="perf" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>perf-5.14.0-427.20.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">ea6e209dd18a35d94ff9227eb727477ab72d579f6002379f959f96e0122b4f77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3668</id>
    <title>Moderate: ruby:3.1 security, bug fix, and enhancement update</title>
    <issued date="2024-06-06 00:00:00"/>
    <updated date="2024-06-06 13:02:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.1 security, bug fix, and enhancement update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.1). (AlmaLinux-35449)

Security Fix(es):

* ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
* ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
* ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3668" id="RHSA-2024:3668" type="rhsa" title="RHSA-2024:3668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27280" id="CVE-2024-27280" type="cve" title="CVE-2024-27280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27281" id="CVE-2024-27281" type="cve" title="CVE-2024-27281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27282" id="CVE-2024-27282" type="cve" title="CVE-2024-27282"/>
      <reference href="https://bugzilla.redhat.com/2270749" id="2270749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270750" id="2270750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276810" id="2276810" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3668.html" id="ALSA-2024:3668" type="self" title="ALSA-2024:3668"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <module name="ruby" stream="3.1" version="9040020240606103630" context="8cf767d6" arch="s390x"/>
        <package name="rubygem-rbs" version="2.7.0" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-rbs-2.7.0-144.module_el9.4.0+101+d58a8d95.s390x.rpm</filename>
          <sum type="sha256">1d1a112fc3b8a27fbfc1d73dce926b687e2c7998fbf68b8f881a483d0d824847</sum>
        </package>
        <package name="rubygem-test-unit" version="3.5.3" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-test-unit-3.5.3-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">1d60045ef82a5bbeecbc2287592b1591b55700fae7fd399d58baeef25a1f0e50</sum>
        </package>
        <package name="rubygem-psych" version="4.0.4" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-psych-4.0.4-144.module_el9.4.0+101+d58a8d95.s390x.rpm</filename>
          <sum type="sha256">22a821d1c12c5ad1ff12c6cda4a7a94407fb084f58b768f80f434cb97baad40e</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.3" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-typeprof-0.21.3-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">24cb1a7c1e4aeda56fa4fcdf89d1ff6b077ff837e0e687e9ae7cd7480aefd145</sum>
        </package>
        <package name="rubygem-rake" version="13.0.6" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-rake-13.0.6-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">30d7cb20ddee1557f047d9b4b1d9b26b4087c95a76053d5bd4ab5a143c73fed8</sum>
        </package>
        <package name="ruby-default-gems" version="3.1.5" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>ruby-default-gems-3.1.5-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">393efcc1c737ca8aafadf7e5e3efd4ad73d2781b7659373f27fabf02d3e28fdc</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.4" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.4-1.module_el9.1.0+8+503f6fbd.noarch.rpm</filename>
          <sum type="sha256">47f8869c8adfe2b7eee506473440af3abe2bb171cf60cda4d0dec05db0bc3fb8</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.4" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.s390x.rpm</filename>
          <sum type="sha256">49b1f8d15c4626c94dbdf369d69aa871b2e1b4909ae4718089f41d7de50396ee</sum>
        </package>
        <package name="rubygem-io-console" version="0.5.11" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-io-console-0.5.11-144.module_el9.4.0+101+d58a8d95.s390x.rpm</filename>
          <sum type="sha256">5a7fe7c4cf6774ae29562ab21f65d5888a38fd6e0356488982b82619b29095f5</sum>
        </package>
        <package name="rubygem-bundler" version="2.3.27" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-bundler-2.3.27-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">74e82c75f35c48e200bdd0f13040c5d8cae6d4ab74ed7769e59622008baed436</sum>
        </package>
        <package name="rubygem-minitest" version="5.15.0" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-minitest-5.15.0-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">7641fcb6f89c336a71ea20debc329a809f96b29e9dc4563a574ea5cb8a62797f</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.1.5" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>ruby-bundled-gems-3.1.5-144.module_el9.4.0+101+d58a8d95.s390x.rpm</filename>
          <sum type="sha256">78f31ee25053c1754e7d9af6d5d78dada2e6543542d02ce71988d9a1868ac1a6</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.1" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-bigdecimal-3.1.1-144.module_el9.4.0+101+d58a8d95.s390x.rpm</filename>
          <sum type="sha256">7d665dff78a913ffd0872a4258d892d7ac21bd24a5af53a4c88bdb50c397d9dc</sum>
        </package>
        <package name="rubygem-pg" version="1.3.5" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="s390x" src="rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.s390x.rpm</filename>
          <sum type="sha256">81af584c5f98cbff30e7733f802c0711cdfb921b4fc268dc21e6e002f4c9a292</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.1" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-power_assert-2.0.1-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">92d64262b45999e76de317aad96cb770b73720d55e9ebfd275207ddad00c3d86</sum>
        </package>
        <package name="rubygem-rdoc" version="6.4.1.1" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-rdoc-6.4.1.1-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">9bd1632b1cb4319201859701f1eaf84666419345c170ef93cd47ab4031829429</sum>
        </package>
        <package name="ruby" version="3.1.5" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.s390x.rpm</filename>
          <sum type="sha256">a461424388708e06d84966f9622e3556f44b6ba9cd310beae2a6b89be341b5ab</sum>
        </package>
        <package name="rubygems" version="3.3.27" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygems-3.3.27-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">bc697c3ad63d00ee0bad232fea31d960c9b955859ae4dc256d87c278f8d0f0da</sum>
        </package>
        <package name="ruby-doc" version="3.1.5" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>ruby-doc-3.1.5-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">bebcbffa554dfed194d3fc1212ba3d01dd89f3a6ecdda3228069f2a3d6ddb640</sum>
        </package>
        <package name="rubygem-rss" version="0.2.9" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-rss-0.2.9-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">c09830da0af358c4dd7f61e57c051158c302433acc0274930fe76e2b6b983c4a</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.3.5" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="noarch" src="rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-pg-doc-1.3.5-1.module_el9.1.0+8+503f6fbd.noarch.rpm</filename>
          <sum type="sha256">c24489067c5c62f3bb8edd8f47b01171f766eaeb0e96991878c51e5ae4b1b3e4</sum>
        </package>
        <package name="ruby-devel" version="3.1.5" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>ruby-devel-3.1.5-144.module_el9.4.0+101+d58a8d95.s390x.rpm</filename>
          <sum type="sha256">cf88b45dd320b39708857de29827fc2b0d2ec7fdd46867eceecbc4278221302d</sum>
        </package>
        <package name="rubygem-json" version="2.6.1" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-json-2.6.1-144.module_el9.4.0+101+d58a8d95.s390x.rpm</filename>
          <sum type="sha256">d1bbc50c4d944f76cbee80c3acef48a6f14b2bfd955b40d66fe8eb5849e2560b</sum>
        </package>
        <package name="rubygem-rexml" version="3.2.5" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-rexml-3.2.5-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">d395d040309f58998acea87e2743d77e76cf53c44ebdfa3fe0fc26ce092eda60</sum>
        </package>
        <package name="rubygem-irb" version="1.4.1" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygem-irb-1.4.1-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">d7f12808af01af69e86302277c2e88e8e91350d449160799c77eeb4af8509670</sum>
        </package>
        <package name="ruby-libs" version="3.1.5" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>ruby-libs-3.1.5-144.module_el9.4.0+101+d58a8d95.s390x.rpm</filename>
          <sum type="sha256">dccf903729d176701eef0f2752264af70372f0b2693911249731aebaa60a853d</sum>
        </package>
        <package name="rubygems-devel" version="3.3.27" release="144.module_el9.4.0+101+d58a8d95" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el9.4.0+101+d58a8d95.src.rpm">
          <filename>rubygems-devel-3.3.27-144.module_el9.4.0+101+d58a8d95.noarch.rpm</filename>
          <sum type="sha256">ee39f8098869a8f763ea082ee44bb91041439215ed3a24be7172710e3bd45917</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3671</id>
    <title>Moderate: ruby:3.3 security, bug fix, and enhancement update</title>
    <issued date="2024-06-06 00:00:00"/>
    <updated date="2024-06-10 14:17:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.3 security, bug fix, and enhancement update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.3). (AlmaLinux-37697)

Security Fix(es):

* ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
* ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
* ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3671" id="RHSA-2024:3671" type="rhsa" title="RHSA-2024:3671"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27280" id="CVE-2024-27280" type="cve" title="CVE-2024-27280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27281" id="CVE-2024-27281" type="cve" title="CVE-2024-27281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27282" id="CVE-2024-27282" type="cve" title="CVE-2024-27282"/>
      <reference href="https://bugzilla.redhat.com/2270749" id="2270749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270750" id="2270750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276810" id="2276810" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3671.html" id="ALSA-2024:3671" type="self" title="ALSA-2024:3671"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <module name="ruby" stream="3.3" version="9040020240606163337" context="8cf767d6" arch="s390x"/>
        <package name="rubygem-mysql2" version="0.5.5" release="1.module_el9.4.0+75+1a8fe981" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.5-1.module_el9.4.0+75+1a8fe981.src.rpm">
          <filename>rubygem-mysql2-0.5.5-1.module_el9.4.0+75+1a8fe981.s390x.rpm</filename>
          <sum type="sha256">05258957f4a8ba14cc6ebf5219ecc4e0e325a64dcd11edc78435445fb2231e41</sum>
        </package>
        <package name="rubygems-devel" version="3.5.9" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygems-devel-3.5.9-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">05ba48bdeda8e01d3470d0bf7d33015690b1997e4bb25d0fc69797c9afae1916</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.5" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-bigdecimal-3.1.5-2.module_el9.4.0+102+68a93853.s390x.rpm</filename>
          <sum type="sha256">070997a41248e01966472fd84011e64ca60b38c54ad3b7b0efced72a73a19683</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.3.1" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>ruby-bundled-gems-3.3.1-2.module_el9.4.0+102+68a93853.s390x.rpm</filename>
          <sum type="sha256">271f85b5aea662819ea92e65551c40763eb378a222f2c2c4e800418f775e779e</sum>
        </package>
        <package name="rubygem-bundler" version="2.5.9" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-bundler-2.5.9-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">27a30884ae6fa12a9de09ee3bda1973c07c6d60abf1f973faffc4cc1738f44a6</sum>
        </package>
        <package name="rubygem-rss" version="0.3.0" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-rss-0.3.0-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">2c429b7a055c6f9b412d5ee390ec6c0a88dea2567435dfae5cd4ad42b5e166d1</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.5.4" release="1.module_el9.4.0+75+1a8fe981" epoch="0" arch="noarch" src="rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.src.rpm">
          <filename>rubygem-pg-doc-1.5.4-1.module_el9.4.0+75+1a8fe981.noarch.rpm</filename>
          <sum type="sha256">37ef36e0456b9c62427f8dd08442c622c134e026ded1488b8fd55487b69d2a58</sum>
        </package>
        <package name="rubygem-rdoc" version="6.6.3.1" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-rdoc-6.6.3.1-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">57e1d24b92a4a14badd87e0c44c6f5f8c0bab776be40835bb728b02d64e8f009</sum>
        </package>
        <package name="rubygem-rake" version="13.1.0" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-rake-13.1.0-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">6424338c8361e0e095543455d2612460c41532b09272bc16813805ea300bbde5</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.5" release="1.module_el9.4.0+75+1a8fe981" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.5-1.module_el9.4.0+75+1a8fe981.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.5-1.module_el9.4.0+75+1a8fe981.noarch.rpm</filename>
          <sum type="sha256">65b0d0cc45f0088e7962db0543b7f1672cbc730924b371f28cdda18a25b33edf</sum>
        </package>
        <package name="ruby-devel" version="3.3.1" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>ruby-devel-3.3.1-2.module_el9.4.0+102+68a93853.s390x.rpm</filename>
          <sum type="sha256">66449393d742e738c7f96433fcef925158e73e4636fb20d658c769f8719ae45b</sum>
        </package>
        <package name="rubygem-test-unit" version="3.6.1" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-test-unit-3.6.1-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">66cbe8756ebbeb78a8260b97a493cd2652d462769355328be41b2161ba0321ea</sum>
        </package>
        <package name="rubygem-rexml" version="3.2.6" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-rexml-3.2.6-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">7c87bbd4e24e647635f83b56c1eacbe966a0b069e0fd2b111ed825ef4f5247dd</sum>
        </package>
        <package name="rubygem-irb" version="1.11.0" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-irb-1.11.0-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">853620c2a9729478a537a057938c253494ff63ce1fd4c042303ba942d9ac2640</sum>
        </package>
        <package name="ruby-doc" version="3.3.1" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>ruby-doc-3.3.1-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">867cf153f94223d8490a1f00567be22df60179b5cf18b7afa9ed1895fc1bccd3</sum>
        </package>
        <package name="ruby-default-gems" version="3.3.1" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>ruby-default-gems-3.3.1-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">87859f05ea0fe77e2e991a2b42083f3ffdfa0a25c19d4577bddf6e9ee95c4965</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.3" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-power_assert-2.0.3-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">9f45f58c8fd93f89f7b1471e8e904876abde5bf3381d6811bd19c9cf5ab7ab93</sum>
        </package>
        <package name="rubygem-psych" version="5.1.2" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-psych-5.1.2-2.module_el9.4.0+102+68a93853.s390x.rpm</filename>
          <sum type="sha256">a1edcdca84c8298d7688944f30e419a2c29624bb5196fa715fa9cda1c2b688b2</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.9" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-typeprof-0.21.9-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">a73909cc8567623583c4366b91370617bfdf02a0f098a2402b2b90b279bda810</sum>
        </package>
        <package name="rubygem-pg" version="1.5.4" release="1.module_el9.4.0+75+1a8fe981" epoch="0" arch="s390x" src="rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.src.rpm">
          <filename>rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.s390x.rpm</filename>
          <sum type="sha256">a81354cf449ea715f53abe583ed241f40275e30991a4a7bafc454729c2c75cc0</sum>
        </package>
        <package name="ruby-libs" version="3.3.1" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>ruby-libs-3.3.1-2.module_el9.4.0+102+68a93853.s390x.rpm</filename>
          <sum type="sha256">c003eed5620ebef2e1676b387ce5cd0a266ab049e20f092314bdb7fccccaa271</sum>
        </package>
        <package name="rubygem-racc" version="1.7.3" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-racc-1.7.3-2.module_el9.4.0+102+68a93853.s390x.rpm</filename>
          <sum type="sha256">cc830be351ac4e58b68d72c98f2e52af38c5b84440c511a7d82981b9df2bcadd</sum>
        </package>
        <package name="rubygem-json" version="2.7.1" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-json-2.7.1-2.module_el9.4.0+102+68a93853.s390x.rpm</filename>
          <sum type="sha256">d72f6a43a476fe9aeb005cabfa1bce800c8e29321dcb73149580bdef67b4aace</sum>
        </package>
        <package name="rubygems" version="3.5.9" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygems-3.5.9-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">d7e394a7d6504872209c8e49a4adf8c212a55ab52ac30e81834535b8788a0b49</sum>
        </package>
        <package name="rubygem-minitest" version="5.20.0" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-minitest-5.20.0-2.module_el9.4.0+102+68a93853.noarch.rpm</filename>
          <sum type="sha256">e288892ef6dc536761fff9f15fb42502eb7c4cee7dd69426b95dd69290bdfe42</sum>
        </package>
        <package name="rubygem-io-console" version="0.7.1" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-io-console-0.7.1-2.module_el9.4.0+102+68a93853.s390x.rpm</filename>
          <sum type="sha256">e48ab13a898bdd492d9d3babf10b8055c387e2da20a27b2b23d088cd3f37cd74</sum>
        </package>
        <package name="rubygem-rbs" version="3.4.0" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>rubygem-rbs-3.4.0-2.module_el9.4.0+102+68a93853.s390x.rpm</filename>
          <sum type="sha256">ea47fad4821a191daf1244dc80d8bbaca6b85d66992fdc742f90cf1eccda0131</sum>
        </package>
        <package name="ruby" version="3.3.1" release="2.module_el9.4.0+102+68a93853" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el9.4.0+102+68a93853.src.rpm">
          <filename>ruby-3.3.1-2.module_el9.4.0+102+68a93853.s390x.rpm</filename>
          <sum type="sha256">f2a4e212bb8ad6d97b4e04bb409bf8681c4f3147c6d7ca817efad5796c703bf0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3754</id>
    <title>Important: ipa security update</title>
    <issued date="2024-06-10 00:00:00"/>
    <updated date="2024-06-20 16:08:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* freeipa: delegation rules allow a proxy service to impersonate any user to access another target service (CVE-2024-2698)
* freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force (CVE-2024-3183)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3754" id="RHSA-2024:3754" type="rhsa" title="RHSA-2024:3754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2698" id="CVE-2024-2698" type="cve" title="CVE-2024-2698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3183" id="CVE-2024-3183" type="cve" title="CVE-2024-3183"/>
      <reference href="https://bugzilla.redhat.com/2270353" id="2270353" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270685" id="2270685" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3754.html" id="ALSA-2024:3754" type="self" title="ALSA-2024:3754"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3-ipaserver" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="noarch" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>python3-ipaserver-4.11.0-15.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">40a4154db8aac39968fc4f7cf327863ac3f3bd8919b4dc68e6c14a4ab01eb5c9</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="s390x" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>ipa-server-trust-ad-4.11.0-15.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">43130ef4b459935a9a8ab8743662b773422517d68b627958e1c10c6a5afd0268</sum>
        </package>
        <package name="python3-ipalib" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="noarch" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>python3-ipalib-4.11.0-15.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">4685c4ad0d7809b20234c8c41abd2c35f8e846c30823f4a51f5b2cd7d3a5021d</sum>
        </package>
        <package name="ipa-client" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="s390x" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>ipa-client-4.11.0-15.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">4a7cf96614a163e3c974ccbef6edaef34fda34780c0f33f22809ff0d7de42027</sum>
        </package>
        <package name="ipa-client-samba" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="s390x" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>ipa-client-samba-4.11.0-15.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">770b8342412bade75e039b46b3cacad1c70aa619ddeeddcd3122759c8ffe05e0</sum>
        </package>
        <package name="ipa-server-common" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="noarch" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>ipa-server-common-4.11.0-15.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">78c12a5600633f1655b2a35f3b63d7b39c0f49136f53f5fbf1f43b90763e9534</sum>
        </package>
        <package name="ipa-client-common" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="noarch" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>ipa-client-common-4.11.0-15.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">7c8ab597afb44822aa519229f86d7b7cfb15bbaecd4c98b86ef69236c3b69f38</sum>
        </package>
        <package name="ipa-server" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="s390x" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>ipa-server-4.11.0-15.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">82309fe2033647b0df0f0d17d44d44cfed7c412d503e21b69a83e97a20fe62fd</sum>
        </package>
        <package name="ipa-server-dns" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="noarch" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>ipa-server-dns-4.11.0-15.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">94b714cb309d009eb644237221dbe3f71e52bf8c8a8e51d5d146782776c0cfa1</sum>
        </package>
        <package name="ipa-selinux" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="noarch" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>ipa-selinux-4.11.0-15.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">b7912916951acae4663a14ab6732f523cd11b4e839c61cb35d699ac5a136f38e</sum>
        </package>
        <package name="ipa-client-epn" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="s390x" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>ipa-client-epn-4.11.0-15.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d6b1861fb9f1d18292d06eda52a21615ae9325b3d9552c7cc1691d0eb2f29e32</sum>
        </package>
        <package name="python3-ipaclient" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="noarch" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>python3-ipaclient-4.11.0-15.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">f39f0f73b007711341356b8af46f1f1e4e354a48afe1770649cafa532bc42a24</sum>
        </package>
        <package name="ipa-common" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="noarch" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>ipa-common-4.11.0-15.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">f4e82a031b6db79bb4ef20babac0d8c4f972deed8860231e96bfa98c15ca5c11</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3820</id>
    <title>Moderate: fence-agents security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-14 07:30:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. 

Security Fix(es):

* jinja2: accepts keys containing non-attribute characters (CVE-2024-34064)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3820" id="RHSA-2024:3820" type="rhsa" title="RHSA-2024:3820"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34064" id="CVE-2024-34064" type="cve" title="CVE-2024-34064"/>
      <reference href="https://bugzilla.redhat.com/2279476" id="2279476" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3820.html" id="ALSA-2024:3820" type="self" title="ALSA-2024:3820"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="fence-agents-ibm-powervs" version="4.10.0" release="62.el9_4.3" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9_4.3.src.rpm">
          <filename>fence-agents-ibm-powervs-4.10.0-62.el9_4.3.noarch.rpm</filename>
          <sum type="sha256">14a5c427e4ffff4b128e8c325243492da2b3a4deecb11de0ef93675bc786bbc4</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.10.0" release="62.el9_4.3" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9_4.3.src.rpm">
          <filename>fence-agents-ibm-vpc-4.10.0-62.el9_4.3.noarch.rpm</filename>
          <sum type="sha256">22454a2b95edf73814a9bdf1010542ab73940ec252e8cc0ae8bfbc1cb3bfec03</sum>
        </package>
        <package name="fence-agents-virsh" version="4.10.0" release="62.el9_4.3" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9_4.3.src.rpm">
          <filename>fence-agents-virsh-4.10.0-62.el9_4.3.noarch.rpm</filename>
          <sum type="sha256">931740abb4c2d76c045b121cad133b3e1a58482fdc5efd1067e8936886714353</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.10.0" release="62.el9_4.3" epoch="0" arch="s390x" src="fence-agents-4.10.0-62.el9_4.3.src.rpm">
          <filename>fence-agents-kubevirt-4.10.0-62.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">9e1728fa8362c81696bf8c0109a0d42be03c409b77d7850adee8b18c55df546b</sum>
        </package>
        <package name="fence-agents-common" version="4.10.0" release="62.el9_4.3" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9_4.3.src.rpm">
          <filename>fence-agents-common-4.10.0-62.el9_4.3.noarch.rpm</filename>
          <sum type="sha256">d3caf2e25a1f6a35cbd868b45f8a672e3964f1f16964b934663b4c87f34834e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3823</id>
    <title>Moderate: rpm-ostree security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-14 06:42:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rpm-ostree security update</summary>
    <description>The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be used both on client systems and on server-side composes. The rpm-ostree-client package provides commands for client systems to perform upgrades and rollbacks.

Security Fix(es):

* rpm-ostree: world-readable /etc/shadow file [9.4.z] (JIRA:AlmaLinux-31852)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3823" id="RHSA-2024:3823" type="rhsa" title="RHSA-2024:3823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2905" id="CVE-2024-2905" type="cve" title="CVE-2024-2905"/>
      <reference href="https://bugzilla.redhat.com/2271585" id="2271585" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3823.html" id="ALSA-2024:3823" type="self" title="ALSA-2024:3823"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="rpm-ostree-libs" version="2024.3" release="3.el9_4" epoch="0" arch="s390x" src="rpm-ostree-2024.3-3.el9_4.src.rpm">
          <filename>rpm-ostree-libs-2024.3-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">b480726dbb07ddc2aaec30818532b2c1ee5eb623b9c260e44cdaaacb615d146e</sum>
        </package>
        <package name="rpm-ostree" version="2024.3" release="3.el9_4" epoch="0" arch="s390x" src="rpm-ostree-2024.3-3.el9_4.src.rpm">
          <filename>rpm-ostree-2024.3-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">fac68ef0ca215bc6e46c914d23788014cdbbd38c72bd41f024220e475f9c5f0f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3826</id>
    <title>Moderate: podman security and bug fix update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-14 09:47:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>podman security and bug fix update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fixes:

* podman: jose-go: improper handling of highly compressed data (CVE-2024-28180)
* podman: golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
* podman: jose: resource exhaustion (CVE-2024-28176)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3826" id="RHSA-2024:3826" type="rhsa" title="RHSA-2024:3826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45290" id="CVE-2023-45290" type="cve" title="CVE-2023-45290"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28176" id="CVE-2024-28176" type="cve" title="CVE-2024-28176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28180" id="CVE-2024-28180" type="cve" title="CVE-2024-28180"/>
      <reference href="https://bugzilla.redhat.com/2268017" id="2268017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268820" id="2268820" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268854" id="2268854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3826.html" id="ALSA-2024:3826" type="self" title="ALSA-2024:3826"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="podman-plugins" version="4.9.4" release="4.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-4.el9_4.src.rpm">
          <filename>podman-plugins-4.9.4-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">6821c9769b964a14dcdba4eb4de0a3290b39b82567a406124ef50df5a760cb48</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="4.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-4.el9_4.src.rpm">
          <filename>podman-tests-4.9.4-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">7f495d55949a6d2c03373c10b766c7d4ff4d6d73f183cd6d5182f82144bb6ead</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="4.el9_4" epoch="4" arch="noarch" src="podman-4.9.4-4.el9_4.src.rpm">
          <filename>podman-docker-4.9.4-4.el9_4.noarch.rpm</filename>
          <sum type="sha256">9d79c85548bc603fddea4f740cd5337264900f7281d245c93a4d92712d0a83cb</sum>
        </package>
        <package name="podman" version="4.9.4" release="4.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-4.el9_4.src.rpm">
          <filename>podman-4.9.4-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">df97b1bb16a3094a3195e2a861ddbc4a327bb9c0b282be63a25634e47925a44d</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="4.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-4.el9_4.src.rpm">
          <filename>podman-remote-4.9.4-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">ed43313ef3c23bb4094fd026ab9352a504dd1d09edba5ab73dc1541313de7302</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3827</id>
    <title>Moderate: buildah security and bug fix update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-13 13:22:49"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>buildah security and bug fix update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. 

Security Fix(es):

* golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
* jose-go: improper handling of highly compressed data (CVE-2024-28180)
* buildah: jose: resource exhaustion (CVE-2024-28176)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3827" id="RHSA-2024:3827" type="rhsa" title="RHSA-2024:3827"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45290" id="CVE-2023-45290" type="cve" title="CVE-2023-45290"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28176" id="CVE-2024-28176" type="cve" title="CVE-2024-28176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28180" id="CVE-2024-28180" type="cve" title="CVE-2024-28180"/>
      <reference href="https://bugzilla.redhat.com/2268017" id="2268017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268820" id="2268820" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268854" id="2268854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3827.html" id="ALSA-2024:3827" type="self" title="ALSA-2024:3827"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="buildah" version="1.33.7" release="2.el9_4" epoch="2" arch="s390x" src="buildah-1.33.7-2.el9_4.src.rpm">
          <filename>buildah-1.33.7-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">226218bce35d72cfff16498172f56d77314152168a0396e2564686af324c366e</sum>
        </package>
        <package name="buildah-tests" version="1.33.7" release="2.el9_4" epoch="2" arch="s390x" src="buildah-1.33.7-2.el9_4.src.rpm">
          <filename>buildah-tests-1.33.7-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">c003f4af4a5369894cd6c12f15df77e4c35f12ab84ec223457b04f5863e05d32</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3830</id>
    <title>Moderate: gvisor-tap-vsock security and bug fix update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-13 13:21:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gvisor-tap-vsock security and bug fix update</summary>
    <description>A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding.

Security Fix(es):

* golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3830" id="RHSA-2024:3830" type="rhsa" title="RHSA-2024:3830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45290" id="CVE-2023-45290" type="cve" title="CVE-2023-45290"/>
      <reference href="https://bugzilla.redhat.com/2268017" id="2268017" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3830.html" id="ALSA-2024:3830" type="self" title="ALSA-2024:3830"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="gvisor-tap-vsock" version="0.7.3" release="3.el9_4.alma.1" epoch="6" arch="s390x" src="gvisor-tap-vsock-0.7.3-3.el9_4.alma.1.src.rpm">
          <filename>gvisor-tap-vsock-0.7.3-3.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">00ca7400713cbfd5e6e50125d4b9dc5761409323d22f7587215c1002f6592926</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3831</id>
    <title>Moderate: containernetworking-plugins security and bug fix update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-13 13:20:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>containernetworking-plugins security and bug fix update</summary>
    <description>The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. 

Security Fix(es):

* golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3831" id="RHSA-2024:3831" type="rhsa" title="RHSA-2024:3831"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45290" id="CVE-2023-45290" type="cve" title="CVE-2023-45290"/>
      <reference href="https://bugzilla.redhat.com/2268017" id="2268017" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3831.html" id="ALSA-2024:3831" type="self" title="ALSA-2024:3831"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="containernetworking-plugins" version="1.4.0" release="3.el9_4" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-3.el9_4.src.rpm">
          <filename>containernetworking-plugins-1.4.0-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">36b0f4160d2a7b56f4bf364e477997f585b1b2576b9125bd490abb34be6a3dff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3834</id>
    <title>Moderate: gdk-pixbuf2 security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-13 13:20:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gdk-pixbuf2 security update</summary>
    <description>The gdk-pixbuf2 packages provide an image loading library that can be extended
by loadable modules for new image formats. It is used by toolkits such as GTK+
or clutter.

Security Fix(es):

* gdk-pixbuf2: heap memory corruption on gdk-pixbuf (CVE-2022-48622)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3834" id="RHSA-2024:3834" type="rhsa" title="RHSA-2024:3834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48622" id="CVE-2022-48622" type="cve" title="CVE-2022-48622"/>
      <reference href="https://bugzilla.redhat.com/2260545" id="2260545" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3834.html" id="ALSA-2024:3834" type="self" title="ALSA-2024:3834"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="gdk-pixbuf2-devel" version="2.42.6" release="4.el9_4" epoch="0" arch="s390x" src="gdk-pixbuf2-2.42.6-4.el9_4.src.rpm">
          <filename>gdk-pixbuf2-devel-2.42.6-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">4667523a13cb42c87027b25887c0ce11070c8c60cb1bf1a3f2a198bd24132fba</sum>
        </package>
        <package name="gdk-pixbuf2" version="2.42.6" release="4.el9_4" epoch="0" arch="s390x" src="gdk-pixbuf2-2.42.6-4.el9_4.src.rpm">
          <filename>gdk-pixbuf2-2.42.6-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">e2506a11a7e65d8f18070da8d0048c0935461ee209aff42517a68595c64c41dd</sum>
        </package>
        <package name="gdk-pixbuf2-modules" version="2.42.6" release="4.el9_4" epoch="0" arch="s390x" src="gdk-pixbuf2-2.42.6-4.el9_4.src.rpm">
          <filename>gdk-pixbuf2-modules-2.42.6-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">e27e02ed0ea45b035ba99404b7044ccb88021cf22d72f51506351de8dd4cf484</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3835</id>
    <title>Important: libreoffice security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-14 13:33:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Improper Input Validation leading to arbitrary gstreamer plugin execution (CVE-2023-6185)
* libreoffice: Insufficient macro permission validation leading to macro execution (CVE-2023-6186)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3835" id="RHSA-2024:3835" type="rhsa" title="RHSA-2024:3835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6185" id="CVE-2023-6185" type="cve" title="CVE-2023-6185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6186" id="CVE-2023-6186" type="cve" title="CVE-2023-6186"/>
      <reference href="https://bugzilla.redhat.com/2254003" id="2254003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254005" id="2254005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3835.html" id="ALSA-2024:3835" type="self" title="ALSA-2024:3835"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="autocorr-ca" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-ca-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">02329fa7e5a0e7da7dd4bba68bc1c4fd83456d40dbba7879678ee62d8eb922ca</sum>
        </package>
        <package name="autocorr-da" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-da-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">02c8f4deacff2600cbc0f0a519f8e7f5c5ae251ff8b5f9ae390b75f4da40ec21</sum>
        </package>
        <package name="autocorr-lb" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-lb-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">04d41aa4d935411483398b2c03fec611c44ef42a1f1e2b0d9a1257f9473c8d03</sum>
        </package>
        <package name="autocorr-fr" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-fr-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">051159f352efc090758d94235826c60a93cfe9526127cd68e5793c784b598bb2</sum>
        </package>
        <package name="autocorr-sv" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-sv-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">0eb7cb0f9f3af8118462b356cec124a914ef6cd7ca13137610e8802824670273</sum>
        </package>
        <package name="libreoffice-data" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-data-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">0f0680c80a17ccdff48b834592d372076b959103e7872176f180134ca14026d9</sum>
        </package>
        <package name="libreoffice-pyuno" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-pyuno-7.1.8.1-12.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">11e6fe88342f2247b94863aa37c4e28781ede1f716ae270aadfd435191110bb0</sum>
        </package>
        <package name="libreoffice-writer" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-writer-7.1.8.1-12.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">15f77235a8dc252d6a87bdd63419f5dc0796d0ce79a5f1b6791f2d5d94421c89</sum>
        </package>
        <package name="autocorr-tr" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-tr-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">26471a15b4a501a8d3f9040494ca5f5496638116c5af1584a7342e5c82023454</sum>
        </package>
        <package name="libreoffice-help-en" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-help-en-7.1.8.1-12.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">2e8bbf700b4a598224e0f46487c7bbc35232cf487ed5f66943ec554591ea6ec6</sum>
        </package>
        <package name="autocorr-pt" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-pt-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">34b6fd3a86e00a0f01e5306f71ea6f8bc627fee1c4691890a14e28c45e9609c4</sum>
        </package>
        <package name="autocorr-hr" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-hr-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">351582cde30bd561d4c550c4d816497971807e517f096e720f1290ed575a1936</sum>
        </package>
        <package name="autocorr-is" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-is-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">3bde270ffb7d49d8b97a10c64dfa489bfd7107b003b37a946505e032c0e6c4fe</sum>
        </package>
        <package name="autocorr-ro" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-ro-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">3e3e7c46230b3d8b15553bd339cd1d17ef7b22da3a9b2077c4e6bb72716e034d</sum>
        </package>
        <package name="autocorr-it" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-it-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">4e582024e498300fa1a3c059d5552769050f581299d3dc22a45755fd58272b30</sum>
        </package>
        <package name="autocorr-en" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-en-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">51ef5432ec735945c5e258870ac5ec0be74fa1662f7b7a7538924c8dfda83af4</sum>
        </package>
        <package name="autocorr-fa" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-fa-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">58c97e3494bba6f7096a318498f3b74f50d554a694b1412cec565812a582c527</sum>
        </package>
        <package name="autocorr-zh" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-zh-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">604a3205d62f2de15432ced13fe32cf28b5d357de20daf1da87da644c5702219</sum>
        </package>
        <package name="autocorr-dsb" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-dsb-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">61bd5b1956e86098431a92578562a2b706d3f961d64bd870761c4c1dc46370de</sum>
        </package>
        <package name="autocorr-ga" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-ga-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">6c3817e4efb2b0af7f5527138bb74c880864c941c712518e63b8ddfbe1c2fdf7</sum>
        </package>
        <package name="autocorr-nl" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-nl-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">7903c0170e36d9ec67128d61d264a01adcf60db0d1a349c93cd6901cc75d90c5</sum>
        </package>
        <package name="autocorr-el" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-el-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">79308e023da222c845b82f7d093983198d6fd8f5f9ae80f425ee8b6dc3e02935</sum>
        </package>
        <package name="libreoffice-core" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-core-7.1.8.1-12.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">81289f503e419bf3f7844e32d9c9180df9ed9c78114c9cfb5eb5bea1b1f2760c</sum>
        </package>
        <package name="libreoffice-ure-common" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-ure-common-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">8e3b06f440f1a1cfc897b4bf1ac1220a1f9e937870e90c15847463e5892c8980</sum>
        </package>
        <package name="autocorr-vi" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-vi-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">90ec78a7a23a02aca093db8dda8e0b7d373cf8675e05101c7a5095433e2d9c71</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-graphicfilter-7.1.8.1-12.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">918ccd3e4e2bb1d4b99419dd2ce9716f375a93b73de27bec6cd4039a5d2693a5</sum>
        </package>
        <package name="libreoffice-pdfimport" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-pdfimport-7.1.8.1-12.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">94bf634a7b02f6119a5d1f79ec41b8a3279d1ab2ef624b6b1cc9d6570e4586d9</sum>
        </package>
        <package name="autocorr-mn" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-mn-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">9625b41e0b2a841c5a4aad2d619d870b9846244d776e5580134ceef57514da3e</sum>
        </package>
        <package name="autocorr-vro" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-vro-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">9633da2652be3cfb7a0c1a8403b52d978c83bbd99d2b2e08d7ef7f6e1bddf17a</sum>
        </package>
        <package name="autocorr-bg" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-bg-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">990d3ae692491cf360bc38a3641f728f24b15ff8411ac6254245f1a402811a1d</sum>
        </package>
        <package name="autocorr-hu" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-hu-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">998b08b0fe2aaa1299edb90c82de0517abeb9e5fd3898c6cfcd4767a7550c589</sum>
        </package>
        <package name="autocorr-cs" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-cs-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">a070bcc56f79bd9382f04f0d7b2e6fc4fdf17acd16c50392db3d3e74ce9cee8d</sum>
        </package>
        <package name="autocorr-fi" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-fi-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">a323d21a958cb2ffbe79b413cf60f197247cc48ec8cfedafd9488f1b1a2df771</sum>
        </package>
        <package name="autocorr-pl" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-pl-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">a7db04ab2b54020ae630c80e4785f53c56f55270273b9b45d7362e6a582964da</sum>
        </package>
        <package name="autocorr-lt" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-lt-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">b83bb5a8d8256fad38ba4420e4ae13bdc8d703a6cde24eefbab5f67e41aadb5a</sum>
        </package>
        <package name="autocorr-es" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-es-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">ba374606f39616b9259e8f551d315536d9360713089cd6d2cc6249145479dc50</sum>
        </package>
        <package name="autocorr-ja" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-ja-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">bf81e2b11eaf60e1808f3f8c2ee26778d5d7d6d6962e145a43df9d42379b8eee</sum>
        </package>
        <package name="autocorr-hsb" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-hsb-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">c078a218020af3b55f0b4495db435ec5687d90545274cc2a1b24810f526a0fb7</sum>
        </package>
        <package name="autocorr-af" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-af-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">cc0903de6575a6e87c2e282cfebf777b4eea8f619ea7bdc9eb638506b7a19d3a</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-opensymbol-fonts-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">d4eb4ec144af407dd8212c83e8bf79387b6ed711387836bf4c0c3a2e2d48c556</sum>
        </package>
        <package name="autocorr-sr" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-sr-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">dd6517f86011117dd7d5d73eca58d0fd75d7297e926ecd63b81631c88cbacb0a</sum>
        </package>
        <package name="autocorr-de" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-de-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">e02017ca036419892d84b7fcdb545d16c6f5fd66bb01ddbb986838ad6cf669ca</sum>
        </package>
        <package name="autocorr-ko" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-ko-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">e20e124513667e67d98ed17c1ad01be0fecfc2a1509ab7b48c8095b84a1bfd90</sum>
        </package>
        <package name="libreoffice-impress" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-impress-7.1.8.1-12.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">e8e4a38b7727660aa8762c335559cb3453de7c14ed79259e9651f907dbee010c</sum>
        </package>
        <package name="autocorr-sk" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-sk-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">efd59b87b2526e3ec8417629d303c4e28c04ebc43d6443edfb32df901ac0098f</sum>
        </package>
        <package name="autocorr-ru" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-ru-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">f3dbc5b77ac98314cbf0c12f9044c00f7ecd6eefccbc0d8ede9351bd2bcbd869</sum>
        </package>
        <package name="libreoffice-calc" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-calc-7.1.8.1-12.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">faa4dfc936498fd7759335d3536c87d65bd760dc00eb999cbcbde0a4d0266d33</sum>
        </package>
        <package name="libreoffice-ogltrans" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-ogltrans-7.1.8.1-12.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">fb858a746b65b99913e7b1cc71f4bb4c3d7685f9a94f9c314518c46de18deae8</sum>
        </package>
        <package name="libreoffice-ure" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-ure-7.1.8.1-12.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">fb94d91b67c1c342b9bf1632e28b6574e4bd2515452e2dd21220eefd8dd90f20</sum>
        </package>
        <package name="autocorr-sl" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>autocorr-sl-7.1.8.1-12.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">fd4587b4116c03a914f5835f872dc5e1c6ba6c9d1f7f35b6a217bd669f71da83</sum>
        </package>
        <package name="libreoffice-langpack-en" version="7.1.8.1" release="12.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-12.el9_4.alma.1.src.rpm">
          <filename>libreoffice-langpack-en-7.1.8.1-12.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">ff739f88dd6466831a9f174aa8939364081eb6e3786c1802743a14997c78c5bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3837</id>
    <title>Important: 389-ds-base security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-14 06:41:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base
packages include the Lightweight Directory Access Protocol (LDAP) server and
command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3837" id="RHSA-2024:3837" type="rhsa" title="RHSA-2024:3837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2199" id="CVE-2024-2199" type="cve" title="CVE-2024-2199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3657" id="CVE-2024-3657" type="cve" title="CVE-2024-3657"/>
      <reference href="https://bugzilla.redhat.com/2267976" id="2267976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274401" id="2274401" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3837.html" id="ALSA-2024:3837" type="self" title="ALSA-2024:3837"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3-lib389" version="2.4.5" release="8.el9_4" epoch="0" arch="noarch" src="389-ds-base-2.4.5-8.el9_4.src.rpm">
          <filename>python3-lib389-2.4.5-8.el9_4.noarch.rpm</filename>
          <sum type="sha256">13a71cd517eeffda1384aa1a720f66dafe47f1f2d381a2f852010d50b9d829aa</sum>
        </package>
        <package name="389-ds-base" version="2.4.5" release="8.el9_4" epoch="0" arch="s390x" src="389-ds-base-2.4.5-8.el9_4.src.rpm">
          <filename>389-ds-base-2.4.5-8.el9_4.s390x.rpm</filename>
          <sum type="sha256">346ac74217f783d72d897610316d4b4211c25539fb7bec443305e7e678618c6b</sum>
        </package>
        <package name="389-ds-base-libs" version="2.4.5" release="8.el9_4" epoch="0" arch="s390x" src="389-ds-base-2.4.5-8.el9_4.src.rpm">
          <filename>389-ds-base-libs-2.4.5-8.el9_4.s390x.rpm</filename>
          <sum type="sha256">9e2c5a8cefc468c41955f1d424d4fe22bf16ba56d4b7dfe911f5b462cd2c7de6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3838</id>
    <title>Moderate: ruby security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-13 13:19:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby
(3.0). (AlmaLinux-35740)

Security Fix(es):

* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
* ruby: ReDoS vulnerability in URI (CVE-2023-28755)
* ruby: ReDoS vulnerability in Time (CVE-2023-28756)
* ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
* ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
* ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3838" id="RHSA-2024:3838" type="rhsa" title="RHSA-2024:3838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33621" id="CVE-2021-33621" type="cve" title="CVE-2021-33621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28755" id="CVE-2023-28755" type="cve" title="CVE-2023-28755"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28756" id="CVE-2023-28756" type="cve" title="CVE-2023-28756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27280" id="CVE-2024-27280" type="cve" title="CVE-2024-27280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27281" id="CVE-2024-27281" type="cve" title="CVE-2024-27281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27282" id="CVE-2024-27282" type="cve" title="CVE-2024-27282"/>
      <reference href="https://bugzilla.redhat.com/2149706" id="2149706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184059" id="2184059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184061" id="2184061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270749" id="2270749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270750" id="2270750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276810" id="2276810" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3838.html" id="ALSA-2024:3838" type="self" title="ALSA-2024:3838"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="rubygem-rbs" version="1.4.0" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-rbs-1.4.0-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">0bfac6c9da7968b64d54a690969dd309c9b0150643e757efe6dc85ddf5c357d7</sum>
        </package>
        <package name="rubygem-irb" version="1.3.5" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-irb-1.3.5-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">1a34a95184a16559ec775224458fbb4e5d7eafa8b02c14b4d4de241a4ca24669</sum>
        </package>
        <package name="rubygem-rss" version="0.2.9" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-rss-0.2.9-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">1f466276d00158edc966eafaf20af5d2d8a47c474fb3cada1c487659c8046b4b</sum>
        </package>
        <package name="rubygem-io-console" version="0.5.7" release="162.el9_4" epoch="0" arch="s390x" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-io-console-0.5.7-162.el9_4.s390x.rpm</filename>
          <sum type="sha256">2707bcba6bca49f50d2aad7e9f4c0bcd336dc8f9f640267c6bc3aaa1a0bfa411</sum>
        </package>
        <package name="rubygem-psych" version="3.3.2" release="162.el9_4" epoch="0" arch="s390x" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-psych-3.3.2-162.el9_4.s390x.rpm</filename>
          <sum type="sha256">2f3bf458cb41bc24aca18ca4b2881d13220072c0de25a68c1adb807e13189d8b</sum>
        </package>
        <package name="rubygems" version="3.2.33" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygems-3.2.33-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">347e4dc030a5241683a27f18c647f3fc0e7dbc9bc5e785a0da30335cefdefacb</sum>
        </package>
        <package name="rubygem-rake" version="13.0.3" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-rake-13.0.3-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">35b188eebdbd09683b30a8af5a3624c9964b3fc780c7d77b6583461424e5224b</sum>
        </package>
        <package name="rubygem-json" version="2.5.1" release="162.el9_4" epoch="0" arch="s390x" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-json-2.5.1-162.el9_4.s390x.rpm</filename>
          <sum type="sha256">3923138897bf64417f2978c11b0fb8645af44ab568a5db9565f5cb1e23a43f23</sum>
        </package>
        <package name="rubygem-bundler" version="2.2.33" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-bundler-2.2.33-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">3f4a2346edc0c1c3446d3c66bd2ba64ab24f0742412b59c537f08239a2dfd5c8</sum>
        </package>
        <package name="rubygem-typeprof" version="0.15.2" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-typeprof-0.15.2-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">530717f0a8bfbc3fb92b8b8a71d3926c0f2f55b22c1488d92b58cb5635b99891</sum>
        </package>
        <package name="rubygem-rdoc" version="6.3.4.1" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-rdoc-6.3.4.1-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">61efa2918d01d92c6a737ab7b3dd698635ccdec9026edab5146425418db962b6</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.0.0" release="162.el9_4" epoch="0" arch="s390x" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-bigdecimal-3.0.0-162.el9_4.s390x.rpm</filename>
          <sum type="sha256">719faf48a4e1392e055986f296054ba7954df2d0dffed24941bd6e862c067937</sum>
        </package>
        <package name="rubygems-devel" version="3.2.33" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygems-devel-3.2.33-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">8f176439e95a09833a724cde74b7c078b093659ea59454aa38b5f428c8f73480</sum>
        </package>
        <package name="rubygem-minitest" version="5.14.2" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-minitest-5.14.2-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">a78beda206af7255e4d33f11d78b0a9c1fa541abafcfc7741c0fb00104fe3a80</sum>
        </package>
        <package name="ruby-libs" version="3.0.7" release="162.el9_4" epoch="0" arch="s390x" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>ruby-libs-3.0.7-162.el9_4.s390x.rpm</filename>
          <sum type="sha256">bf43234f913a0e87e76e4fdb3e20d33c522f436df23f982a30f86027dc2a6b4a</sum>
        </package>
        <package name="rubygem-power_assert" version="1.2.1" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-power_assert-1.2.1-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">cf9abec31ee790b95caeb7f3611af2fbc5682a93248f60c4a6f5db1bcd237bc2</sum>
        </package>
        <package name="rubygem-rexml" version="3.2.5" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-rexml-3.2.5-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">d0278393db1ac1c2f56329b1d47402c84a38afdb0e76f78638b80f071db40dfd</sum>
        </package>
        <package name="ruby-devel" version="3.0.7" release="162.el9_4" epoch="0" arch="s390x" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>ruby-devel-3.0.7-162.el9_4.s390x.rpm</filename>
          <sum type="sha256">e85dbd297deb15872efa7bfe1b3d9982cf3af62047faaca533cf2d705f84c40f</sum>
        </package>
        <package name="rubygem-test-unit" version="3.3.7" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>rubygem-test-unit-3.3.7-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">ecfdbb201207f939bafee5ce30ab3977262636e2f73b28218e6d63628828dc5d</sum>
        </package>
        <package name="ruby" version="3.0.7" release="162.el9_4" epoch="0" arch="s390x" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>ruby-3.0.7-162.el9_4.s390x.rpm</filename>
          <sum type="sha256">eda6795ddf6af1a33c0d11d2aae22fc4c93bfb6459da7932b3de3b361ed573c0</sum>
        </package>
        <package name="ruby-default-gems" version="3.0.7" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>ruby-default-gems-3.0.7-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">f6809eb4fbdc71511e0819d5b7b419c0f51d8e2ddaa37a2c79e09159f9fa0586</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3842</id>
    <title>Low: c-ares security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-13 13:15:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>c-ares security update</summary>
    <description>The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3842" id="RHSA-2024:3842" type="rhsa" title="RHSA-2024:3842"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25629" id="CVE-2024-25629" type="cve" title="CVE-2024-25629"/>
      <reference href="https://bugzilla.redhat.com/2265713" id="2265713" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3842.html" id="ALSA-2024:3842" type="self" title="ALSA-2024:3842"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="c-ares-devel" version="1.19.1" release="2.el9_4" epoch="0" arch="s390x" src="c-ares-1.19.1-2.el9_4.src.rpm">
          <filename>c-ares-devel-1.19.1-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">74bc85483b802e649da4f96130036ae843c9900640919ca65b9e25f3754786f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3843</id>
    <title>Moderate: cockpit security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-13 13:13:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cockpit security update</summary>
    <description>Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es):

* cockpit: command injection when deleting a sosreport with a crafted name (CVE-2024-2947)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3843" id="RHSA-2024:3843" type="rhsa" title="RHSA-2024:3843"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2947" id="CVE-2024-2947" type="cve" title="CVE-2024-2947"/>
      <reference href="https://bugzilla.redhat.com/2271614" id="2271614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3843.html" id="ALSA-2024:3843" type="self" title="ALSA-2024:3843"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="cockpit-pcp" version="311.2" release="1.el9_4" epoch="0" arch="s390x" src="cockpit-311.2-1.el9_4.src.rpm">
          <filename>cockpit-pcp-311.2-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">118fb87b978fc9eb2161f3d1d4d06ec6a77928f8f65c39b44b952c75f1d45771</sum>
        </package>
        <package name="cockpit-storaged" version="311.2" release="1.el9_4" epoch="0" arch="noarch" src="cockpit-311.2-1.el9_4.src.rpm">
          <filename>cockpit-storaged-311.2-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">76e5c124290b224d819d5972ea581ed9d4052781b70e0fda74d8928cfd15a193</sum>
        </package>
        <package name="cockpit-packagekit" version="311.2" release="1.el9_4" epoch="0" arch="noarch" src="cockpit-311.2-1.el9_4.src.rpm">
          <filename>cockpit-packagekit-311.2-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">84700784182c44b69c2e4e620d94e50da125720aaff9f5c88336d5bab327e19f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3955</id>
    <title>Important: firefox security update</title>
    <issued date="2024-06-17 00:00:00"/>
    <updated date="2024-06-19 09:12:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.12.0 ESR.

Security Fix(es):
  
* firefox: Use-after-free in networking (CVE-2024-5702)

* firefox: Use-after-free in JavaScript object transplant (CVE-2024-5688)
* firefox: External protocol handlers leaked by timing attack (CVE-2024-5690)
* firefox:  Sandboxed iframes were able to bypass sandbox restrictions to open a new window (CVE-2024-5691)
* firefox: Cross-Origin Image leak via Offscreen Canvas (CVE-2024-5693)
* firefox: Memory Corruption in Text Fragments (CVE-2024-5696)
* firefox: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 (CVE-2024-5700) 

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3955" id="RHSA-2024:3955" type="rhsa" title="RHSA-2024:3955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5688" id="CVE-2024-5688" type="cve" title="CVE-2024-5688"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5690" id="CVE-2024-5690" type="cve" title="CVE-2024-5690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5691" id="CVE-2024-5691" type="cve" title="CVE-2024-5691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5693" id="CVE-2024-5693" type="cve" title="CVE-2024-5693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5696" id="CVE-2024-5696" type="cve" title="CVE-2024-5696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5700" id="CVE-2024-5700" type="cve" title="CVE-2024-5700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5702" id="CVE-2024-5702" type="cve" title="CVE-2024-5702"/>
      <reference href="https://bugzilla.redhat.com/2291394" id="2291394" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291395" id="2291395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291396" id="2291396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291397" id="2291397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291399" id="2291399" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291400" id="2291400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291401" id="2291401" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3955.html" id="ALSA-2024:3955" type="self" title="ALSA-2024:3955"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="firefox-x11" version="115.12.0" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-115.12.0-1.el9_4.alma.1.src.rpm">
          <filename>firefox-x11-115.12.0-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">c221d213bcaa471a8707f36b92eb5eec8bf850a3a153d82a3e18dd3ed91ae422</sum>
        </package>
        <package name="firefox" version="115.12.0" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-115.12.0-1.el9_4.alma.1.src.rpm">
          <filename>firefox-115.12.0-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">cbcd855bccadb5c142ba22048254abc2497a114cc8b40c5c762c5cc974afa82b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3959</id>
    <title>Important: flatpak security update</title>
    <issued date="2024-06-17 00:00:00"/>
    <updated date="2024-06-19 09:13:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flatpak security update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

* flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3959" id="RHSA-2024:3959" type="rhsa" title="RHSA-2024:3959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32462" id="CVE-2024-32462" type="cve" title="CVE-2024-32462"/>
      <reference href="https://bugzilla.redhat.com/2275981" id="2275981" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3959.html" id="ALSA-2024:3959" type="self" title="ALSA-2024:3959"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="flatpak-selinux" version="1.12.9" release="1.el9_4" epoch="0" arch="noarch" src="flatpak-1.12.9-1.el9_4.src.rpm">
          <filename>flatpak-selinux-1.12.9-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">06dbdc42d81b1aa97d49382abf1808b9d53376bbb4a4a4027fea7bd61fee8ef3</sum>
        </package>
        <package name="flatpak-libs" version="1.12.9" release="1.el9_4" epoch="0" arch="s390x" src="flatpak-1.12.9-1.el9_4.src.rpm">
          <filename>flatpak-libs-1.12.9-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">5f4573e73dd8d2e1cc954eab817f487bdf29557b7be2590fac1dccf87c0fa2e5</sum>
        </package>
        <package name="flatpak" version="1.12.9" release="1.el9_4" epoch="0" arch="s390x" src="flatpak-1.12.9-1.el9_4.src.rpm">
          <filename>flatpak-1.12.9-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">d9651393547ddbb9f46c0dbde498dfdaae428175f948ff509a232b8ffcfb2f3c</sum>
        </package>
        <package name="flatpak-session-helper" version="1.12.9" release="1.el9_4" epoch="0" arch="s390x" src="flatpak-1.12.9-1.el9_4.src.rpm">
          <filename>flatpak-session-helper-1.12.9-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">de3e2d0bd1e8bf4984ce9998e6ce29215dceb68dc381e2d6673c1189747ad239</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3999</id>
    <title>Important: ghostscript security update</title>
    <issued date="2024-06-20 00:00:00"/>
    <updated date="2024-06-20 11:33:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: OPVP device arbitrary code execution via custom Driver library (CVE-2024-33871)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3999" id="RHSA-2024:3999" type="rhsa" title="RHSA-2024:3999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33871" id="CVE-2024-33871" type="cve" title="CVE-2024-33871"/>
      <reference href="https://bugzilla.redhat.com/2283508" id="2283508" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3999.html" id="ALSA-2024:3999" type="self" title="ALSA-2024:3999"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libgs" version="9.54.0" release="16.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-16.el9_4.src.rpm">
          <filename>libgs-9.54.0-16.el9_4.s390x.rpm</filename>
          <sum type="sha256">3ad43d049bf4e638613ff48b00a2e57bce91e92872a70ba170d4c8a833e63e00</sum>
        </package>
        <package name="ghostscript-x11" version="9.54.0" release="16.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-16.el9_4.src.rpm">
          <filename>ghostscript-x11-9.54.0-16.el9_4.s390x.rpm</filename>
          <sum type="sha256">402a6cc7849619a4345f92a5053477f252d90cf3b5d04e67abb63519018929fe</sum>
        </package>
        <package name="ghostscript" version="9.54.0" release="16.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-16.el9_4.src.rpm">
          <filename>ghostscript-9.54.0-16.el9_4.s390x.rpm</filename>
          <sum type="sha256">ab94df592773d33aeee1c02a86cad5ea3217044bb2d936fd68371ca8977a3cf0</sum>
        </package>
        <package name="ghostscript-doc" version="9.54.0" release="16.el9_4" epoch="0" arch="noarch" src="ghostscript-9.54.0-16.el9_4.src.rpm">
          <filename>ghostscript-doc-9.54.0-16.el9_4.noarch.rpm</filename>
          <sum type="sha256">b8e54a1a0e129bf71e2635e8d3b1905f49d2d8d1681c229a2c0615d591858cf8</sum>
        </package>
        <package name="ghostscript-tools-fonts" version="9.54.0" release="16.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-16.el9_4.src.rpm">
          <filename>ghostscript-tools-fonts-9.54.0-16.el9_4.s390x.rpm</filename>
          <sum type="sha256">c27bff1d343c15920c2f39752ff61f4c3940ccbfa39262cf1d470544e21678b2</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.54.0" release="16.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-16.el9_4.src.rpm">
          <filename>ghostscript-tools-printing-9.54.0-16.el9_4.s390x.rpm</filename>
          <sum type="sha256">d936821ada214627c363c18dc3be16ec96070e23bd26f41cf830b01c554dc3cd</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.54.0" release="16.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-16.el9_4.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.54.0-16.el9_4.s390x.rpm</filename>
          <sum type="sha256">de1212230da9ab7fcce26d92fc27034b2fdb65fbcd9c4c6d6be098596f1c17a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4002</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-06-20 00:00:00"/>
    <updated date="2024-06-20 13:53:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.12.1.

Security Fix(es):

* thunderbird: Use-after-free in networking (CVE-2024-5702)
* thunderbird: Use-after-free in JavaScript object transplant (CVE-2024-5688)
* thunderbird: External protocol handlers leaked by timing attack (CVE-2024-5690)
* thunderbird:  Sandboxed iframes were able to bypass sandbox restrictions to open a new window (CVE-2024-5691)
* thunderbird: Cross-Origin Image leak via Offscreen Canvas (CVE-2024-5693)
* thunderbird: Memory Corruption in Text Fragments (CVE-2024-5696)
* thunderbird: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 (CVE-2024-5700)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4002" id="RHSA-2024:4002" type="rhsa" title="RHSA-2024:4002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5688" id="CVE-2024-5688" type="cve" title="CVE-2024-5688"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5690" id="CVE-2024-5690" type="cve" title="CVE-2024-5690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5691" id="CVE-2024-5691" type="cve" title="CVE-2024-5691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5693" id="CVE-2024-5693" type="cve" title="CVE-2024-5693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5696" id="CVE-2024-5696" type="cve" title="CVE-2024-5696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5700" id="CVE-2024-5700" type="cve" title="CVE-2024-5700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5702" id="CVE-2024-5702" type="cve" title="CVE-2024-5702"/>
      <reference href="https://bugzilla.redhat.com/2291394" id="2291394" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291395" id="2291395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291396" id="2291396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291397" id="2291397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291399" id="2291399" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291400" id="2291400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291401" id="2291401" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4002.html" id="ALSA-2024:4002" type="self" title="ALSA-2024:4002"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="thunderbird" version="115.12.1" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="thunderbird-115.12.1-1.el9_4.alma.1.src.rpm">
          <filename>thunderbird-115.12.1-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">1d7c67a31884ec62ee83a84453e0dce5a353c25d11d0e083623600f92a90c142</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4050</id>
    <title>Moderate: libreswan security update</title>
    <issued date="2024-06-23 00:00:00"/>
    <updated date="2024-06-24 12:13:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreswan security update</summary>
    <description>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: IKEv1 default AH/ESP responder can crash and restart (CVE-2024-3652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4050" id="RHSA-2024:4050" type="rhsa" title="RHSA-2024:4050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3652" id="CVE-2024-3652" type="cve" title="CVE-2024-3652"/>
      <reference href="https://bugzilla.redhat.com/2274448" id="2274448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4050.html" id="ALSA-2024:4050" type="self" title="ALSA-2024:4050"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libreswan" version="4.12" release="2.el9_4.1" epoch="0" arch="s390x" src="libreswan-4.12-2.el9_4.1.src.rpm">
          <filename>libreswan-4.12-2.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">81d44fd0ab9f5b3b153b1fd061dc6f5217d335703ebc0def9dbd521ce4855e49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4077</id>
    <title>Important: python3.11 security update</title>
    <issued date="2024-06-25 00:00:00"/>
    <updated date="2024-06-25 13:57:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4077" id="RHSA-2024:4077" type="rhsa" title="RHSA-2024:4077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4077.html" id="ALSA-2024:4077" type="self" title="ALSA-2024:4077"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.11" version="3.11.7" release="1.el9_4.1" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.1.src.rpm">
          <filename>python3.11-3.11.7-1.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">0506b88132498adad6fe457f57a332c641b41b5a38b6ccc2064319867b4c82bc</sum>
        </package>
        <package name="python3.11-devel" version="3.11.7" release="1.el9_4.1" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.1.src.rpm">
          <filename>python3.11-devel-3.11.7-1.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">50f221a058a1d13312cabf406c4a2f28ef2ffb2730a03ad430012b93aafa83ed</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.7" release="1.el9_4.1" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.1.src.rpm">
          <filename>python3.11-tkinter-3.11.7-1.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">94f847a75c7adfc9ab009ff23a3a62b8a35d273718ae840903d5c73dfa367951</sum>
        </package>
        <package name="python3.11-libs" version="3.11.7" release="1.el9_4.1" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.1.src.rpm">
          <filename>python3.11-libs-3.11.7-1.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">b80d6ae361922193bea2bdab246a252b0ac053d6e280e34b76598d41e0a81e7c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4078</id>
    <title>Important: python3.9 security update</title>
    <issued date="2024-06-25 00:00:00"/>
    <updated date="2024-06-25 13:59:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4078" id="RHSA-2024:4078" type="rhsa" title="RHSA-2024:4078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4078.html" id="ALSA-2024:4078" type="self" title="ALSA-2024:4078"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3-devel" version="3.9.18" release="3.el9_4.1" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.1.src.rpm">
          <filename>python3-devel-3.9.18-3.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">11965f8a3feb9aae464a52b2bffb31e4f7cbcd5ecba8dda50f1dc1d2b6c785dd</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.18" release="3.el9_4.1" epoch="0" arch="noarch" src="python3.9-3.9.18-3.el9_4.1.src.rpm">
          <filename>python-unversioned-command-3.9.18-3.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">9a6e6fe85c1bf82d97516b4b79184dca8e7bfa773926061af401ec530726cca2</sum>
        </package>
        <package name="python3-tkinter" version="3.9.18" release="3.el9_4.1" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.1.src.rpm">
          <filename>python3-tkinter-3.9.18-3.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">cb01b198d75d57168557540eefd33e284adb1350b55b0e93a416c22d28bff663</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4083</id>
    <title>Important: git security update</title>
    <issued date="2024-06-25 00:00:00"/>
    <updated date="2024-06-25 14:01:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git security update</summary>
    <description>Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.

Security Fix(es):

* git: Recursive clones RCE (CVE-2024-32002)
* git: RCE while cloning local repos (CVE-2024-32004)
* git: additional local RCE (CVE-2024-32465)
* git: insecure hardlinks (CVE-2024-32020)
* git: symlink bypass (CVE-2024-32021)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4083" id="RHSA-2024:4083" type="rhsa" title="RHSA-2024:4083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32002" id="CVE-2024-32002" type="cve" title="CVE-2024-32002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32004" id="CVE-2024-32004" type="cve" title="CVE-2024-32004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32020" id="CVE-2024-32020" type="cve" title="CVE-2024-32020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32021" id="CVE-2024-32021" type="cve" title="CVE-2024-32021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32465" id="CVE-2024-32465" type="cve" title="CVE-2024-32465"/>
      <reference href="https://bugzilla.redhat.com/2280421" id="2280421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280428" id="2280428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280446" id="2280446" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280466" id="2280466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280484" id="2280484" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4083.html" id="ALSA-2024:4083" type="self" title="ALSA-2024:4083"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="perl-Git" version="2.43.5" release="1.el9_4" epoch="0" arch="noarch" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>perl-Git-2.43.5-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">1040a006be76c4ab6fd587de6b2fa2e1057bd491b4f06108f566b973f7ff606a</sum>
        </package>
        <package name="git-instaweb" version="2.43.5" release="1.el9_4" epoch="0" arch="noarch" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>git-instaweb-2.43.5-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">1f9e2bb9dc7ce2e5c6cb9fd782c5ba444ca18027e0797dcd0dcc16ec6a45b7a0</sum>
        </package>
        <package name="git-credential-libsecret" version="2.43.5" release="1.el9_4" epoch="0" arch="s390x" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>git-credential-libsecret-2.43.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">2b889a7e7a95dd32b3f418bb622907da94a9166461b9be18bf5fdeb39736bc61</sum>
        </package>
        <package name="git-email" version="2.43.5" release="1.el9_4" epoch="0" arch="noarch" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>git-email-2.43.5-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">32d0050fb7bc85092b757aaa20509941905d6b5ec6ef2f2a03a3637ef6395cce</sum>
        </package>
        <package name="git-svn" version="2.43.5" release="1.el9_4" epoch="0" arch="noarch" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>git-svn-2.43.5-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">3c041a3de73ac67dd10243e216a44ae32a67422bf16ecf9e868cd559e1edaeac</sum>
        </package>
        <package name="git-core" version="2.43.5" release="1.el9_4" epoch="0" arch="s390x" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>git-core-2.43.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">50da31825057a077d41a379dfd208e23b2f12472e4c5c35536ec2d070657d77d</sum>
        </package>
        <package name="git-core-doc" version="2.43.5" release="1.el9_4" epoch="0" arch="noarch" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>git-core-doc-2.43.5-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">6b0bc3f5051fd024621c98f25ea0044cea0719dac8157201a77f3428ce1fe3f3</sum>
        </package>
        <package name="perl-Git-SVN" version="2.43.5" release="1.el9_4" epoch="0" arch="noarch" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>perl-Git-SVN-2.43.5-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">6d13b9cadb4d3d0487071cca7ab6c7b21fb70d7f8fd059e85c90e906997eaa67</sum>
        </package>
        <package name="gitweb" version="2.43.5" release="1.el9_4" epoch="0" arch="noarch" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>gitweb-2.43.5-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">834cee01896b8d3c1ea3c6351f7f03f353216f4f065ba1c49a2b3751ee3ceab4</sum>
        </package>
        <package name="git-subtree" version="2.43.5" release="1.el9_4" epoch="0" arch="s390x" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>git-subtree-2.43.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">8e655c49dfe96df2e41e3d77c06899b4e4e11f7421b99db337d85676c1b87d12</sum>
        </package>
        <package name="git-gui" version="2.43.5" release="1.el9_4" epoch="0" arch="noarch" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>git-gui-2.43.5-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">a62589f893188de99786f204c82ed8ad898034c02c545ce9ce3859676b33de8c</sum>
        </package>
        <package name="git" version="2.43.5" release="1.el9_4" epoch="0" arch="s390x" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>git-2.43.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c96a3214372ac7ac3632ca03ffc7c2d8812a9dcffc2f907c642f796ae6e17d7a</sum>
        </package>
        <package name="git-all" version="2.43.5" release="1.el9_4" epoch="0" arch="noarch" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>git-all-2.43.5-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">cb02f0771e12424bdffaa9757eaf1efe1d904baef497b67a9975795806ada690</sum>
        </package>
        <package name="gitk" version="2.43.5" release="1.el9_4" epoch="0" arch="noarch" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>gitk-2.43.5-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">d072cfefaf0501cf3ef324a529aa0775bafe170547712c65b752d8b83b6d88ed</sum>
        </package>
        <package name="git-daemon" version="2.43.5" release="1.el9_4" epoch="0" arch="s390x" src="git-2.43.5-1.el9_4.src.rpm">
          <filename>git-daemon-2.43.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">f2036a6dc1bf82bb8b348050ff4145fcecc9e5c6500d9895639bcf635ae02c5b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4165</id>
    <title>Important: pki-core security update</title>
    <issued date="2024-06-27 00:00:00"/>
    <updated date="2024-06-27 20:01:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pki-core security update</summary>
    <description>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

* dogtag ca: token authentication bypass vulnerability (CVE-2023-4727)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4165" id="RHSA-2024:4165" type="rhsa" title="RHSA-2024:4165"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4727" id="CVE-2023-4727" type="cve" title="CVE-2023-4727"/>
      <reference href="https://bugzilla.redhat.com/2232218" id="2232218" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4165.html" id="ALSA-2024:4165" type="self" title="ALSA-2024:4165"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="idm-pki-est" version="11.5.0" release="2.el9_4.alma.1" epoch="0" arch="noarch" src="pki-core-11.5.0-2.el9_4.alma.1.src.rpm">
          <filename>idm-pki-est-11.5.0-2.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">1066184cb7ab11c16786d87d07aee621f77f99a40acbe01ff2936d4f74b65684</sum>
        </package>
        <package name="idm-pki-ca" version="11.5.0" release="2.el9_4.alma.1" epoch="0" arch="noarch" src="pki-core-11.5.0-2.el9_4.alma.1.src.rpm">
          <filename>idm-pki-ca-11.5.0-2.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">33727518f6f149863858eb0c0b76291ed3820887f2472706cf922c7f9d5c589f</sum>
        </package>
        <package name="python3-idm-pki" version="11.5.0" release="2.el9_4.alma.1" epoch="0" arch="noarch" src="pki-core-11.5.0-2.el9_4.alma.1.src.rpm">
          <filename>python3-idm-pki-11.5.0-2.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">415da43ff8c2f53b843ee61509626d5be70ec8910e1991ac91f827fcb34a6f8a</sum>
        </package>
        <package name="idm-pki-server" version="11.5.0" release="2.el9_4.alma.1" epoch="0" arch="noarch" src="pki-core-11.5.0-2.el9_4.alma.1.src.rpm">
          <filename>idm-pki-server-11.5.0-2.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">5f69eff8a1800df05aef1387487eda845003e398830e56bf7342eca40c7810cc</sum>
        </package>
        <package name="idm-pki-acme" version="11.5.0" release="2.el9_4.alma.1" epoch="0" arch="noarch" src="pki-core-11.5.0-2.el9_4.alma.1.src.rpm">
          <filename>idm-pki-acme-11.5.0-2.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">7c7e9e9eeee54e3974d92a8231a87e73ae65447ef192e79b85f8bb641e2c5cd7</sum>
        </package>
        <package name="idm-pki-kra" version="11.5.0" release="2.el9_4.alma.1" epoch="0" arch="noarch" src="pki-core-11.5.0-2.el9_4.alma.1.src.rpm">
          <filename>idm-pki-kra-11.5.0-2.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">9ee0c6262063e920a116bc74b3bb40a507ebc0160ef441536415189339f9e254</sum>
        </package>
        <package name="idm-pki-base" version="11.5.0" release="2.el9_4.alma.1" epoch="0" arch="noarch" src="pki-core-11.5.0-2.el9_4.alma.1.src.rpm">
          <filename>idm-pki-base-11.5.0-2.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">ad4f7b9fc5c178d5b523d7a132583ece79e6403a95495123953bccf7a8246117</sum>
        </package>
        <package name="idm-pki-java" version="11.5.0" release="2.el9_4.alma.1" epoch="0" arch="noarch" src="pki-core-11.5.0-2.el9_4.alma.1.src.rpm">
          <filename>idm-pki-java-11.5.0-2.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">ae64b42d15d1c104a579912fd032a3e5c7e80bb67d33d5762bff138a7a26ff5b</sum>
        </package>
        <package name="idm-pki-tools" version="11.5.0" release="2.el9_4.alma.1" epoch="0" arch="s390x" src="pki-core-11.5.0-2.el9_4.alma.1.src.rpm">
          <filename>idm-pki-tools-11.5.0-2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">fb9c2c5e4d2082c44cf84c76562718bfbf57802b9e12de516892ef7703f77b3d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4212</id>
    <title>Moderate: golang security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-02 21:23:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.

Security Fix(es):

* golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
* golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4212" id="RHSA-2024:4212" type="rhsa" title="RHSA-2024:4212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24789" id="CVE-2024-24789" type="cve" title="CVE-2024-24789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24790" id="CVE-2024-24790" type="cve" title="CVE-2024-24790"/>
      <reference href="https://bugzilla.redhat.com/2292668" id="2292668" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292787" id="2292787" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4212.html" id="ALSA-2024:4212" type="self" title="ALSA-2024:4212"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="golang-src" version="1.21.11" release="1.el9_4" epoch="0" arch="noarch" src="golang-1.21.11-1.el9_4.src.rpm">
          <filename>golang-src-1.21.11-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">1dc8fe926a6e996a9389af8437654ea05c3fabfd6b1c1ea77b686e1ac6929d4b</sum>
        </package>
        <package name="go-toolset" version="1.21.11" release="1.el9_4" epoch="0" arch="s390x" src="golang-1.21.11-1.el9_4.src.rpm">
          <filename>go-toolset-1.21.11-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">22d3189212c5db92e56d18200f9429e64097c377b21e7541de8525cb600a2134</sum>
        </package>
        <package name="golang-docs" version="1.21.11" release="1.el9_4" epoch="0" arch="noarch" src="golang-1.21.11-1.el9_4.src.rpm">
          <filename>golang-docs-1.21.11-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">30626121b356e804d0a886f80b2ef247ba16cc13500f3f03cf97223e5851dca3</sum>
        </package>
        <package name="golang-tests" version="1.21.11" release="1.el9_4" epoch="0" arch="noarch" src="golang-1.21.11-1.el9_4.src.rpm">
          <filename>golang-tests-1.21.11-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">429a278d9e9a73f16399e6c19b78677cf6273b69886bd7c4cb73a9d7dc35a3f8</sum>
        </package>
        <package name="golang-misc" version="1.21.11" release="1.el9_4" epoch="0" arch="noarch" src="golang-1.21.11-1.el9_4.src.rpm">
          <filename>golang-misc-1.21.11-1.el9_4.noarch.rpm</filename>
          <sum type="sha256">497a732a5881c550134eec767645fb08778b65dd891c720dca5b5fb8245d8cc6</sum>
        </package>
        <package name="golang-bin" version="1.21.11" release="1.el9_4" epoch="0" arch="s390x" src="golang-1.21.11-1.el9_4.src.rpm">
          <filename>golang-bin-1.21.11-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c9b72a58a83e68e5aa4b653906b93fdf572fb701aca3381f7085f861d044fabe</sum>
        </package>
        <package name="golang" version="1.21.11" release="1.el9_4" epoch="0" arch="s390x" src="golang-1.21.11-1.el9_4.src.rpm">
          <filename>golang-1.21.11-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">de0d3d59a67fd404ac2b7838b422ef67920e87b7d49f4cd709c0ae6918cc1cb9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4278</id>
    <title>Important: qemu-kvm security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 14:13:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>qemu-kvm security update</summary>
    <description>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

* qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write (CVE-2024-4467)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4278" id="RHSA-2024:4278" type="rhsa" title="RHSA-2024:4278"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4467" id="CVE-2024-4467" type="cve" title="CVE-2024-4467"/>
      <reference href="https://bugzilla.redhat.com/2278875" id="2278875" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4278.html" id="ALSA-2024:4278" type="self" title="ALSA-2024:4278"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="qemu-kvm" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-kvm-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">04766040b1b5ac1e393d1d9248ec513fc81c32724e81ff76f9000ab0ca0a3bb4</sum>
        </package>
        <package name="qemu-kvm-device-usb-host" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-kvm-device-usb-host-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">10deadf13726973dc9561fa944a36e526d3b441b8642bdb1aab081c891db9362</sum>
        </package>
        <package name="qemu-kvm-block-blkio" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-kvm-block-blkio-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">11c0636b8be1e1d5bf2084e1898c48a609b751933de65177b3d3eac360fd4621</sum>
        </package>
        <package name="qemu-img" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-img-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">2497787a68f1004c02e80f10aea64ccca408ff5ca1dcbd3a3554456fe5306e86</sum>
        </package>
        <package name="qemu-kvm-tools" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-kvm-tools-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">41fb1d2fc110105255780f1a2def53cf959e7bb101cc6b0a7611bfaa705d4e13</sum>
        </package>
        <package name="qemu-guest-agent" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-guest-agent-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">43de6dc3bf2294b1a6c7d8082e65663d65ae6f59c950cafb1a68e57f411f374b</sum>
        </package>
        <package name="qemu-pr-helper" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-pr-helper-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">4482d0176e23f37c08d4d6f9d8c3a997094a6dcdd5fc412aa8502e8c771aef29</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-kvm-block-curl-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">4b0e84e7df1ffd7601a876f50bd96ff86d400d7617b6113a50f123b3daedb15c</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">68cde7dc505daa6d320b7c1bbfde329b9c819178f2cc54274b8d3ccf91f29330</sum>
        </package>
        <package name="qemu-kvm-common" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-kvm-common-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">6f599bce4df8be833490749168b2b48b93ce8500dd8763a2f21f7cbff69bf03e</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu-ccw" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-ccw-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">8007a497119935288f29a8a15d92443e0731fba7d69e257a110a9096b7ba167b</sum>
        </package>
        <package name="qemu-kvm-core" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-kvm-core-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">829217b3acab5603780d8403b6e898866d8b8da97265101f8bccf85ca74dce9c</sum>
        </package>
        <package name="qemu-kvm-audio-pa" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-kvm-audio-pa-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">b78e58619bf41ceefa871bd18d4dfcd52c583bb2143fe0901d8c1da79d4f40b0</sum>
        </package>
        <package name="qemu-kvm-docs" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-kvm-docs-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">c18908eef92ede85136786a4016292414a93a5461fdab04e40b32aeb6e47c694</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="8.2.0" release="11.el9_4.4" epoch="17" arch="s390x" src="qemu-kvm-8.2.0-11.el9_4.4.src.rpm">
          <filename>qemu-kvm-block-rbd-8.2.0-11.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">c6be02d4ca6810a0d1e2cf6f046c0608894845e6769724eb2b43b9f7ebb497b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4312</id>
    <title>Important: openssh security update</title>
    <issued date="2024-07-03 00:00:00"/>
    <updated date="2024-07-04 06:32:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: Possible remote code execution due to a race condition in signal handling (CVE-2024-6387)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4312" id="RHSA-2024:4312" type="rhsa" title="RHSA-2024:4312"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6387" id="CVE-2024-6387" type="cve" title="CVE-2024-6387"/>
      <reference href="https://bugzilla.redhat.com/2294604" id="2294604" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4312.html" id="ALSA-2024:4312" type="self" title="ALSA-2024:4312"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="pam_ssh_agent_auth" version="0.10.4" release="5.38.el9_4.1" epoch="0" arch="s390x" src="openssh-8.7p1-38.el9_4.1.src.rpm">
          <filename>pam_ssh_agent_auth-0.10.4-5.38.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">58cac824c16d93fb1fe32a2b0ab18d8df0f91ed1158f67473616bb664485f991</sum>
        </package>
        <package name="openssh-askpass" version="8.7p1" release="38.el9_4.1" epoch="0" arch="s390x" src="openssh-8.7p1-38.el9_4.1.src.rpm">
          <filename>openssh-askpass-8.7p1-38.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">a4a6a5f7dfc5fdf8c97b74aaaf3c59bc0facb33370022c1475f69fa0cd3194d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4349</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-11-03 22:17:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (CVE-2023-52626)
  * kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset (CVE-2024-26801)
  * kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974)
  * kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393)
  * kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
  * kernel: smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870)
  * kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960)
  * kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly (CVE-2021-47400)


Bug Fix(es):  

  * cifs - kernel panic with cifs_put_smb_ses (JIRA:AlmaLinux-28943)
  * BUG: unable to handle page fault for address: ff16bf752f593ff8 [almalinux-9.4.z] (JIRA:AlmaLinux-35672)
  * [HPE 9.4 Bug] Request merge of AMD address translation library patch series [almalinux-9.4.z] (JIRA:AlmaLinux-36220)
  * [AlmaLinux9] kernel BUG at lib/list_debug.c:51! [almalinux-9.4.z] (JIRA:AlmaLinux-36687)
  * ice: DPLL-related fixes [almalinux-9.4.z] (JIRA:AlmaLinux-36716)
  * CNB95: net/sched: update TC core to upstream v6.8 [almalinux-9.4.z] (JIRA:AlmaLinux-37641)
  * IPv6: SR: backport fixes from upstream [almalinux-9.4.z] (JIRA:AlmaLinux-37669)
  * [RFE] Backport tmpfs noswap mount option [almalinux-9.4.z] (JIRA:AlmaLinux-38252)
  * Isolated cores causing issues on latest AlmaLinux9.4 kernel and not functioning as desired. [almalinux-9.4.z] (JIRA:AlmaLinux-38595)
  * [ice] Add automatic VF reset on Tx MDD events [almalinux-9.4.z] (JIRA:AlmaLinux-39083)
  * [HPEMC AlmaLinux 9.4 REGRESSION] turbostat: turbostat broken on 10+ sockets. [almalinux-9.4.z] (JIRA:AlmaLinux-34953)
  * bnx2x: fix crashes in PCI error handling, resource leaks [almalinux-9.4.z] (JIRA:AlmaLinux-43272)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4349" id="RHSA-2024:4349" type="rhsa" title="RHSA-2024:4349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47400" id="CVE-2021-47400" type="cve" title="CVE-2021-47400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52626" id="CVE-2023-52626" type="cve" title="CVE-2023-52626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52667" id="CVE-2023-52667" type="cve" title="CVE-2023-52667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26801" id="CVE-2024-26801" type="cve" title="CVE-2024-26801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26974" id="CVE-2024-26974" type="cve" title="CVE-2024-26974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27393" id="CVE-2024-27393" type="cve" title="CVE-2024-27393"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35870" id="CVE-2024-35870" type="cve" title="CVE-2024-35870"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35960" id="CVE-2024-35960" type="cve" title="CVE-2024-35960"/>
      <reference href="https://bugzilla.redhat.com/2271680" id="2271680" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273429" id="2273429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278354" id="2278354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280745" id="2280745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281350" id="2281350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281740" id="2281740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281920" id="2281920" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282336" id="2282336" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4349.html" id="ALSA-2024:4349" type="self" title="ALSA-2024:4349"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="perf" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>perf-5.14.0-427.24.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">0d8b1b0c4b506f15d1ee9dde156c0fde8a280df843b71c75e0f8e55421dc7191</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-devel-matched-5.14.0-427.24.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">2958fdd573f51c8dc41843f3810cc9abf5db8f480c5025cff1ea1a866ff12487</sum>
        </package>
        <package name="rv" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>rv-5.14.0-427.24.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">3c8bc644131b4ca0f32bd08a7b7f4b3885de9ced96220d3ffdf696c3df69a7a9</sum>
        </package>
        <package name="rtla" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>rtla-5.14.0-427.24.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">6358d1b8f922a82c5a4da902bb7bc8141bc674ff3f6c08ae72ecb59dac336c78</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-devel-5.14.0-427.24.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">6978e69b696354ecc6fe4eec20601e50fd15b1c101bab8fc8934d570026e1766</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-427.24.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">8146d49a4572840e405ef17b49a85ce0504561b896785ff9b4cc2d32349b34a7</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-427.24.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">9686322e7616a5142156d76bcdf316673c474a0ba5cbbf5738c1bcfed7b2937f</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-headers-5.14.0-427.24.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c95e905e7d8e13808b70d526a48cb31c4ac945fb47c4c43dcfdf43618b2aef62</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-doc-5.14.0-427.24.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">ccc8b24794ad81b3ecaa94f5f3f996e6d38c86928c1aff1394fff26ff7283d34</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-5.14.0-427.24.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">e9343b08ff4d3c5229c3e6b0c3cee6d39d0453f3f45d4df2a490c4df45b3c30f</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-427.24.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">fa8bcb590d7da41e1318ef195c85e2e7a5abd9feace027268730bd34982fff79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4371</id>
    <title>Important: buildah security update</title>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-07-09 12:31:42"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. 

Security Fix(es):

* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4371" id="RHSA-2024:4371" type="rhsa" title="RHSA-2024:4371"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4371.html" id="ALSA-2024:4371" type="self" title="ALSA-2024:4371"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="buildah" version="1.33.7" release="3.el9_4" epoch="2" arch="s390x" src="buildah-1.33.7-3.el9_4.src.rpm">
          <filename>buildah-1.33.7-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">200090b64a324e265f8b60f81b72247afec110682c9dcbb92f1dbd8863581734</sum>
        </package>
        <package name="buildah-tests" version="1.33.7" release="3.el9_4" epoch="2" arch="s390x" src="buildah-1.33.7-3.el9_4.src.rpm">
          <filename>buildah-tests-1.33.7-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">4d3f674af728549a1dc8dc80c0904d5f3f8e5e6580bfa18405baaa2487ba36d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4378</id>
    <title>Important: podman security update</title>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-07-09 12:30:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4378" id="RHSA-2024:4378" type="rhsa" title="RHSA-2024:4378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4378.html" id="ALSA-2024:4378" type="self" title="ALSA-2024:4378"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="podman" version="4.9.4" release="5.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-5.el9_4.src.rpm">
          <filename>podman-4.9.4-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">1a36cde0664ea80451ccfdc05bb5115d99c4caddeb14c1a1dd950e6e69bce45f</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="5.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-5.el9_4.src.rpm">
          <filename>podman-plugins-4.9.4-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">b5bcfed48051ec5607ceeebd86c08cf980672e45c74c7324354e07659f5b1d7f</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="5.el9_4" epoch="4" arch="noarch" src="podman-4.9.4-5.el9_4.src.rpm">
          <filename>podman-docker-4.9.4-5.el9_4.noarch.rpm</filename>
          <sum type="sha256">bd559588942879b0c05b245986b0e042e349a97be5ec839cafdfada3f5975d70</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="5.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-5.el9_4.src.rpm">
          <filename>podman-remote-4.9.4-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">ce1d5bb79141effba6b34a23455cf73029e82b10ed0bc1ac8c438306742c3113</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="5.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-5.el9_4.src.rpm">
          <filename>podman-tests-4.9.4-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">f66eacfe51a8629e3fbad01584221075a2fe65521b3129bfa16d36e7224ee2ab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4379</id>
    <title>Important: gvisor-tap-vsock security update</title>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-07-09 12:27:51"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gvisor-tap-vsock security update</summary>
    <description>A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding.

Security Fix(es):

* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4379" id="RHSA-2024:4379" type="rhsa" title="RHSA-2024:4379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4379.html" id="ALSA-2024:4379" type="self" title="ALSA-2024:4379"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="gvisor-tap-vsock" version="0.7.3" release="4.el9_4.alma.1" epoch="6" arch="s390x" src="gvisor-tap-vsock-0.7.3-4.el9_4.alma.1.src.rpm">
          <filename>gvisor-tap-vsock-0.7.3-4.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">6b51e36fd71d31dd656c727ea2825c73fa4431906363adc00509395e2aa269a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4422</id>
    <title>Moderate: fence-agents security update</title>
    <issued date="2024-07-09 00:00:00"/>
    <updated date="2024-07-10 13:08:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. 

Security Fix(es):

* urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4422" id="RHSA-2024:4422" type="rhsa" title="RHSA-2024:4422"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37891" id="CVE-2024-37891" type="cve" title="CVE-2024-37891"/>
      <reference href="https://bugzilla.redhat.com/2292788" id="2292788" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4422.html" id="ALSA-2024:4422" type="self" title="ALSA-2024:4422"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="fence-agents-virsh" version="4.10.0" release="62.el9_4.4.alma.1" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9_4.4.alma.1.src.rpm">
          <filename>fence-agents-virsh-4.10.0-62.el9_4.4.alma.1.noarch.rpm</filename>
          <sum type="sha256">065b47140db0c6b670d6296398f699378ee6d552bf5ee62acbecf45acda1b5d8</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.10.0" release="62.el9_4.4.alma.1" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9_4.4.alma.1.src.rpm">
          <filename>fence-agents-ibm-vpc-4.10.0-62.el9_4.4.alma.1.noarch.rpm</filename>
          <sum type="sha256">ba7789db5bc847807bb947e184652a667c987fcfbf2b708600008ce09dd1d1f9</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.10.0" release="62.el9_4.4.alma.1" epoch="0" arch="s390x" src="fence-agents-4.10.0-62.el9_4.4.alma.1.src.rpm">
          <filename>fence-agents-kubevirt-4.10.0-62.el9_4.4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d9c7fc47bfae4beb0b375bd1400ec58a1416a5a1cf30e113d08a2becc2092abc</sum>
        </package>
        <package name="fence-agents-ibm-powervs" version="4.10.0" release="62.el9_4.4.alma.1" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9_4.4.alma.1.src.rpm">
          <filename>fence-agents-ibm-powervs-4.10.0-62.el9_4.4.alma.1.noarch.rpm</filename>
          <sum type="sha256">e375fa35013dd9c16ff5ab185772111f0f9448825233eae247e25e4528952305</sum>
        </package>
        <package name="fence-agents-common" version="4.10.0" release="62.el9_4.4.alma.1" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9_4.4.alma.1.src.rpm">
          <filename>fence-agents-common-4.10.0-62.el9_4.4.alma.1.noarch.rpm</filename>
          <sum type="sha256">e88901f7ef2b32a7cb8313f4901ab8359034ebcbe0cd7b99d77002330b4010be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4439</id>
    <title>Moderate: dotnet6.0 security update</title>
    <issued date="2024-07-09 00:00:00"/>
    <updated date="2024-07-10 09:03:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.132 and Runtime 6.0.32.

Security Fix(es):

* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4439" id="RHSA-2024:4439" type="rhsa" title="RHSA-2024:4439"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095"/>
      <reference href="https://bugzilla.redhat.com/2295323" id="2295323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4439.html" id="ALSA-2024:4439" type="self" title="ALSA-2024:4439"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="dotnet-templates-6.0" version="6.0.132" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el9_4.src.rpm">
          <filename>dotnet-templates-6.0-6.0.132-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">04490739ab79ed744ab365ebcc74b1ce8519b2d34ee84e30e2267ef0be8c0e85</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.32" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el9_4.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.32-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">068faf142cb4cb4b3cba93daa1bea2ec45d6bffdfa7c5f3420afc449d257eb95</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.32" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el9_4.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.32-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">431a8cca9547eda5ae10e37b9427e71cbb05d24122c99c10533b525617e118a3</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.32" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el9_4.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.32-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">65101c75788e672645e75919403ea52b320d7c90698b9c76bcfc574c9c3bbeb9</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.132" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el9_4.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.132-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">6a79d23433815d1d630cc03c8cb343ba25f6d7af979aefcf55b106d619c0616a</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.32" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el9_4.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.32-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">8b4b722607c1370da42ae58befbedf72fe71d55e5d563d23f62294ed52ba7ace</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.32" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el9_4.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.32-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">b08f909309da0f6fe96ab9727c9cc37218d3234aa99adf1a4d815eed84667cd6</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.32" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el9_4.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.32-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">de73e80b1664e869e151d21efbf510df9741155fc9cfcccd12c70207377b57c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4450</id>
    <title>Important: dotnet8.0 security update</title>
    <issued date="2024-07-10 00:00:00"/>
    <updated date="2024-07-11 08:47:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.107 and Runtime 8.0.7.

Security Fix(es):

* dotnet: DoS in System.Text.Json (CVE-2024-30105)
* dotnet: DoS in ASP.NET Core 8 (CVE-2024-35264)
* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4450" id="RHSA-2024:4450" type="rhsa" title="RHSA-2024:4450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30105" id="CVE-2024-30105" type="cve" title="CVE-2024-30105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35264" id="CVE-2024-35264" type="cve" title="CVE-2024-35264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095"/>
      <reference href="https://bugzilla.redhat.com/2295320" id="2295320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295321" id="2295321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295323" id="2295323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4450.html" id="ALSA-2024:4450" type="self" title="ALSA-2024:4450"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="aspnetcore-runtime-8.0" version="8.0.7" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.7-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">0504c1f0a99d18a09f315d2429cc57881b93b8713b11b167d555038d2bbab6b4</sum>
        </package>
        <package name="dotnet-host" version="8.0.7" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>dotnet-host-8.0.7-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">118ec31d56d50b2946b0c09d7bf46efa9ebaa15563db8f5775bfcf1f0fd152f4</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="8.0.107" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.107-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">272578bb575dffa157da384187c763955a75de24276ea9e17a17c9a0a3f9df63</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.7" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.7-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">58e974e03b4092ae85440d6e9e1baaec23134b96f214f497484894ef148e1178</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.107" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.107-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">9248f6157446a205a989504f3b1463ab0573c153e1b3c2f76d7c16bd92a770d1</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.107" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>dotnet-templates-8.0-8.0.107-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">924b98c92d4711382779557166a8f455a6301b745f5f7447274e5131f1b0ab43</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.7" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.7-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">97e602ac18181acf39e531435706b7b207b7bc5a3731ecdc1d74fbc75de38763</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.107" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.107-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">b31344d597f0d900ab8781136ec78660bed5864f7834cc0881a2b3736094ec03</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.7" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.7-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">bf510b70bd6669461111553ac3593b12c151c3f962840084f9df6ecb820036b6</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.7" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.7-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c72ef448f5ce55cf7cbc03eb1556c9a852eb68b395789d198e610b2123788fcd</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.7" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.7-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">cd41a1cd5701f4e16019db48d8bd25a5510e976deea0c8d28ad436511d58fd82</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.7" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.7-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">cdf3c8400cdc6f9bacf1851e747e49b574064993bf0b3420e2ce926e8469d912</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.7" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.7-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">fce911392c8e589fea29e9f855c24a75e89a1bfe1ec6ace01cb0b70b5251c06b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4457</id>
    <title>Moderate: openssh security update</title>
    <issued date="2024-07-10 00:00:00"/>
    <updated date="2024-07-17 14:49:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: Possible remote code execution due to a race condition in signal handling affecting AlmaLinux(CVE-2024-6409)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4457" id="RHSA-2024:4457" type="rhsa" title="RHSA-2024:4457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6409" id="CVE-2024-6409" type="cve" title="CVE-2024-6409"/>
      <reference href="https://bugzilla.redhat.com/2295085" id="2295085" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4457.html" id="ALSA-2024:4457" type="self" title="ALSA-2024:4457"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="openssh-askpass" version="8.7p1" release="38.el9_4.4" epoch="0" arch="s390x" src="openssh-8.7p1-38.el9_4.4.src.rpm">
          <filename>openssh-askpass-8.7p1-38.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">05b2a9741568f9e8135a66474bf6914e8e4797a35bbc167bcf37f515a6914842</sum>
        </package>
        <package name="pam_ssh_agent_auth" version="0.10.4" release="5.38.el9_4.4" epoch="0" arch="s390x" src="openssh-8.7p1-38.el9_4.4.src.rpm">
          <filename>pam_ssh_agent_auth-0.10.4-5.38.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">8ecdd0dd00a3058da0ef9c9d2e28c820f58959121d958fe0879b76d0db47eb51</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4500</id>
    <title>Important: firefox security update</title>
    <issued date="2024-07-11 00:00:00"/>
    <updated date="2024-07-17 14:45:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13 (CVE-2024-6604)
* Mozilla: Race condition in permission assignment (CVE-2024-6601)
* Mozilla: Memory corruption in thread creation (CVE-2024-6603)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4500" id="RHSA-2024:4500" type="rhsa" title="RHSA-2024:4500"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6601" id="CVE-2024-6601" type="cve" title="CVE-2024-6601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6603" id="CVE-2024-6603" type="cve" title="CVE-2024-6603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6604" id="CVE-2024-6604" type="cve" title="CVE-2024-6604"/>
      <reference href="https://bugzilla.redhat.com/2296636" id="2296636" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296638" id="2296638" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296639" id="2296639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4500.html" id="ALSA-2024:4500" type="self" title="ALSA-2024:4500"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="firefox" version="115.13.0" release="3.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-115.13.0-3.el9_4.alma.1.src.rpm">
          <filename>firefox-115.13.0-3.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">91ca525ba1ceb7dd9a5a989efe818e22fe63f35efee113e374b4600a4f4b4938</sum>
        </package>
        <package name="firefox-x11" version="115.13.0" release="3.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-115.13.0-3.el9_4.alma.1.src.rpm">
          <filename>firefox-x11-115.13.0-3.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d7521805eb0fcc9a07668f661954b60a0c9bb82a23bb64a51ba8c68ff284c5e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4502</id>
    <title>Important: skopeo security update</title>
    <issued date="2024-07-15 00:00:00"/>
    <updated date="2024-07-17 14:43:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>skopeo security update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. 

Security Fix(es):

* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4502" id="RHSA-2024:4502" type="rhsa" title="RHSA-2024:4502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4502.html" id="ALSA-2024:4502" type="self" title="ALSA-2024:4502"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="skopeo" version="1.14.3" release="3.el9_4" epoch="2" arch="s390x" src="skopeo-1.14.3-3.el9_4.src.rpm">
          <filename>skopeo-1.14.3-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">3d0ddb6e3d5c15a7714c42335a9a1252cbcca39632fae45d692ad36d604388d9</sum>
        </package>
        <package name="skopeo-tests" version="1.14.3" release="3.el9_4" epoch="2" arch="s390x" src="skopeo-1.14.3-3.el9_4.src.rpm">
          <filename>skopeo-tests-1.14.3-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">538003afd922e49a01f080d73e8493c2661500d535d2a7f06a7931394d0c1956</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4563</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-26 15:12:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4563" id="RHSA-2024:4563" type="rhsa" title="RHSA-2024:4563"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21144" id="CVE-2024-21144" type="cve" title="CVE-2024-21144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297964" id="2297964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4563.html" id="ALSA-2024:4563" type="self" title="ALSA-2024:4563"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.422.b05-2.el9.s390x.rpm</filename>
          <sum type="sha256">129be5eadf0581e1205016006ee48e55138b7e1bfbe181566d6711cabd073eea</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.422.b05-2.el9.s390x.rpm</filename>
          <sum type="sha256">628f63a6cd726ebcd540416dcbdb41cc39e1d3d674a338bda8c91702cf687b36</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.422.b05-2.el9.s390x.rpm</filename>
          <sum type="sha256">62f04890bdf735380aff046bdcccc9b329182c1699074aa59373b840ec0198c1</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.422.b05-2.el9.s390x.rpm</filename>
          <sum type="sha256">6677ee60fe8aff8ee57cf9cb100850c8228c54956ba48dfee928f1072949c8b7</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.422.b05-2.el9.noarch.rpm</filename>
          <sum type="sha256">8649a75965b7e20d3dcacb5dccc208506bd9e11401671023bfa8d02dd21314f6</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.422.b05-2.el9.s390x.rpm</filename>
          <sum type="sha256">9b210af349b56cb0a1633b3ccc0ae4692f05e99b5ba4e6761099e8bea8073635</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.422.b05" release="2.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.422.b05-2.el9.noarch.rpm</filename>
          <sum type="sha256">ecf55c1f2df39692caf84f33dd4fad0c0b30f4454881f6dfb0afa9dd2f98ebbc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4567</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2024-07-16 00:00:00"/>
    <updated date="2024-07-26 15:21:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4567" id="RHSA-2024:4567" type="rhsa" title="RHSA-2024:4567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21144" id="CVE-2024-21144" type="cve" title="CVE-2024-21144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297964" id="2297964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4567.html" id="ALSA-2024:4567" type="self" title="ALSA-2024:4567"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="java-11-openjdk-static-libs" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">14e8e9d98d62eda7ff3ef816647359b1661792d6b2605aa37b2b8688b95277b5</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">1f81805bd307ca409fab50a4f573a909ff448aeb5912875b5c50bdaead3c83d3</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">39fb7b2523130186e5f6c0b42b06faf5796963b5142ed4b31f767cc0fbaa3c37</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-src-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">4d26ea38e7a81e5b4fe334d68a2c989c4112097118ff2f31098a0b7453fe4bff</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">596d7b98cb9a33e473aed9734fa693e8d739fafe0597fe5ece4f1390e72c0598</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">60c840bbdf997ee1bb0bfacdf42425e9e7db2bcf4f55cf75edec225fb67e560e</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">6861a10933f4f9a5699cd22a20d053d4282bb66ac53727721c2f437c0eefba1c</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">8a55e30c1cff57d9c91c21a30d5ee74b83fe2a30698b11a1995ff1b0ccb85550</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">f48b4d2da42cb603336a27f9920c4d9afca0b8de482ec0febf71b063f5008d48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4568</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 14:12:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4568" id="RHSA-2024:4568" type="rhsa" title="RHSA-2024:4568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4568.html" id="ALSA-2024:4568" type="self" title="ALSA-2024:4568"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="java-17-openjdk" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">0bec120c5010dcf23ac9f0b25764dc953493cd9275e2ffce3106412f4b022bec</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">5f958cd66290e5621b82add8242f91d45dd3b03fc3f71f872a928ce561304d85</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">693c1ec3f6cae8689aae58016236944a71a9c6fb9a883727223261e93f5c395c</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">6a953cac5a21c2f66b93a81fd763ec91afa30c255c977ba340af17e2f67d27c0</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">73a450f850cde1e880bfee5dc56a57dcf8fa8dce6e466b306010a25813e51717</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">8f57e80bff59dcc5f9fa7a1ea31b2a6e599a6141a194b51a4effd2370ea190ec</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">e6bd62a906cf010e7d9b1ee233e89e46481d750b77ec80920b0d56af3e4ca1c5</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">f7321ee1e7646e13fa2006ae897528df31294fc516e2ee548dd780241c895694</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-src-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">ff805b13c62b874ca5a18660f715aeaf0efba435026e6b9073c14b35e2138c39</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4573</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 14:20:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4573" id="RHSA-2024:4573" type="rhsa" title="RHSA-2024:4573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4573.html" id="ALSA-2024:4573" type="self" title="ALSA-2024:4573"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="java-21-openjdk-jmods" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">0a2e950d0e375520e13559bc1fd9c541397955a646f2d8179d80cccff9551421</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">2a3f4158af951b978e358b2a1953e674faeea467b23a7ab9c20fd368dbc591e1</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">34b9efbfda254bc6a0c16e5ede0bd4ef476b6c15268e89c3d161e400e9577b21</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">5a50189453a1ca7f52aa2db26a946fee42ba6b718fca59027c54d7b8153e20a9</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">70f26bc9f776cbc1fb3e1cc706fcb8d80cee92285ae88b1f1f99c0d1e8afc06e</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">89dbac2e310d46d65ca3feb1533e3c8093f0f19ee08b1c05d94ba5ec175aa627</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a73d95b06a58b9fade722970dcde5cd1d2dd53126b60c09a49aabf54ced18ca1</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a8ce30fbd85315722b0d1b949c733381dc3c82b6530eb8303ee527eea2084d23</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">acb452dbf36ca4cd1abf99b7df86a221936034f8d875b79a2bf3bbd99f29bc68</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4583</id>
    <title>Important: kernel security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-11-03 22:20:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
  * kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (CVE-2021-47548)
  * kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (CVE-2021-47596)
  * kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
  * kernel: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (CVE-2023-52638)
  * kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (CVE-2024-26783)
  * kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (CVE-2024-26858)
  * kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)
  * kernel: nvme: fix reconnection fail due to reserved tag allocation (CVE-2024-27435)
  * kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958)
  * kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (CVE-2024-36904)
  * kernel: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (CVE-2024-38543)
  * kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586)
  * kernel: net: micrel: Fix receiving the timestamp in the frame for lan8841 (CVE-2024-38593)
  * kernel: netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270)
  * kernel: octeontx2-af: avoid off-by-one read from userspace (CVE-2024-36957)
  * kernel: blk-cgroup: fix list corruption from resetting io stat (CVE-2024-38663)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4583" id="RHSA-2024:4583" type="rhsa" title="RHSA-2024:4583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47548" id="CVE-2021-47548" type="cve" title="CVE-2021-47548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47596" id="CVE-2021-47596" type="cve" title="CVE-2021-47596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48627" id="CVE-2022-48627" type="cve" title="CVE-2022-48627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52638" id="CVE-2023-52638" type="cve" title="CVE-2023-52638"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26783" id="CVE-2024-26783" type="cve" title="CVE-2024-26783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26858" id="CVE-2024-26858" type="cve" title="CVE-2024-26858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27397" id="CVE-2024-27397" type="cve" title="CVE-2024-27397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27435" id="CVE-2024-27435" type="cve" title="CVE-2024-27435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35958" id="CVE-2024-35958" type="cve" title="CVE-2024-35958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36270" id="CVE-2024-36270" type="cve" title="CVE-2024-36270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36886" id="CVE-2024-36886" type="cve" title="CVE-2024-36886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36904" id="CVE-2024-36904" type="cve" title="CVE-2024-36904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36957" id="CVE-2024-36957" type="cve" title="CVE-2024-36957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38543" id="CVE-2024-38543" type="cve" title="CVE-2024-38543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38586" id="CVE-2024-38586" type="cve" title="CVE-2024-38586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38593" id="CVE-2024-38593" type="cve" title="CVE-2024-38593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38663" id="CVE-2024-38663" type="cve" title="CVE-2024-38663"/>
      <reference href="https://bugzilla.redhat.com/2267509" id="2267509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273082" id="2273082" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273466" id="2273466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275735" id="2275735" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277238" id="2277238" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280434" id="2280434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281131" id="2281131" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281925" id="2281925" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283401" id="2283401" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284541" id="2284541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284581" id="2284581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293230" id="2293230" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293380" id="2293380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293402" id="2293402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293456" id="2293456" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293653" id="2293653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294225" id="2294225" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4583.html" id="ALSA-2024:4583" type="self" title="ALSA-2024:4583"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="kernel-devel" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-devel-5.14.0-427.26.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">2fbcc68107d1b52dab8f9ec8d4950bfd89a092e631461a416695e881e85b7987</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-doc-5.14.0-427.26.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">2fdd15a93267a5bac0ed7269710d1ed6a12ee7fb382a0255ccb72fee8548efc6</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-427.26.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">398c565d12a377cb043a279c779c5637b89767fef47febaf5a0dd9b0b1fe504a</sum>
        </package>
        <package name="rtla" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>rtla-5.14.0-427.26.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">44056ff25dfa0c9559e411fb906a3ff101758f33b4b79892014ea73dd76ebeda</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-427.26.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">49f9e3b1c2d70a0db6f4fcf86550f174a40467f22b2450a83c003bf2aaac31c0</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-headers-5.14.0-427.26.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">87bb0f6082fdb70be0d4918360eba290f6c25433448aa9216e126748014b4a7b</sum>
        </package>
        <package name="rv" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>rv-5.14.0-427.26.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">909bc10ffcd671c5e69c2fb19f5090ce94016a5681bcb7ebfc3e5223e71ea29a</sum>
        </package>
        <package name="perf" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>perf-5.14.0-427.26.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">9d1248103a618a3f20072a352c21cccbdc2ed73e24d227d417841ad8f6edb851</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-5.14.0-427.26.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">ae6ba1706fbe3eb6a78f367d88ae283d9b89c2e7f60724f20ad552461004deeb</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-427.26.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">daa78976f2ff81fd9372ce2913c4a846424e8bd215b298c90cf6439b40b77a04</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-devel-matched-5.14.0-427.26.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">e5778c9cfd5c5d8456bb55d3db684cb7b12c6b2baa721c8233fb3bfb7130bbba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4623</id>
    <title>Important: qt5-qtbase security update</title>
    <issued date="2024-07-18 00:00:00"/>
    <updated date="2024-07-19 10:23:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4623" id="RHSA-2024:4623" type="rhsa" title="RHSA-2024:4623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39936" id="CVE-2024-39936" type="cve" title="CVE-2024-39936"/>
      <reference href="https://bugzilla.redhat.com/2295867" id="2295867" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4623.html" id="ALSA-2024:4623" type="self" title="ALSA-2024:4623"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="qt5-qtbase-examples" version="5.15.9" release="10.el9_4" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-10.el9_4.src.rpm">
          <filename>qt5-qtbase-examples-5.15.9-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">0910577559923a95dadb9bbcca5d3c3680aa57adacab1cae5665243839df56e3</sum>
        </package>
        <package name="qt5-qtbase-gui" version="5.15.9" release="10.el9_4" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-10.el9_4.src.rpm">
          <filename>qt5-qtbase-gui-5.15.9-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">31b773e2d698b029af14d7153262565a06a753bf511cccae8420fa481d27dcca</sum>
        </package>
        <package name="qt5-qtbase-odbc" version="5.15.9" release="10.el9_4" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-10.el9_4.src.rpm">
          <filename>qt5-qtbase-odbc-5.15.9-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">c4bc3fb79296f06c94a4fb27fba6b3276912807ea8a1aca2a994659f4d02fbcb</sum>
        </package>
        <package name="qt5-qtbase-private-devel" version="5.15.9" release="10.el9_4" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-10.el9_4.src.rpm">
          <filename>qt5-qtbase-private-devel-5.15.9-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">cf75eb2c88290f84169ef2c770293f1267cac60c73e0081cb2869f7b14ab0d19</sum>
        </package>
        <package name="qt5-qtbase-mysql" version="5.15.9" release="10.el9_4" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-10.el9_4.src.rpm">
          <filename>qt5-qtbase-mysql-5.15.9-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">d6edcd3dbf9b43160a62d67ee66dcc876a6b52ce000beac8a6a43c3249eacf05</sum>
        </package>
        <package name="qt5-qtbase-common" version="5.15.9" release="10.el9_4" epoch="0" arch="noarch" src="qt5-qtbase-5.15.9-10.el9_4.src.rpm">
          <filename>qt5-qtbase-common-5.15.9-10.el9_4.noarch.rpm</filename>
          <sum type="sha256">e8ba0c47c1d2af35f0577f0d67f1e533ad3a3f4e792dcbdf445d52044e514baf</sum>
        </package>
        <package name="qt5-qtbase-devel" version="5.15.9" release="10.el9_4" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-10.el9_4.src.rpm">
          <filename>qt5-qtbase-devel-5.15.9-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">ea03a3a197d449efe6319c0aff89411513f89cae27e415b43315bcfe0cf6fb71</sum>
        </package>
        <package name="qt5-qtbase" version="5.15.9" release="10.el9_4" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-10.el9_4.src.rpm">
          <filename>qt5-qtbase-5.15.9-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">f73df4f0ab486c9e0dc43c983ab927bb59bcda2abc756bd1faa2c31009e26519</sum>
        </package>
        <package name="qt5-qtbase-postgresql" version="5.15.9" release="10.el9_4" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-10.el9_4.src.rpm">
          <filename>qt5-qtbase-postgresql-5.15.9-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">ff48d86561d0c829b4bf44031b4cc72306be05180fa562017dedcf614e834ac1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4624</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-07-18 00:00:00"/>
    <updated date="2024-07-19 10:21:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* Mozilla: Race condition in permission assignment (CVE-2024-6601)
* Mozilla: Memory corruption in thread creation (CVE-2024-6603)
* Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13 (CVE-2024-6604)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4624" id="RHSA-2024:4624" type="rhsa" title="RHSA-2024:4624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6601" id="CVE-2024-6601" type="cve" title="CVE-2024-6601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6603" id="CVE-2024-6603" type="cve" title="CVE-2024-6603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6604" id="CVE-2024-6604" type="cve" title="CVE-2024-6604"/>
      <reference href="https://bugzilla.redhat.com/2296636" id="2296636" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296638" id="2296638" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296639" id="2296639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4624.html" id="ALSA-2024:4624" type="self" title="ALSA-2024:4624"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="thunderbird" version="115.13.0" release="3.el9_4.alma.1" epoch="0" arch="s390x" src="thunderbird-115.13.0-3.el9_4.alma.1.src.rpm">
          <filename>thunderbird-115.13.0-3.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">0735f13b256772629dec3c7346aac03aea5408a704c787f589d072eb917b54be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4726</id>
    <title>Important: httpd security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-23 22:08:49"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>httpd security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: Improper escaping of output in mod_rewrite (CVE-2024-38475)
* httpd: Substitution encoding issue in mod_rewrite (CVE-2024-38474)
* httpd: null pointer dereference in mod_proxy (CVE-2024-38477)
* httpd: Potential SSRF in mod_rewrite (CVE-2024-39573)
* httpd: Encoding problem in mod_proxy (CVE-2024-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4726" id="RHSA-2024:4726" type="rhsa" title="RHSA-2024:4726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38473" id="CVE-2024-38473" type="cve" title="CVE-2024-38473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38474" id="CVE-2024-38474" type="cve" title="CVE-2024-38474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38475" id="CVE-2024-38475" type="cve" title="CVE-2024-38475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38477" id="CVE-2024-38477" type="cve" title="CVE-2024-38477"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39573" id="CVE-2024-39573" type="cve" title="CVE-2024-39573"/>
      <reference href="https://bugzilla.redhat.com/2295012" id="2295012" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295013" id="2295013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295014" id="2295014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295016" id="2295016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295022" id="2295022" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4726.html" id="ALSA-2024:4726" type="self" title="ALSA-2024:4726"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="mod_ldap" version="2.4.57" release="11.el9_4" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.src.rpm">
          <filename>mod_ldap-2.4.57-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">0e10f044b9e11d4a9c1e6b477d2e3a3b7b7895d344d2ed485d2040417c515979</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.57" release="11.el9_4" epoch="1" arch="s390x" src="httpd-2.4.57-11.el9_4.src.rpm">
          <filename>mod_proxy_html-2.4.57-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">3d3a36d9fe6d3171b748b769a3a6f05516699a345a678a4168b5719288475ed5</sum>
        </package>
        <package name="mod_session" version="2.4.57" release="11.el9_4" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.src.rpm">
          <filename>mod_session-2.4.57-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">43f330227208e1f72de34f703cb23335a902771817cd2d7c6fccc842c2efb53a</sum>
        </package>
        <package name="httpd-core" version="2.4.57" release="11.el9_4" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.src.rpm">
          <filename>httpd-core-2.4.57-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">6edbf9752888c2a52a85db7f12b50ad7900b626a31b9ababd3390fd9b313cf28</sum>
        </package>
        <package name="mod_lua" version="2.4.57" release="11.el9_4" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.src.rpm">
          <filename>mod_lua-2.4.57-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">70c415bbe56c5f4872a34124d58c483f529a7296424d0e76563e2141516f74af</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.57" release="11.el9_4" epoch="0" arch="noarch" src="httpd-2.4.57-11.el9_4.src.rpm">
          <filename>httpd-filesystem-2.4.57-11.el9_4.noarch.rpm</filename>
          <sum type="sha256">83c3fadfe9c92ba0d104583616b13b3807bad424b82edbb30814263953b71361</sum>
        </package>
        <package name="httpd-devel" version="2.4.57" release="11.el9_4" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.src.rpm">
          <filename>httpd-devel-2.4.57-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">891e34fb788f0162fe7013108efa21700a436f0050c33a238621984515c159e5</sum>
        </package>
        <package name="httpd-tools" version="2.4.57" release="11.el9_4" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.src.rpm">
          <filename>httpd-tools-2.4.57-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">94dfb4957c2009d7e0e1e29b75a15cfccc7ffbd1d1f17dbabc6c14f5cf85c1b1</sum>
        </package>
        <package name="httpd" version="2.4.57" release="11.el9_4" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.src.rpm">
          <filename>httpd-2.4.57-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">ac0a64acc41fce626a857f3217953eb9180a434016026f29c6ed31225e46270a</sum>
        </package>
        <package name="mod_ssl" version="2.4.57" release="11.el9_4" epoch="1" arch="s390x" src="httpd-2.4.57-11.el9_4.src.rpm">
          <filename>mod_ssl-2.4.57-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">ad4a10a7f001cc31e1236230f32579eca80a467b55ba1c87195c9e09beb1994b</sum>
        </package>
        <package name="httpd-manual" version="2.4.57" release="11.el9_4" epoch="0" arch="noarch" src="httpd-2.4.57-11.el9_4.src.rpm">
          <filename>httpd-manual-2.4.57-11.el9_4.noarch.rpm</filename>
          <sum type="sha256">bafdbbd696cea4482b92bfbd18bfa476e362601fce71b5d4c83d4a97243c9a00</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4749</id>
    <title>Moderate: edk2 security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-25 08:35:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765)
* edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236)
* edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4749" id="RHSA-2024:4749" type="rhsa" title="RHSA-2024:4749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36765" id="CVE-2022-36765" type="cve" title="CVE-2022-36765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45236" id="CVE-2023-45236" type="cve" title="CVE-2023-45236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45237" id="CVE-2023-45237" type="cve" title="CVE-2023-45237"/>
      <reference href="https://bugzilla.redhat.com/2257584" id="2257584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258703" id="2258703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258706" id="2258706" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4749.html" id="ALSA-2024:4749" type="self" title="ALSA-2024:4749"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="edk2-ovmf" version="20231122" release="6.el9_4.2" epoch="0" arch="noarch" src="edk2-20231122-6.el9_4.2.src.rpm">
          <filename>edk2-ovmf-20231122-6.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">07ab65898528b14bd133dcc29037207a0575b113ba24d06b8ec9fb9a2740a4a8</sum>
        </package>
        <package name="edk2-aarch64" version="20231122" release="6.el9_4.2" epoch="0" arch="noarch" src="edk2-20231122-6.el9_4.2.src.rpm">
          <filename>edk2-aarch64-20231122-6.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">9a5248396531529aa0a93ef15d4a30176a9c18dced35b724cbc45a4b1e0b3784</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4755</id>
    <title>Moderate: libreoffice security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-25 08:24:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic (CVE-2024-3044)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4755" id="RHSA-2024:4755" type="rhsa" title="RHSA-2024:4755"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3044" id="CVE-2024-3044" type="cve" title="CVE-2024-3044"/>
      <reference href="https://bugzilla.redhat.com/2280542" id="2280542" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4755.html" id="ALSA-2024:4755" type="self" title="ALSA-2024:4755"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libreoffice-data" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-data-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">03e3ef148b80826d3481e2a6b20466babd1d3a77baf85404a79b4539a8aa9105</sum>
        </package>
        <package name="autocorr-ru" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-ru-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">04368f95302b72ae743f5536e8b52a790dbdd2b5d4807375400c024ba0e47e4d</sum>
        </package>
        <package name="autocorr-hr" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-hr-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">0bfdcce25ea72d11fddf83ead3c0af28283bbf6fcc07bd0b933a7004157b4bcd</sum>
        </package>
        <package name="autocorr-ja" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-ja-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">0ff756cdb0ab836d4f48e3b09dd3aa7268befe47756541c30898d3dd2f2b9806</sum>
        </package>
        <package name="autocorr-zh" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-zh-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">21fb07b9b0d3a42ed1ffefc4e6bf62e9d572eb99f351f8bc72c79ee05ba40d8e</sum>
        </package>
        <package name="autocorr-mn" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-mn-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">26291d58d9a9e49fb6b29cca4d790b644224a1ffc72ec5b3b36aae26c84d8f4a</sum>
        </package>
        <package name="autocorr-pl" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-pl-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">33c59a214526f7111c07aadb43125513a7291995b56c1b69044b77f8fa585070</sum>
        </package>
        <package name="autocorr-el" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-el-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">3a1fddb25f77c31938f72bb9953628a5eff04e84bf5ff923d14884f9eda69a18</sum>
        </package>
        <package name="autocorr-vi" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-vi-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">3f11efe5d7f6572776aa981fe768b975555668d3e130439778628a95bc453bd5</sum>
        </package>
        <package name="autocorr-lt" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-lt-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">41c1ba137ea39e07ed1e90932b0ad2e2c5e5680d6a46cdbdaf4338f612d97e35</sum>
        </package>
        <package name="autocorr-lb" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-lb-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">482786b3374f7bda0179e8794843b3bbe9fd9b5790b52cf62dc1be5897c97a67</sum>
        </package>
        <package name="autocorr-ro" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-ro-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">48b90cc6c673056aaeeafc7879ccbe5e4bde525a7a64f34dd0c1c24270b533b8</sum>
        </package>
        <package name="libreoffice-core" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-core-7.1.8.1-13.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">4acbc2fe32f616dd8bd19e9c8e25c2e17b726aaad2c0c89976b20f3a74d158cf</sum>
        </package>
        <package name="autocorr-fi" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-fi-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">4d2c23209ded6d5f46357c1e6a5785b5e0cae52f5b93f661b371419630ed801e</sum>
        </package>
        <package name="autocorr-af" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-af-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">553aa18cecb1b5d6f1c37a819fb6a476103cf40180913845fcfe1d989879f7c3</sum>
        </package>
        <package name="autocorr-nl" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-nl-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">5896b1e6cd29e2905a2c7b67855656a547b198e3fbc6a0aab42bc8ae16f9a093</sum>
        </package>
        <package name="autocorr-en" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-en-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">58dbcb989a0caf1fcf1bbf5beb3a4fdc0cc3a5d410ae29c1ede7433eaab2a169</sum>
        </package>
        <package name="autocorr-vro" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-vro-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">5cbf4b22dcb5be7aad41abf4330a10597eb5d3e1a55d4518473799f3d3fdb0b7</sum>
        </package>
        <package name="autocorr-da" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-da-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">5ed9841679ec426eba2b450a4bd0b1aba6355d248ffb11b3404efa7f0f2d3bfe</sum>
        </package>
        <package name="libreoffice-pdfimport" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-pdfimport-7.1.8.1-13.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">6059b223433bf065031beb3caa033701dafb09ef7d9e429cd34f2e3a2379bcb6</sum>
        </package>
        <package name="autocorr-sr" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-sr-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">61f3bb4512d322bfe4450d94c8b213720e4f1a575d517be36fd05663af289673</sum>
        </package>
        <package name="libreoffice-impress" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-impress-7.1.8.1-13.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">67a68b1862a0542fefd541c2553fac0170445f1a0196710f77b3515aad46a562</sum>
        </package>
        <package name="autocorr-fa" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-fa-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">67bf550b430ecfcd58464c4f0916e19d0006dcc4f2026894473c157816830e44</sum>
        </package>
        <package name="libreoffice-help-en" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-help-en-7.1.8.1-13.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">6a80205b8677fc3932bf071d248f0541229c608089f1478d5f42323412dc5463</sum>
        </package>
        <package name="autocorr-sl" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-sl-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">6d593e0f513e1f9759ebe20a1aacc5d57123032cd21c8073253f3e907316549c</sum>
        </package>
        <package name="autocorr-hu" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-hu-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">7134cc9c8e9c241937855244210fd8a22f4ac8c442aeca3dc3b7fa953e0aaf6d</sum>
        </package>
        <package name="autocorr-de" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-de-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">8a7b92ab40755f779d6a8c800e6f26c5b71a5ea862ea35c1856b49fbedafd08a</sum>
        </package>
        <package name="autocorr-ca" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-ca-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">8b22cc7a6f30eb9d3458a1f50d05508cb932cc6c92cf9534d9e27947d40e5c96</sum>
        </package>
        <package name="autocorr-dsb" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-dsb-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">8cfd5efc96a5eda885dc1407fd7e53e75bc4cc2b4c7616727642ecc1accdc4ce</sum>
        </package>
        <package name="autocorr-sk" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-sk-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">92d0017acd5e3e1fb111e95c34b69a1c56e9d4654f8fee49efaafef9eac4a450</sum>
        </package>
        <package name="libreoffice-ogltrans" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-ogltrans-7.1.8.1-13.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">9891d40c61b00d54ad14b94d9915e88060dba7f3c2e4c47ac130807e74715c8f</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-opensymbol-fonts-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">a14029041caa166db9e3e7fcb9522c63f51a84068144950bcf3c86f6d89b176c</sum>
        </package>
        <package name="autocorr-tr" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-tr-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">a59952c9f31efcc64e64f79cfb9eee529b2ae190ea688e87ec2b6c8e607ebb31</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-graphicfilter-7.1.8.1-13.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">a74165e4cae3b0b64bfe4773df2b22a5502e1935d59ba215179cd527df21a664</sum>
        </package>
        <package name="libreoffice-writer" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-writer-7.1.8.1-13.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">a7d924ad4255b43204da90d0057557d0bba892390466f3a92a878fc5677c112a</sum>
        </package>
        <package name="autocorr-fr" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-fr-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">a92a70dc08078bb962dd8f53540a6837323062cb2bd1e0d0554374a829c0385e</sum>
        </package>
        <package name="libreoffice-pyuno" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-pyuno-7.1.8.1-13.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">abc8bb12739af6371a8cff0f328e284573e26d9563ddf439517689b986ee3739</sum>
        </package>
        <package name="autocorr-is" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-is-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">ae1915cfcde098ca74df265293bb5d8b938f2ff51aad797286c51aa0617a007b</sum>
        </package>
        <package name="libreoffice-ure" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-ure-7.1.8.1-13.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">b5319b7bc2422ee69bbf063bfd79d1171c65e12048eac589153e5161f7f29e5e</sum>
        </package>
        <package name="autocorr-cs" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-cs-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">b8aebbda56c6ad5ccdb1c1327aaaa611e022c13e2c667786a7ccca58182119b6</sum>
        </package>
        <package name="libreoffice-langpack-en" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-langpack-en-7.1.8.1-13.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">c4968b1a32efc32ac70ce8e53eb5a1d86121223dc548167b8bb95668d17d800b</sum>
        </package>
        <package name="autocorr-es" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-es-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">c55a382a9fb04e4f5cd1d4ae5a71ca29867cabcb762a75df6187a8e6e04d1d7d</sum>
        </package>
        <package name="libreoffice-ure-common" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-ure-common-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">c6c54a61ae8d0402ffeb117db1e2cccf0dec2d6d89c7184bed35a5c85c292218</sum>
        </package>
        <package name="autocorr-ko" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-ko-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">ce577e8074dff08c4ed365137827e96ed6d3a3779b07219719097a823dfd0fc6</sum>
        </package>
        <package name="autocorr-pt" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-pt-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">d53671b7aa1c3c76d720eb6e64ede94c5c0425cc0657d85998ab21f4e6eecb7d</sum>
        </package>
        <package name="libreoffice-calc" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>libreoffice-calc-7.1.8.1-13.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d7939a3d2bc7624ef1407b8a1cf57300fd42ecc241b5aea59a8863ce94a29e27</sum>
        </package>
        <package name="autocorr-bg" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-bg-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">d7cc28139068242dbd3cf04c40263dc8244dc81b34f35e5b356ef12deb435925</sum>
        </package>
        <package name="autocorr-sv" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-sv-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">df72468b6c0dd69cc70f27346003de85f2cf71f88c31f860f86b2d861cfe0621</sum>
        </package>
        <package name="autocorr-ga" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-ga-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">e4ea9eea9a01896a51e6018ba2d17ec68ac739e96b4946eb621dbe0930117daf</sum>
        </package>
        <package name="autocorr-it" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-it-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">f669964675ff5f951eea9ee6e003ee1a686155585414a86ae76fc43c627a020e</sum>
        </package>
        <package name="autocorr-hsb" version="7.1.8.1" release="13.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-13.el9_4.alma.1.src.rpm">
          <filename>autocorr-hsb-7.1.8.1-13.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">f6a60f696cf02281eb30e968752d1805a096fef2eeeb513e4ab6a36dfcaf95f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4756</id>
    <title>Moderate: libuv security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 15:07:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libuv security update</summary>
    <description>libuv is a multi-platform support library with a focus on asynchronous I/O. 

Security Fix(es):

* libuv: Improper Domain Lookup that potentially leads to SSRF attacks (CVE-2024-24806)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4756" id="RHSA-2024:4756" type="rhsa" title="RHSA-2024:4756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24806" id="CVE-2024-24806" type="cve" title="CVE-2024-24806"/>
      <reference href="https://bugzilla.redhat.com/2263292" id="2263292" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4756.html" id="ALSA-2024:4756" type="self" title="ALSA-2024:4756"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libuv" version="1.42.0" release="2.el9_4" epoch="1" arch="s390x" src="libuv-1.42.0-2.el9_4.src.rpm">
          <filename>libuv-1.42.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">c43026bd5309b7c41c4802a03cd3e9a78eed16e9eaff104efd7e1602e226191d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4757</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-25 08:13:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* libvirt: stack use-after-free in virNetClientIOEventLoop() (CVE-2024-4418)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4757" id="RHSA-2024:4757" type="rhsa" title="RHSA-2024:4757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4418" id="CVE-2024-4418" type="cve" title="CVE-2024-4418"/>
      <reference href="https://bugzilla.redhat.com/2278616" id="2278616" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4757.html" id="ALSA-2024:4757" type="self" title="ALSA-2024:4757"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libvirt-daemon-driver-storage-disk" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">0425677002f815304845828d7fa47cd6720c0238400114f7580ba71a2c1f5fbb</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-kvm-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">045b83467b9fe44bf948c19a9a0cae2b08b98b6397716e92d63bb4dad4359594</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">04de3477eb11afdce25a806a1c38b47441ec0545a88221a135b28dfe99975edb</sum>
        </package>
        <package name="libvirt" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">0b52e7fce4516c02e3a24e4e4df5b372689aabb90298c73cefe96d9fd5813178</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-secret-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">1dbc593a51860c0df31ab125387c21bb42bb5848e07236e753976206c09b550b</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-interface-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">3b289dba9f27537fbf1efdc4487cd54f782da2d42c0d14a6c60112e6a8b6edf8</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-config-network-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">4cece3a4299ce809db07c695aa9e1eb2c9ee2655a3c41350217da414462f3ceb</sum>
        </package>
        <package name="libvirt-nss" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-nss-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">574662a5d99ca40af70cbc1cf5105db3173887530b70092476ca0c1da823412a</sum>
        </package>
        <package name="libvirt-client-qemu" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-client-qemu-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">59a0f7e1f312a9c0bb185bfa90ecc8d15f0a498af29f67eacc6f7157c151c257</sum>
        </package>
        <package name="libvirt-daemon-lock" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-lock-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">6ca64adb278aaca22d1037c12511e4d15d9e1fd6f9834c8efa728a01af777af2</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">746b5a71eba30b56f5c3136642fde383ca78aef3b8e0f2b60b7cc6af361bdfb6</sum>
        </package>
        <package name="libvirt-daemon-plugin-lockd" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-lockd-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">7ed289a55aaa32478ce6dd6cda2fc11d3492a3d529a77a35f94b42a0f3b79ae6</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">85ff9d83c73c0da71801915bfafad26c0799485ffe714779fad4769bb21fb61d</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-qemu-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">9303acd7a14b4b7ebf110da510d58b33ee062dd999d67c7613176877e4253d2c</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">946357f8ffa198bda12d2a1c18017a908367597671e464c8d4515ce544694389</sum>
        </package>
        <package name="libvirt-daemon-log" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-log-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">a790fbce5293e4681e32659f6c4e114b16c7119f020ea80c2e22cae63f859833</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">ad86faf12b2b21b543d91a0655ff2cd7ed7165e3beec93a28996813aefa6bada</sum>
        </package>
        <package name="libvirt-libs" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-libs-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">c4ab41b1eca4aa1f14c9a4bc89c05fff3b050f868597507dca04af7ea7f58310</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">ca44f72f70656f4b995e602e92c8ecbfa0f4726309c6a15561bcf98384506dad</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">cf601e950c1bb4ab4c4903a174f3263e7d1877e9056f6932445d88934f16d235</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d7b5f6b57d27d69a6afb4527d8919344f6599532853d44d53b8c98f69a4d0138</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d8c82b30e2bc4c2776df8aa5b2be72d96502c63bd21ded40834e7607b4b69051</sum>
        </package>
        <package name="libvirt-daemon-common" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-common-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">da80db1b80dd37feda3e698c6c6e11d0e9f884be3cf99cc158a5ccf97577e3ca</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-network-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">ed078a71ba9e70dc78800a90fc23e779d11838db3a39566a1c024b1e6f38f906</sum>
        </package>
        <package name="libvirt-daemon" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">f132f141f0a1a718cc4f46779273bee3cee83db1b0af4ec475636653bbd2fbf2</sum>
        </package>
        <package name="libvirt-daemon-proxy" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-proxy-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">f388a34ce1734c29d5db3b303d56c2279a4c8d9bb4a2f974a5e65208fa56a8fd</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">f90482bfb8f85b3df3fe10a9801d8c5f93115ef5ae3b150c81219e9f9c764840</sum>
        </package>
        <package name="libvirt-client" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-client-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">fad953a4accac9bb36feec2f9e15f5f63bfebbfb20a06be5f4c120265bd095b1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4761</id>
    <title>Important: containernetworking-plugins security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 14:59:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>containernetworking-plugins security update</summary>
    <description>The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. 

Security Fix(es):

* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4761" id="RHSA-2024:4761" type="rhsa" title="RHSA-2024:4761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4761.html" id="ALSA-2024:4761" type="self" title="ALSA-2024:4761"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="containernetworking-plugins" version="1.4.0" release="4.el9_4" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-4.el9_4.src.rpm">
          <filename>containernetworking-plugins-1.4.0-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">06fcd9575511b3833d1dbbb61998b4d544eba4916bfd71b1abc185f5c91da416</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4762</id>
    <title>Important: runc security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 14:55:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>runc security update</summary>
    <description>The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.

Security Fix(es):

* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4762" id="RHSA-2024:4762" type="rhsa" title="RHSA-2024:4762"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4762.html" id="ALSA-2024:4762" type="self" title="ALSA-2024:4762"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="runc" version="1.1.12" release="3.el9_4" epoch="4" arch="s390x" src="runc-1.1.12-3.el9_4.src.rpm">
          <filename>runc-1.1.12-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">3dea5554aed2bb494195bb4457523cee40e766290815436849188e3a17dfe685</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4766</id>
    <title>Low: python3 security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 13:07:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4766" id="RHSA-2024:4766" type="rhsa" title="RHSA-2024:4766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4766.html" id="ALSA-2024:4766" type="self" title="ALSA-2024:4766"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.11-tkinter" version="3.11.7" release="1.el9_4.3" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.3.src.rpm">
          <filename>python3.11-tkinter-3.11.7-1.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">156ff7c6fb87ffc2acfabbd1fa342cf29222c51619ccf43aeca9862517432dce</sum>
        </package>
        <package name="python3.11" version="3.11.7" release="1.el9_4.3" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.3.src.rpm">
          <filename>python3.11-3.11.7-1.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">4cc67465216bf34b94e7565d7c3ffc06e72eb1eb1b3b375f014aee255ec0efa7</sum>
        </package>
        <package name="python3.11-devel" version="3.11.7" release="1.el9_4.3" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.3.src.rpm">
          <filename>python3.11-devel-3.11.7-1.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">8485e30bc1336bc1800db4acc39a39571224874b71dee811c035ac0d0cb248e8</sum>
        </package>
        <package name="python3.11-libs" version="3.11.7" release="1.el9_4.3" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.3.src.rpm">
          <filename>python3.11-libs-3.11.7-1.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">faa92b46b4b6796cafd57bcfab777f12db170432d88a1c7827c71569ba1b11df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4776</id>
    <title>Moderate: cups security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 14:45:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

* cups: Cupsd Listen arbitrary chmod 0140777 (CVE-2024-35235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4776" id="RHSA-2024:4776" type="rhsa" title="RHSA-2024:4776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35235" id="CVE-2024-35235" type="cve" title="CVE-2024-35235"/>
      <reference href="https://bugzilla.redhat.com/2290318" id="2290318" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4776.html" id="ALSA-2024:4776" type="self" title="ALSA-2024:4776"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="cups-ipptool" version="2.3.3op2" release="27.el9_4" epoch="1" arch="s390x" src="cups-2.3.3op2-27.el9_4.src.rpm">
          <filename>cups-ipptool-2.3.3op2-27.el9_4.s390x.rpm</filename>
          <sum type="sha256">2acc812bf1649ddde16705794352cd08bd773e00c27439ed6d97359082031689</sum>
        </package>
        <package name="cups-printerapp" version="2.3.3op2" release="27.el9_4" epoch="1" arch="s390x" src="cups-2.3.3op2-27.el9_4.src.rpm">
          <filename>cups-printerapp-2.3.3op2-27.el9_4.s390x.rpm</filename>
          <sum type="sha256">45865d297f56a187ed0a225f5a18a2f9c982b34e465afdd61c729049f38e4156</sum>
        </package>
        <package name="cups-client" version="2.3.3op2" release="27.el9_4" epoch="1" arch="s390x" src="cups-2.3.3op2-27.el9_4.src.rpm">
          <filename>cups-client-2.3.3op2-27.el9_4.s390x.rpm</filename>
          <sum type="sha256">5121524d98ef46da42092b9e5db384c03f42c51f0c8722c779531c213c38ef73</sum>
        </package>
        <package name="cups-filesystem" version="2.3.3op2" release="27.el9_4" epoch="1" arch="noarch" src="cups-2.3.3op2-27.el9_4.src.rpm">
          <filename>cups-filesystem-2.3.3op2-27.el9_4.noarch.rpm</filename>
          <sum type="sha256">5fdc0be73bfc2c4c6f4754f3dcc19f535aeed65c4cb68a4685f0d359d0013f39</sum>
        </package>
        <package name="cups" version="2.3.3op2" release="27.el9_4" epoch="1" arch="s390x" src="cups-2.3.3op2-27.el9_4.src.rpm">
          <filename>cups-2.3.3op2-27.el9_4.s390x.rpm</filename>
          <sum type="sha256">72f22e6c33630c5fb199d0c7add638433860645ee9ed707d307ae896c1256584</sum>
        </package>
        <package name="cups-lpd" version="2.3.3op2" release="27.el9_4" epoch="1" arch="s390x" src="cups-2.3.3op2-27.el9_4.src.rpm">
          <filename>cups-lpd-2.3.3op2-27.el9_4.s390x.rpm</filename>
          <sum type="sha256">ce85529206103a630cef6eb588c2dae66de0da369d2ad01e248dc3b4e4b4b4ce</sum>
        </package>
        <package name="cups-devel" version="2.3.3op2" release="27.el9_4" epoch="1" arch="s390x" src="cups-2.3.3op2-27.el9_4.src.rpm">
          <filename>cups-devel-2.3.3op2-27.el9_4.s390x.rpm</filename>
          <sum type="sha256">fccf36a69f51a8e8009b0ff2d2b4323bab7ac0103678178199e62b2f7db760b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4779</id>
    <title>Low: python3 security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 13:03:49"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4779" id="RHSA-2024:4779" type="rhsa" title="RHSA-2024:4779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4779.html" id="ALSA-2024:4779" type="self" title="ALSA-2024:4779"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python-unversioned-command" version="3.9.18" release="3.el9_4.3" epoch="0" arch="noarch" src="python3.9-3.9.18-3.el9_4.3.src.rpm">
          <filename>python-unversioned-command-3.9.18-3.el9_4.3.noarch.rpm</filename>
          <sum type="sha256">5d3cc9204ccd70c8d5b44389772bfe5510ceffd6ba60cc3b3317e18db93080e2</sum>
        </package>
        <package name="python3-tkinter" version="3.9.18" release="3.el9_4.3" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.3.src.rpm">
          <filename>python3-tkinter-3.9.18-3.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">752f029e3a350587a089aaf588a9d6b8c825270382835caa8b0b5b35d123ff18</sum>
        </package>
        <package name="python3-devel" version="3.9.18" release="3.el9_4.3" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.3.src.rpm">
          <filename>python3-devel-3.9.18-3.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">7cfdd40ced104ce483ed816f4fd83fcd8ae92421f42104f61f5eeb8f18de109d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4861</id>
    <title>Moderate: squid security update</title>
    <issued date="2024-07-25 00:00:00"/>
    <updated date="2024-07-26 11:15:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>squid security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638)
* squid: Out-of-bounds write error may lead to Denial of Service (CVE-2024-37894)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4861" id="RHSA-2024:4861" type="rhsa" title="RHSA-2024:4861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23638" id="CVE-2024-23638" type="cve" title="CVE-2024-23638"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37894" id="CVE-2024-37894" type="cve" title="CVE-2024-37894"/>
      <reference href="https://bugzilla.redhat.com/2260051" id="2260051" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294353" id="2294353" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4861.html" id="ALSA-2024:4861" type="self" title="ALSA-2024:4861"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="squid" version="5.5" release="13.el9_4" epoch="7" arch="s390x" src="squid-5.5-13.el9_4.src.rpm">
          <filename>squid-5.5-13.el9_4.s390x.rpm</filename>
          <sum type="sha256">78b15be567b83005c6df015c76734e27cae4034fdb3fd843d14b4ff7542153e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4928</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-07-31 00:00:00"/>
    <updated date="2024-11-03 22:23:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned (CVE-2023-52458)
  * kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (CVE-2024-26773)
  * kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (CVE-2024-26737)
  * kernel: dm: call the resume method on internal suspend (CVE-2024-26880)
  * kernel: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (CVE-2024-26852)
  * kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
  * kernel: nfp: flower: handle acti_netdevs allocation failure (CVE-2024-27046)
  * kernel: octeontx2-af: Use separate handlers for interrupts (CVE-2024-27030)
  * kernel: icmp: prevent possible NULL dereferences from icmp_build_probe() (CVE-2024-35857)
  * kernel: mlxbf_gige: call request_irq() after NAPI initialized (CVE-2024-35907)
  * kernel: mlxbf_gige: stop interface during shutdown (CVE-2024-35885)
  * kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (CVE-2023-52809)
  * kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (CVE-2021-47459)
  * kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (CVE-2024-36924)
  * kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (CVE-2024-36952)
  * kernel: net: amd-xgbe: Fix skb data length underflow (CVE-2022-48743)
  * kernel: epoll: be better about file lifetimes (CVE-2024-38580)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4928" id="RHSA-2024:4928" type="rhsa" title="RHSA-2024:4928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47459" id="CVE-2021-47459" type="cve" title="CVE-2021-47459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48743" id="CVE-2022-48743" type="cve" title="CVE-2022-48743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52458" id="CVE-2023-52458" type="cve" title="CVE-2023-52458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52809" id="CVE-2023-52809" type="cve" title="CVE-2023-52809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26737" id="CVE-2024-26737" type="cve" title="CVE-2024-26737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26773" id="CVE-2024-26773" type="cve" title="CVE-2024-26773"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26852" id="CVE-2024-26852" type="cve" title="CVE-2024-26852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26880" id="CVE-2024-26880" type="cve" title="CVE-2024-26880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26982" id="CVE-2024-26982" type="cve" title="CVE-2024-26982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27030" id="CVE-2024-27030" type="cve" title="CVE-2024-27030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27046" id="CVE-2024-27046" type="cve" title="CVE-2024-27046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35857" id="CVE-2024-35857" type="cve" title="CVE-2024-35857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35885" id="CVE-2024-35885" type="cve" title="CVE-2024-35885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35907" id="CVE-2024-35907" type="cve" title="CVE-2024-35907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36924" id="CVE-2024-36924" type="cve" title="CVE-2024-36924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36952" id="CVE-2024-36952" type="cve" title="CVE-2024-36952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38580" id="CVE-2024-38580" type="cve" title="CVE-2024-38580"/>
      <reference href="https://bugzilla.redhat.com/2265794" id="2265794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273236" id="2273236" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273274" id="2273274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275690" id="2275690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275761" id="2275761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278337" id="2278337" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278435" id="2278435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278473" id="2278473" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281247" id="2281247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281647" id="2281647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281700" id="2281700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282669" id="2282669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282898" id="2282898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284506" id="2284506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284598" id="2284598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293316" id="2293316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293412" id="2293412" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4928.html" id="ALSA-2024:4928" type="self" title="ALSA-2024:4928"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="rv" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>rv-5.14.0-427.28.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">0eb86a34a7c95cbc287d3049bd42255349a0e735436d0f09b09863c5ca634493</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-doc-5.14.0-427.28.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">1c12a2a9970700b5c07411ec2acfc301d3189eaf6bf085792d0377321826bfb6</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-427.28.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">2359997c18ab59569047b5e9ccf60b771508cbdc2a325d1c2014cfcdb06db5d4</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-devel-matched-5.14.0-427.28.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">3f734a637397d6de55484f12e19fd9fb4cf7da82eb79231393d48107bbffb14b</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-5.14.0-427.28.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">46d78514f72e5a22ff7bea6b8f3beacf0ae982879f8a98de5e1113a836ed9a45</sum>
        </package>
        <package name="rtla" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>rtla-5.14.0-427.28.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">71c69ab94bdb7076af53bf2fb960dca309ed70f2206ff9b9dcd70d4f82757aaf</sum>
        </package>
        <package name="perf" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>perf-5.14.0-427.28.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">9b7ccde48331486d0e8230852fa72b4d3d2e0aefad34ebe16585e5dbc5abb1f6</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-427.28.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">a330011662ce92a87a12aceee9eca3699d568c7b7e4150e5b6a578d2dfa242b4</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-headers-5.14.0-427.28.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">a72a529e64c19d04c03da0cf9065d52aa76113973177f6fcdb129dbbf49aea73</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-427.28.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">b2e380f71525373033e97f9948c9abb5f3ade86efb3caa0e42e8c2d0b67d8f73</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-devel-5.14.0-427.28.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c4c7c491a8b20b28d2689c2b45fbc186c735ca48441eb9715f4cc6301e64ec91</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4935</id>
    <title>Important: freeradius security update</title>
    <issued date="2024-07-31 00:00:00"/>
    <updated date="2024-08-06 20:53:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freeradius security update</summary>
    <description>FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

* freeradius: forgery attack (CVE-2024-3596)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4935" id="RHSA-2024:4935" type="rhsa" title="RHSA-2024:4935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3596" id="CVE-2024-3596" type="cve" title="CVE-2024-3596"/>
      <reference href="https://bugzilla.redhat.com/2263240" id="2263240" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4935.html" id="ALSA-2024:4935" type="self" title="ALSA-2024:4935"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="freeradius-doc" version="3.0.21" release="40.el9_4" epoch="0" arch="s390x" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-doc-3.0.21-40.el9_4.s390x.rpm</filename>
          <sum type="sha256">49bbada5742095ef1b83c5fbb3a5ef3d9c3b4289076ab351cd92c43e03263023</sum>
        </package>
        <package name="freeradius" version="3.0.21" release="40.el9_4" epoch="0" arch="s390x" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-3.0.21-40.el9_4.s390x.rpm</filename>
          <sum type="sha256">7bcf674b370ad22e094c0612bd744f67633fc9dd5630cae082b7b25a9ac9c465</sum>
        </package>
        <package name="python3-freeradius" version="3.0.21" release="40.el9_4" epoch="0" arch="s390x" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>python3-freeradius-3.0.21-40.el9_4.s390x.rpm</filename>
          <sum type="sha256">a558fde33c7169cad68d60329e23d9083d18c408822704c6421792469ed51995</sum>
        </package>
        <package name="freeradius-ldap" version="3.0.21" release="40.el9_4" epoch="0" arch="s390x" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-ldap-3.0.21-40.el9_4.s390x.rpm</filename>
          <sum type="sha256">c189dc153e9003084d8f56e69c074421f9b7b6662df02bc687bb36e222e2069f</sum>
        </package>
        <package name="freeradius-krb5" version="3.0.21" release="40.el9_4" epoch="0" arch="s390x" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-krb5-3.0.21-40.el9_4.s390x.rpm</filename>
          <sum type="sha256">cdfd1ac6a1e6f7cc10222abd608131f1be32796a938f49f3d722587f4be74651</sum>
        </package>
        <package name="freeradius-utils" version="3.0.21" release="40.el9_4" epoch="0" arch="s390x" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-utils-3.0.21-40.el9_4.s390x.rpm</filename>
          <sum type="sha256">ce4fdb454173733ca8ebccb1a174f766be27f92a0597dc7e444d5b9384be3656</sum>
        </package>
        <package name="freeradius-devel" version="3.0.21" release="40.el9_4" epoch="0" arch="s390x" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-devel-3.0.21-40.el9_4.s390x.rpm</filename>
          <sum type="sha256">f685aaeb81ce653a9796a5558ddcfde026988a2e48ca40d159cba02dba00d5dc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5138</id>
    <title>Important: httpd security update</title>
    <issued date="2024-08-08 00:00:00"/>
    <updated date="2024-08-08 19:01:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>httpd security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: Security issues via?backend applications whose response headers are malicious or exploitable (CVE-2024-38476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5138" id="RHSA-2024:5138" type="rhsa" title="RHSA-2024:5138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38476" id="CVE-2024-38476" type="cve" title="CVE-2024-38476"/>
      <reference href="https://bugzilla.redhat.com/2295015" id="2295015" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5138.html" id="ALSA-2024:5138" type="self" title="ALSA-2024:5138"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="mod_session" version="2.4.57" release="11.el9_4.1" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.1.src.rpm">
          <filename>mod_session-2.4.57-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">1dfa2081bf467377880a0ba79e254340f6d74547083af5ab834af88f1b96349d</sum>
        </package>
        <package name="httpd" version="2.4.57" release="11.el9_4.1" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.1.src.rpm">
          <filename>httpd-2.4.57-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">201fabdb575f0dbfc54ba301d41476f4546b6060d3dde104b4c6eb998b2617c4</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.57" release="11.el9_4.1" epoch="1" arch="s390x" src="httpd-2.4.57-11.el9_4.1.src.rpm">
          <filename>mod_proxy_html-2.4.57-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">2689dd706aff742e64b5abbd857bf68930ccfa85d2c157489b09d0e9853bfd11</sum>
        </package>
        <package name="httpd-manual" version="2.4.57" release="11.el9_4.1" epoch="0" arch="noarch" src="httpd-2.4.57-11.el9_4.1.src.rpm">
          <filename>httpd-manual-2.4.57-11.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">617bedd804bdb369db24741136d165abe40e2adea6db7598de6ae9c59b87e76f</sum>
        </package>
        <package name="httpd-devel" version="2.4.57" release="11.el9_4.1" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.1.src.rpm">
          <filename>httpd-devel-2.4.57-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">7062dec77c4897a0996ab88249a2902dedca544ff0a1db13cd4c365ab505c7a7</sum>
        </package>
        <package name="mod_ldap" version="2.4.57" release="11.el9_4.1" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.1.src.rpm">
          <filename>mod_ldap-2.4.57-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">86e8b94092d8dbdc2184adf4351f736cf2da8b6595ea0c209e3ca52cda78ec0e</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.57" release="11.el9_4.1" epoch="0" arch="noarch" src="httpd-2.4.57-11.el9_4.1.src.rpm">
          <filename>httpd-filesystem-2.4.57-11.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">a672dbfc7677ed70ba8883e04b529a83e68f1ad60d0ecd06a678c54172c0e81e</sum>
        </package>
        <package name="httpd-tools" version="2.4.57" release="11.el9_4.1" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.1.src.rpm">
          <filename>httpd-tools-2.4.57-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">c451fd391b134fea7df7ae1dc172ce449a7034858d8b2d5bfbd5ded4bbc7be88</sum>
        </package>
        <package name="mod_lua" version="2.4.57" release="11.el9_4.1" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.1.src.rpm">
          <filename>mod_lua-2.4.57-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">d73211cab6f66fd7ce8bee1c498c4c255ca251be9655e3a78f708e41e1d03c44</sum>
        </package>
        <package name="mod_ssl" version="2.4.57" release="11.el9_4.1" epoch="1" arch="s390x" src="httpd-2.4.57-11.el9_4.1.src.rpm">
          <filename>mod_ssl-2.4.57-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">d9d916501578156d080e45d65025cbac5a48cbbb8cafad17f0710f9425ff1620</sum>
        </package>
        <package name="httpd-core" version="2.4.57" release="11.el9_4.1" epoch="0" arch="s390x" src="httpd-2.4.57-11.el9_4.1.src.rpm">
          <filename>httpd-core-2.4.57-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">e2babb90102ef45e881a5363edc5e96221887c30ea7934b975fccb9e383e7ca9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5192</id>
    <title>Moderate: 389-ds-base security update</title>
    <issued date="2024-08-12 00:00:00"/>
    <updated date="2024-08-13 06:44:14"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)
* 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request (CVE-2024-6237)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5192" id="RHSA-2024:5192" type="rhsa" title="RHSA-2024:5192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5953" id="CVE-2024-5953" type="cve" title="CVE-2024-5953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6237" id="CVE-2024-6237" type="cve" title="CVE-2024-6237"/>
      <reference href="https://bugzilla.redhat.com/2292104" id="2292104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293579" id="2293579" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5192.html" id="ALSA-2024:5192" type="self" title="ALSA-2024:5192"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3-lib389" version="2.4.5" release="9.el9_4" epoch="0" arch="noarch" src="389-ds-base-2.4.5-9.el9_4.src.rpm">
          <filename>python3-lib389-2.4.5-9.el9_4.noarch.rpm</filename>
          <sum type="sha256">997deceabd3440cbb5e7221f2b55f9b34c4f83cb166e3a748bd3d5c89b6475ee</sum>
        </package>
        <package name="389-ds-base-libs" version="2.4.5" release="9.el9_4" epoch="0" arch="s390x" src="389-ds-base-2.4.5-9.el9_4.src.rpm">
          <filename>389-ds-base-libs-2.4.5-9.el9_4.s390x.rpm</filename>
          <sum type="sha256">cd3a33efbfb395d5cc9b7b15b85848c79ed71f070c30dc2d5a69fb7bc76d86bc</sum>
        </package>
        <package name="389-ds-base" version="2.4.5" release="9.el9_4" epoch="0" arch="s390x" src="389-ds-base-2.4.5-9.el9_4.src.rpm">
          <filename>389-ds-base-2.4.5-9.el9_4.s390x.rpm</filename>
          <sum type="sha256">dfa00100132c18bffc3ae4ff0c3b2dc1ff31c9b853df3786abce3e54ab72dab3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5231</id>
    <title>Important: bind and bind-dyndb-ldap security update</title>
    <issued date="2024-08-15 00:00:00"/>
    <updated date="2024-08-28 15:57:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind and bind-dyndb-ldap security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam (CVE-2024-1737)
* bind9: bind: SIG(0) can be used to exhaust CPU resources (CVE-2024-1975)
* bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content (CVE-2024-4076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5231" id="RHSA-2024:5231" type="rhsa" title="RHSA-2024:5231"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1737" id="CVE-2024-1737" type="cve" title="CVE-2024-1737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1975" id="CVE-2024-1975" type="cve" title="CVE-2024-1975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4076" id="CVE-2024-4076" type="cve" title="CVE-2024-4076"/>
      <reference href="https://bugzilla.redhat.com/2298893" id="2298893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298901" id="2298901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298904" id="2298904" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5231.html" id="ALSA-2024:5231" type="self" title="ALSA-2024:5231"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="bind-dyndb-ldap" version="11.9" release="10.el9_4.alma.1" epoch="0" arch="s390x" src="bind-dyndb-ldap-11.9-10.el9_4.alma.1.src.rpm">
          <filename>bind-dyndb-ldap-11.9-10.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">165c9a207dbff2af2827157afb50355ce903a0e2d9c61c9f732018139e84330f</sum>
        </package>
        <package name="bind-utils" version="9.16.23" release="18.el9_4.6" epoch="32" arch="s390x" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>bind-utils-9.16.23-18.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">2e080f4a57886166e40b6ad52680ebcec19528e12acfbcd5e9503cfc7d308138</sum>
        </package>
        <package name="python3-bind" version="9.16.23" release="18.el9_4.6" epoch="32" arch="noarch" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>python3-bind-9.16.23-18.el9_4.6.noarch.rpm</filename>
          <sum type="sha256">42f691db1d5bf19f61201edc16027b0d23e1f8d4b636127269cfefaf1e8c5719</sum>
        </package>
        <package name="bind-dnssec-doc" version="9.16.23" release="18.el9_4.6" epoch="32" arch="noarch" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>bind-dnssec-doc-9.16.23-18.el9_4.6.noarch.rpm</filename>
          <sum type="sha256">71e7eda62fad82b98d7b568cdbd6ca85957e36db56c15ace1d21a620f75ea390</sum>
        </package>
        <package name="bind" version="9.16.23" release="18.el9_4.6" epoch="32" arch="s390x" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>bind-9.16.23-18.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">81333e2f597c72ab8bbf1712dcb99859552688df0e081b318ff703c145308a87</sum>
        </package>
        <package name="bind-license" version="9.16.23" release="18.el9_4.6" epoch="32" arch="noarch" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>bind-license-9.16.23-18.el9_4.6.noarch.rpm</filename>
          <sum type="sha256">cc05b8ec2e3a7cd1137ed17e0fddf12248c2470a2903f59f80e72afcbcfd45c3</sum>
        </package>
        <package name="bind-dnssec-utils" version="9.16.23" release="18.el9_4.6" epoch="32" arch="s390x" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>bind-dnssec-utils-9.16.23-18.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">e46c13fd8ac0ead6ddc12c1096067eebe390a4745744ce6d32b9bb9fc0f7522e</sum>
        </package>
        <package name="bind-libs" version="9.16.23" release="18.el9_4.6" epoch="32" arch="s390x" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>bind-libs-9.16.23-18.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">f83922fb8a25a6b6a867f7f9d11dc886aa68a3189d3a0019bcf400dc4976340d</sum>
        </package>
        <package name="bind-chroot" version="9.16.23" release="18.el9_4.6" epoch="32" arch="s390x" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>bind-chroot-9.16.23-18.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">fcc3fe306fbecefaa52ce8ff7f7f497c7d70cfb0c667e661cf973dc61a328c07</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5279</id>
    <title>Important: python3.11-setuptools security update</title>
    <issued date="2024-08-15 00:00:00"/>
    <updated date="2024-08-21 11:55:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11-setuptools security update</summary>
    <description>Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages.  This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources.

Security Fix(es):

* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5279" id="RHSA-2024:5279" type="rhsa" title="RHSA-2024:5279"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5279.html" id="ALSA-2024:5279" type="self" title="ALSA-2024:5279"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.11-setuptools-wheel" version="65.5.1" release="2.el9_4.1" epoch="0" arch="noarch" src="python3.11-setuptools-65.5.1-2.el9_4.1.src.rpm">
          <filename>python3.11-setuptools-wheel-65.5.1-2.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">b7eddbb0feda7b779b306cf6fc494adf054e33044fd8797c121c93be6402b6bd</sum>
        </package>
        <package name="python3.11-setuptools" version="65.5.1" release="2.el9_4.1" epoch="0" arch="noarch" src="python3.11-setuptools-65.5.1-2.el9_4.1.src.rpm">
          <filename>python3.11-setuptools-65.5.1-2.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">dc9b9dc462b369ac7d6c955501897d2ad8f605733bdca796757157ca2aaaf9f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5322</id>
    <title>Important: firefox security update</title>
    <issued date="2024-08-15 00:00:00"/>
    <updated date="2024-08-21 12:15:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* Firefox: 115.14/128.1 ESR ()
* mozilla: Fullscreen notification dialog can be obscured by document content (CVE-2024-7518)
* mozilla: Out of bounds memory access in graphics shared memory handling (CVE-2024-7519)
* mozilla: Type confusion in WebAssembly (CVE-2024-7520)
* mozilla: Incomplete WebAssembly exception handing (CVE-2024-7521)
* mozilla: Out of bounds read in editor component (CVE-2024-7522)
* mozilla: CSP strict-dynamic bypass using web-compatibility shims (CVE-2024-7524)
* mozilla: Missing permission check when creating a StreamFilter (CVE-2024-7525)
* mozilla: Uninitialized memory used by WebGL (CVE-2024-7526)
* mozilla: Use-after-free in JavaScript garbage collection (CVE-2024-7527)
* mozilla: Use-after-free in IndexedDB (CVE-2024-7528)
* mozilla: Document content could partially obscure security prompts (CVE-2024-7529)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5322" id="RHSA-2024:5322" type="rhsa" title="RHSA-2024:5322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7518" id="CVE-2024-7518" type="cve" title="CVE-2024-7518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7519" id="CVE-2024-7519" type="cve" title="CVE-2024-7519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7520" id="CVE-2024-7520" type="cve" title="CVE-2024-7520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7521" id="CVE-2024-7521" type="cve" title="CVE-2024-7521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7522" id="CVE-2024-7522" type="cve" title="CVE-2024-7522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7524" id="CVE-2024-7524" type="cve" title="CVE-2024-7524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7525" id="CVE-2024-7525" type="cve" title="CVE-2024-7525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7526" id="CVE-2024-7526" type="cve" title="CVE-2024-7526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7527" id="CVE-2024-7527" type="cve" title="CVE-2024-7527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7528" id="CVE-2024-7528" type="cve" title="CVE-2024-7528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7529" id="CVE-2024-7529" type="cve" title="CVE-2024-7529"/>
      <reference href="https://bugzilla.redhat.com/2303135" id="2303135" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303136" id="2303136" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303137" id="2303137" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303138" id="2303138" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303139" id="2303139" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303141" id="2303141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303142" id="2303142" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303143" id="2303143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303144" id="2303144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303145" id="2303145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303146" id="2303146" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5322.html" id="ALSA-2024:5322" type="self" title="ALSA-2024:5322"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="firefox" version="115.14.0" release="2.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-115.14.0-2.el9_4.alma.1.src.rpm">
          <filename>firefox-115.14.0-2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">a3dbf738ba571eb9717caa1ce4acc0ddee62d2304a012d4800766b66fb5e0186</sum>
        </package>
        <package name="firefox-x11" version="115.14.0" release="2.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-115.14.0-2.el9_4.alma.1.src.rpm">
          <filename>firefox-x11-115.14.0-2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">c1568093afe2dade091873fbfdbcb82b5b9135e2d0dec2245f27d62f3d3a4808</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5334</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-08-15 00:00:00"/>
    <updated date="2024-08-21 12:17:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.108 and .NET Runtime 8.0.8.

Security Fix(es):

* dotnet: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* EMBARGOED CVE-2024-38167 dotnet8.0: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5334" id="RHSA-2024:5334" type="rhsa" title="RHSA-2024:5334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38167" id="CVE-2024-38167" type="cve" title="CVE-2024-38167"/>
      <reference href="https://bugzilla.redhat.com/2302428" id="2302428" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5334.html" id="ALSA-2024:5334" type="self" title="ALSA-2024:5334"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.8" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.8-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">1e2145a7b318a47c68a87b93396f2d28ae6655fe65e5af843f4272a4f13cc8b0</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.8" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.8-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">35f1fc2ad534164ebc46a89ff50e51734f580419793e066712c17fc0aff25a2c</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.8" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.8-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">41a55773bef523c131f95fa74ac69d8f3ac569b286efbe35601c5a4a1aba8219</sum>
        </package>
        <package name="dotnet-host" version="8.0.8" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>dotnet-host-8.0.8-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">48d3f3b4d72669d7891c59d0518092302315ca8e983e4e5869cae599954f07a3</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.108" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.108-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">5e1e29de8574a0fe88de0666abf164bd02818e011ce5975c9ed717b2cf2c801c</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.8" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.8-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">60b0c3ac229d7b31b67accb0e62247434e4b83cf37b545dac69f105ecb72735e</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.8" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.8-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">647e9131956bd7907b9248a8ab1edc2726b6200dae4cf11527a0acd01f13a89a</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.8" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.8-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">7ad06f5b9de98dab66862e841f4dff334b30f5d01ca8d459f41ec532d0105616</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.8" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.8-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">81b8ff4050025fe2a377b07e828eae6ffd5002ca7adcd3caca5ceadf091830e6</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="8.0.108" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.108-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">aa4e13d8333f4371318134bfb6cb8856c3e43265007c2404e9021e8b10a54e81</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.8" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.8-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c4c9eb581cbdaf49bf911936959eb34273764e1275ccee67a10727a066963968</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.108" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>dotnet-templates-8.0-8.0.108-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">e35a64f83d6cf00d74cae03df21abe878feaec0cf2ebf47fc0110cd38ba9eb54</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.108" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.108-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">f36e2fa8a7085a66f973f25fb2e559b289baa332397d88b55c0981c9f5a721dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5363</id>
    <title>Important: kernel security update</title>
    <issued date="2024-08-14 00:00:00"/>
    <updated date="2024-11-03 22:26:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  
Security Fix(es):  

  * kernel: phy: (CVE-2024-26600)
  * kernel: netfilter: multiple flaws (CVE-2024-26808, CVE-2024-27065, CVE-2024-35899, CVE-2024-36005)
  * kernel: cifs: (CVE-2024-26828)
  * kernel: wifi: multiple flaws (CVE-2024-26897, CVE-2024-27052, CVE-2024-27049, CVE-2023-52651, CVE-2024-35789, CVE-2024-27434, CVE-2024-35845, CVE-2024-35937, CVE-2024-36941, CVE-2024-36922, CVE-2024-36921, CVE-2024-38575)
  * kernel: nfs: (CVE-2024-26868)
  * kernel: igc: (CVE-2024-26853)
  * kernel: dmaengine/idxd: (CVE-2024-21823)
  * kernel: ipv6: multiple flaws (CVE-2024-27417, CVE-2024-35969, CVE-2024-36903, CVE-2024-40961)
  * kernel: vt: (CVE-2024-35823)
  * kernel: efi: (CVE-2024-35800)
  * kernel: mlxsw: (CVE-2024-35852)
  * kernel: eeprom: (CVE-2024-35848)
  * kernel: ice: (CVE-2024-35911)
  * kernel: platform/x86: (CVE-2023-52864)
  * kernel: i40e: (CVE-2024-36020)
  * kernel: rtnetlink: (CVE-2024-36017)
  * kernel: net: multiple flaws (CVE-2024-36929, CVE-2024-36971, CVE-2021-47606, CVE-2024-38558, CVE-2024-40928, CVE-2024-40954)
  * kernel: ipvlan: (CVE-2024-33621)
  * kernel: tcp: (CVE-2024-37356)
  * kernel: virtio: (CVE-2024-37353)
  * kernel: tls: (CVE-2024-36489)
  * kernel: cxl/region: (CVE-2024-38391)
  * kernel: bonding: (CVE-2024-39487)
  * kernel: netns: (CVE-2024-40958)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5363" id="RHSA-2024:5363" type="rhsa" title="RHSA-2024:5363"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47606" id="CVE-2021-47606" type="cve" title="CVE-2021-47606"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52651" id="CVE-2023-52651" type="cve" title="CVE-2023-52651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52864" id="CVE-2023-52864" type="cve" title="CVE-2023-52864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21823" id="CVE-2024-21823" type="cve" title="CVE-2024-21823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26600" id="CVE-2024-26600" type="cve" title="CVE-2024-26600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26808" id="CVE-2024-26808" type="cve" title="CVE-2024-26808"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26828" id="CVE-2024-26828" type="cve" title="CVE-2024-26828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26853" id="CVE-2024-26853" type="cve" title="CVE-2024-26853"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26868" id="CVE-2024-26868" type="cve" title="CVE-2024-26868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26897" id="CVE-2024-26897" type="cve" title="CVE-2024-26897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27049" id="CVE-2024-27049" type="cve" title="CVE-2024-27049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27052" id="CVE-2024-27052" type="cve" title="CVE-2024-27052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27065" id="CVE-2024-27065" type="cve" title="CVE-2024-27065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27417" id="CVE-2024-27417" type="cve" title="CVE-2024-27417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27434" id="CVE-2024-27434" type="cve" title="CVE-2024-27434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33621" id="CVE-2024-33621" type="cve" title="CVE-2024-33621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35789" id="CVE-2024-35789" type="cve" title="CVE-2024-35789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35800" id="CVE-2024-35800" type="cve" title="CVE-2024-35800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35823" id="CVE-2024-35823" type="cve" title="CVE-2024-35823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35845" id="CVE-2024-35845" type="cve" title="CVE-2024-35845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35848" id="CVE-2024-35848" type="cve" title="CVE-2024-35848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35852" id="CVE-2024-35852" type="cve" title="CVE-2024-35852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35899" id="CVE-2024-35899" type="cve" title="CVE-2024-35899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35911" id="CVE-2024-35911" type="cve" title="CVE-2024-35911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35937" id="CVE-2024-35937" type="cve" title="CVE-2024-35937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35969" id="CVE-2024-35969" type="cve" title="CVE-2024-35969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36005" id="CVE-2024-36005" type="cve" title="CVE-2024-36005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36017" id="CVE-2024-36017" type="cve" title="CVE-2024-36017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36020" id="CVE-2024-36020" type="cve" title="CVE-2024-36020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36489" id="CVE-2024-36489" type="cve" title="CVE-2024-36489"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36903" id="CVE-2024-36903" type="cve" title="CVE-2024-36903"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36921" id="CVE-2024-36921" type="cve" title="CVE-2024-36921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36922" id="CVE-2024-36922" type="cve" title="CVE-2024-36922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36929" id="CVE-2024-36929" type="cve" title="CVE-2024-36929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36941" id="CVE-2024-36941" type="cve" title="CVE-2024-36941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36971" id="CVE-2024-36971" type="cve" title="CVE-2024-36971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37353" id="CVE-2024-37353" type="cve" title="CVE-2024-37353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37356" id="CVE-2024-37356" type="cve" title="CVE-2024-37356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38391" id="CVE-2024-38391" type="cve" title="CVE-2024-38391"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38558" id="CVE-2024-38558" type="cve" title="CVE-2024-38558"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38575" id="CVE-2024-38575" type="cve" title="CVE-2024-38575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39487" id="CVE-2024-39487" type="cve" title="CVE-2024-39487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40928" id="CVE-2024-40928" type="cve" title="CVE-2024-40928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40954" id="CVE-2024-40954" type="cve" title="CVE-2024-40954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40958" id="CVE-2024-40958" type="cve" title="CVE-2024-40958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40961" id="CVE-2024-40961" type="cve" title="CVE-2024-40961"/>
      <reference href="https://bugzilla.redhat.com/2265838" id="2265838" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273405" id="2273405" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275600" id="2275600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275655" id="2275655" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275715" id="2275715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275748" id="2275748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278380" id="2278380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278417" id="2278417" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278429" id="2278429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278519" id="2278519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278989" id="2278989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281057" id="2281057" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281097" id="2281097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281133" id="2281133" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281190" id="2281190" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281237" id="2281237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281257" id="2281257" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281265" id="2281265" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281272" id="2281272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281639" id="2281639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281667" id="2281667" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281821" id="2281821" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281900" id="2281900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281949" id="2281949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282719" id="2282719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284400" id="2284400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284417" id="2284417" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284474" id="2284474" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284496" id="2284496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284511" id="2284511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284513" id="2284513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284543" id="2284543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292331" id="2292331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293208" id="2293208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293418" id="2293418" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293441" id="2293441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293657" id="2293657" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293658" id="2293658" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293686" id="2293686" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293687" id="2293687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293688" id="2293688" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297056" id="2297056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297512" id="2297512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297538" id="2297538" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297542" id="2297542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297545" id="2297545" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5363.html" id="ALSA-2024:5363" type="self" title="ALSA-2024:5363"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="kernel-debug-devel" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-5.14.0-427.31.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">0e842e55bd6bcd34ae35a6fd68f63fa580b528aaa36c8ea6d284f8e51145554e</sum>
        </package>
        <package name="rv" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>rv-5.14.0-427.31.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">3c4268b6fb96f9ad210e8c8a633f1d19c6e2a07c10cafc22d21d3ae04ddf30f2</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-427.31.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">4d81cf86f89887e14fd6fa014b3957e55eb6894b6f0f38a38bbc912fb07deddf</sum>
        </package>
        <package name="rtla" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>rtla-5.14.0-427.31.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">899480b8f62f1f910cf8bf01a63fbfc69f20c399fdf5dd2021a2af2d0365ccf8</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-headers-5.14.0-427.31.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">94999d2ef2c4b7816013990c7c753d1d7d520d76f0ddd9af92a2b48b714849f0</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-devel-5.14.0-427.31.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">9a04319c61fe28ddd4daee7f2e06b5abbd5b448a89b44a17e64f81c3e02c8816</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-427.31.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">b76d14277a25b616352e47d782361ed614f6a75c3f0ef86a7b5c06910c3d6364</sum>
        </package>
        <package name="perf" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>perf-5.14.0-427.31.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c44b472f4ecb0115bada3e29e6dd45f98a3523bba112ae1fb5b418f07533643e</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-doc-5.14.0-427.31.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">cf0dc6bd374628b67126e261a3e3fefcee1907d8166fe71dab81aa579c7a1b26</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-427.31.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">d04932757295c13961e9ae46b48441d423d19bd5da0df68f88dda62c3784e5b8</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-devel-matched-5.14.0-427.31.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">e641b36c6fef1478bfe92e6ec30b39eeaf5e0cb02cc56e7cb1dddfbd00adc6c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5392</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-08-14 00:00:00"/>
    <updated date="2024-08-21 12:26:14"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* EMBARGOED Thunderbird: 115.14/128.1 ()
* mozilla: Fullscreen notification dialog can be obscured by document content (CVE-2024-7518)
* mozilla: Out of bounds memory access in graphics shared memory handling (CVE-2024-7519)
* mozilla: Type confusion in WebAssembly (CVE-2024-7520)
* mozilla: Incomplete WebAssembly exception handing (CVE-2024-7521)
* mozilla: Out of bounds read in editor component (CVE-2024-7522)
* mozilla: Missing permission check when creating a StreamFilter (CVE-2024-7525)
* mozilla: Uninitialized memory used by WebGL (CVE-2024-7526)
* mozilla: Use-after-free in JavaScript garbage collection (CVE-2024-7527)
* mozilla: Use-after-free in IndexedDB (CVE-2024-7528)
* mozilla: Document content could partially obscure security prompts (CVE-2024-7529)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5392" id="RHSA-2024:5392" type="rhsa" title="RHSA-2024:5392"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7518" id="CVE-2024-7518" type="cve" title="CVE-2024-7518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7519" id="CVE-2024-7519" type="cve" title="CVE-2024-7519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7520" id="CVE-2024-7520" type="cve" title="CVE-2024-7520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7521" id="CVE-2024-7521" type="cve" title="CVE-2024-7521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7522" id="CVE-2024-7522" type="cve" title="CVE-2024-7522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7525" id="CVE-2024-7525" type="cve" title="CVE-2024-7525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7526" id="CVE-2024-7526" type="cve" title="CVE-2024-7526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7527" id="CVE-2024-7527" type="cve" title="CVE-2024-7527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7528" id="CVE-2024-7528" type="cve" title="CVE-2024-7528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7529" id="CVE-2024-7529" type="cve" title="CVE-2024-7529"/>
      <reference href="https://bugzilla.redhat.com/2303135" id="2303135" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303136" id="2303136" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303137" id="2303137" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303138" id="2303138" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303139" id="2303139" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303142" id="2303142" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303143" id="2303143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303144" id="2303144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303145" id="2303145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303146" id="2303146" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5392.html" id="ALSA-2024:5392" type="self" title="ALSA-2024:5392"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="thunderbird" version="115.14.0" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="thunderbird-115.14.0-1.el9_4.alma.1.src.rpm">
          <filename>thunderbird-115.14.0-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">6baeec1a8b9a9b08e4353f6a590792e572b7d8190d631c206f1164aae2a8010e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5529</id>
    <title>Moderate: curl security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 12:31:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

* curl: HTTP/2 push headers memory-leak (CVE-2024-2398)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5529" id="RHSA-2024:5529" type="rhsa" title="RHSA-2024:5529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2398" id="CVE-2024-2398" type="cve" title="CVE-2024-2398"/>
      <reference href="https://bugzilla.redhat.com/2270498" id="2270498" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5529.html" id="ALSA-2024:5529" type="self" title="ALSA-2024:5529"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libcurl-devel" version="7.76.1" release="29.el9_4.1" epoch="0" arch="s390x" src="curl-7.76.1-29.el9_4.1.src.rpm">
          <filename>libcurl-devel-7.76.1-29.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">27d20f0224db2d2c93d72b4da3e4b73a6afa7534b33d570b8413737dc03fa533</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5533</id>
    <title>Important: python3.12-setuptools security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 12:41:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-setuptools security update</summary>
    <description>Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages.  This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources.

Security Fix(es):

* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5533" id="RHSA-2024:5533" type="rhsa" title="RHSA-2024:5533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5533.html" id="ALSA-2024:5533" type="self" title="ALSA-2024:5533"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.12-setuptools" version="68.2.2" release="3.el9_4.1" epoch="0" arch="noarch" src="python3.12-setuptools-68.2.2-3.el9_4.1.src.rpm">
          <filename>python3.12-setuptools-68.2.2-3.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">2279cfb9ea221569984b787a7fec27b7b50af47b8f76a308565dad2b0bb65d7a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5583</id>
    <title>Moderate: libreoffice security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 13:02:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: bility to trust not validated macro signatures removed in high security mode (CVE-2024-6472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5583" id="RHSA-2024:5583" type="rhsa" title="RHSA-2024:5583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6472" id="CVE-2024-6472" type="cve" title="CVE-2024-6472"/>
      <reference href="https://bugzilla.redhat.com/2302866" id="2302866" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5583.html" id="ALSA-2024:5583" type="self" title="ALSA-2024:5583"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="autocorr-pl" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-pl-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">02a6c2b3247f82470265d54b9d1992c001ba9bdd46c323fdc14213a5c7f8a2e6</sum>
        </package>
        <package name="libreoffice-pyuno" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-pyuno-7.1.8.1-14.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">0342024555a5efb07937d17fce21cba309edcfe2679111cd31f8994b0448f391</sum>
        </package>
        <package name="autocorr-zh" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-zh-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">05bc41c6badc408b9d2f0867ada881973ed60b6dc9453b3880d7e1f9ab3969c3</sum>
        </package>
        <package name="autocorr-lb" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-lb-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">05e4aba60712bdf7b582ee623f921efe98d2885d429de48a9e467b0232772f0f</sum>
        </package>
        <package name="libreoffice-impress" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-impress-7.1.8.1-14.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">13bc0c2a7e96951d1dfb387aae8623a8f328b3ae9ae1dad6a0bc27dc22a527f1</sum>
        </package>
        <package name="autocorr-fr" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-fr-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">199e0b702025c674d2a7161be2c3a1b65a3d9c0cc7988c8509081eb399565e82</sum>
        </package>
        <package name="autocorr-ko" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-ko-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">28cee6bb04eb7063ff67b6c63214b464557b2a5d687e1ba350be9c6735286cbd</sum>
        </package>
        <package name="libreoffice-writer" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-writer-7.1.8.1-14.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">32a585d80e10638f02f6f485c042d0c360cc5ad7fbee255cee5fb7e066e51c0f</sum>
        </package>
        <package name="autocorr-nl" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-nl-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">34678581d856272dc58b06c7cfbbc20f63e0b99681c2a5d31bf4001ac923d4d4</sum>
        </package>
        <package name="autocorr-en" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-en-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">352cebd5f1aea55bdf50865d2c096de863bc6aa5f3722ea7fdb4ed6bb647a4d7</sum>
        </package>
        <package name="autocorr-dsb" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-dsb-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">38ea364fac71dc376107f197047ac7fb0ae97fe70e021310d9eb32c2b1b0fe2f</sum>
        </package>
        <package name="autocorr-is" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-is-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">3ca2e56368c9e0bf56576f9055eecc60da9d6af87776c893da8b24227e67f253</sum>
        </package>
        <package name="autocorr-ga" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-ga-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">40c65802f3807a229c044caa28378d0896ee6b0e9caf3c79fd541bb3043a741f</sum>
        </package>
        <package name="libreoffice-ure-common" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-ure-common-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">4291feae901d3cf892eba3e5239092ba410b7de14bc260acd9634c43f17bd83b</sum>
        </package>
        <package name="libreoffice-calc" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-calc-7.1.8.1-14.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">4a670122b906b34454782892903e8ff85fc46514e84a54d18987a8ec41d359f1</sum>
        </package>
        <package name="autocorr-vro" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-vro-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">4c2eaaac055ca71254f1e2a1ec6fa65fbf450cb216d56d609a9bf2bf8ee8f48c</sum>
        </package>
        <package name="autocorr-es" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-es-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">53ad21dcadcf49aca5d1f6c8687699d995cfd2e5122e14d25d7bef04bb7e9a02</sum>
        </package>
        <package name="libreoffice-data" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-data-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">57d0f7bbfe4252a743dbda6d7827d60dd7a7642a261dbf90cccd859af57611b3</sum>
        </package>
        <package name="autocorr-sr" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-sr-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">6545894b8c39ce7f556f824b323f07de5d645937ee6f7c5f9e8d391dfc50215c</sum>
        </package>
        <package name="autocorr-fi" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-fi-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">65c386f85824567f6c79ea1df4e3b50e259f1d9bfb89e75253e527eb1376cafc</sum>
        </package>
        <package name="autocorr-ja" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-ja-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">6b7148ae7a1bc9a56a9e22085a80e194ce8436ab9d6ecc9984c3bd9d3425b19b</sum>
        </package>
        <package name="autocorr-hr" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-hr-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">7e73671ab7a4d78a8705ece9fa8f86667590e39c189f42e8d6396434b0294eed</sum>
        </package>
        <package name="autocorr-fa" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-fa-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">7fbe676c5cd96458be8eeb9c0caf0851654c9f44aba9c55bdee8f11d4f04d4de</sum>
        </package>
        <package name="autocorr-ru" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-ru-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">854fc8acb4552cf10dadb6ca0248156c50bc36827592f173cdee979223b4fdd2</sum>
        </package>
        <package name="libreoffice-core" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-core-7.1.8.1-14.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">8b39f6f8a93e904b107a4e6e38b7c42683ca44d7124f2ae951f619bb337f86b0</sum>
        </package>
        <package name="autocorr-ro" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-ro-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">917a09496d0e65f6b8fbba2f549119b9bf586b20b0bf6159d6825692d808993f</sum>
        </package>
        <package name="autocorr-lt" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-lt-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">972e69ef6431fee03aa3524adbeb44381c36e227b9bffb3f8ddb71a8ae4af282</sum>
        </package>
        <package name="autocorr-ca" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-ca-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">9906fc219965f1c5987ce6a15b2cb9f6927ac872140a1599c2b90d6086edb617</sum>
        </package>
        <package name="libreoffice-help-en" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-help-en-7.1.8.1-14.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">a3288b6a85fbd8149cd9083f32997d8cd56501ef4c70f0f8326fa33ef2691f79</sum>
        </package>
        <package name="autocorr-it" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-it-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">a3ef42834dde79540013495b7335647bbb91ebb29d847568809a2f1e56f537ac</sum>
        </package>
        <package name="autocorr-af" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-af-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">a9ccef1e43e676f3547777ce4b4f02cc12d5b706bd246a4fab15d1d7f220965d</sum>
        </package>
        <package name="libreoffice-ure" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-ure-7.1.8.1-14.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">aa403985baf4d5ae1c0220f5ab12a69a453b98672ec892bfcbf95ff97780537a</sum>
        </package>
        <package name="autocorr-hu" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-hu-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">bf86ce8854f77d58f880883e1c9847de3609d645b082eb26618679acd9320e3f</sum>
        </package>
        <package name="autocorr-bg" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-bg-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">c1a78c4f23031a4231af3c749aa1b40eb0f6dd48f5d8d1ca1a3126c78b088857</sum>
        </package>
        <package name="libreoffice-ogltrans" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-ogltrans-7.1.8.1-14.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">c24f00808cb79e72f74d526e48299c43f28d2d6410d7d7582029512553dff54a</sum>
        </package>
        <package name="autocorr-da" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-da-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">c775ef1c5924f061b728179ae9a2bddc5e38f715da6abcef8560d4fa2b016656</sum>
        </package>
        <package name="autocorr-de" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-de-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">caf4102616b9e75a46f4dfb8a7b538ad6918fc65660b30f0e3b386fa87bac65e</sum>
        </package>
        <package name="libreoffice-langpack-en" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-langpack-en-7.1.8.1-14.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">cb1b6014614fa5dda0f896a1e98b2fdfc7c276772556dd54a5046dc2a47d7d1f</sum>
        </package>
        <package name="autocorr-sv" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-sv-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">cc718c3e0045d5d3d1817c5683e952a2e89bfd3b2aa0d33cfbab0abb3983b4f5</sum>
        </package>
        <package name="autocorr-pt" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-pt-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">ce4692654eb0e2e7221536dfd9547f8dab75c0ed040a53bd1c37e5fcadbc0861</sum>
        </package>
        <package name="autocorr-cs" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-cs-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">d1bf8cf35dc8ce70e5f899c75e586eabf380aad96325167c1269d0ff5bbd7ced</sum>
        </package>
        <package name="libreoffice-pdfimport" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-pdfimport-7.1.8.1-14.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d33e8b5ad77942587e08c05d620713f4337b32e18c82f942eafda5c5488a6f58</sum>
        </package>
        <package name="autocorr-vi" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-vi-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">d8bb66dee07b3cf1c922dc9a05586dc13fbe9e3aa1c5d22b58f254c6940b2961</sum>
        </package>
        <package name="autocorr-sk" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-sk-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">dca4350a8bd783c54e5e525d3ee0741f26388a28ba979c2131bf44aab3edf4b5</sum>
        </package>
        <package name="autocorr-hsb" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-hsb-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">dd2d65bd599be9e5c410e2cc1103b57927580009b8b3b03feffbd53dd67825aa</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-opensymbol-fonts-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">e3d0bdf99370a15841869707cf7257b3662537e2e49afd084afc419913602f84</sum>
        </package>
        <package name="autocorr-tr" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-tr-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">e82ec8bc149c63a77dfd14d08daad61259b03a7b9ae6261b621cce3a611740c7</sum>
        </package>
        <package name="autocorr-sl" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-sl-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">ee3cc02f39479ee7ffa63bfd6e36f3c171ff8eeefb822cc4954150c1f2d7ecb8</sum>
        </package>
        <package name="autocorr-mn" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-mn-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">f3efc3bf522b03e97200ab089eba90cd1402d101b5c4af43f4d1ef06d3f6c8f2</sum>
        </package>
        <package name="autocorr-el" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="noarch" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>autocorr-el-7.1.8.1-14.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">f85e217c6b2413ee6d196f404aaf38dff8d131ac37d6fc8389b02f87dbabe079</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="7.1.8.1" release="14.el9_4.alma.1" epoch="1" arch="s390x" src="libreoffice-7.1.8.1-14.el9_4.alma.1.src.rpm">
          <filename>libreoffice-graphicfilter-7.1.8.1-14.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">fc2cac35a5ff73981f34bb2abbc2a244d3eb914bd76c4722beca4660afe6cfa4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5693</id>
    <title>Important: tomcat security update</title>
    <issued date="2024-08-21 00:00:00"/>
    <updated date="2024-08-21 13:24:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

* tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5693" id="RHSA-2024:5693" type="rhsa" title="RHSA-2024:5693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34750" id="CVE-2024-34750" type="cve" title="CVE-2024-34750"/>
      <reference href="https://bugzilla.redhat.com/2295651" id="2295651" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5693.html" id="ALSA-2024:5693" type="self" title="ALSA-2024:5693"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="tomcat-docs-webapp" version="9.0.87" release="1.el9_4.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.2.src.rpm">
          <filename>tomcat-docs-webapp-9.0.87-1.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">01904a6fb73b0bc6f290c034a3676703f46c84645628bb122d1a86340c4e2a41</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.87" release="1.el9_4.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.2.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.87-1.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">2b335cf78354a8be19f8542b0539c61412169ae6a244f38cef1c45b9c572d858</sum>
        </package>
        <package name="tomcat-lib" version="9.0.87" release="1.el9_4.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.2.src.rpm">
          <filename>tomcat-lib-9.0.87-1.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">62fe3b4463304cae3c698f5e1d2f601916e58179a849b706cadde3aff3932d0a</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.87" release="1.el9_4.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.2.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.87-1.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">9390ce84a2e34dd9e1a467b91358aaeefe00bcc6ab276aa7dc71ca4644e3e57e</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.87" release="1.el9_4.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.2.src.rpm">
          <filename>tomcat-webapps-9.0.87-1.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">a787954b9946e7d56a62a6239d6ddeed9db293b99878db7fae307ec78545b5c9</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.87" release="1.el9_4.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.2.src.rpm">
          <filename>tomcat-admin-webapps-9.0.87-1.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">b8f8d9aa82b9e1d483cdb4aeef9be13514414f2332ec7d2daf0c4fa0d0d7c75e</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.87" release="1.el9_4.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.2.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.87-1.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">ccddb2529b13cbb6e8f188a6162174398310a98b0dc227b541b6f94f42d8d2c0</sum>
        </package>
        <package name="tomcat" version="9.0.87" release="1.el9_4.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el9_4.2.src.rpm">
          <filename>tomcat-9.0.87-1.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">ce7d9aa19e6c158359f9e3b6df7f9bc9651188bba623f82c0ef783f4ad68ed63</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5815</id>
    <title>Moderate: nodejs:20 security update</title>
    <issued date="2024-08-26 00:00:00"/>
    <updated date="2024-08-26 18:11:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)
* nodejs: fs.lstat bypasses permission model (CVE-2024-22018)
* nodejs: fs.fchown/fchmod bypasses permission model (CVE-2024-36137)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5815" id="RHSA-2024:5815" type="rhsa" title="RHSA-2024:5815"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22018" id="CVE-2024-22018" type="cve" title="CVE-2024-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22020" id="CVE-2024-22020" type="cve" title="CVE-2024-22020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36137" id="CVE-2024-36137" type="cve" title="CVE-2024-36137"/>
      <reference href="https://bugzilla.redhat.com/2296417" id="2296417" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296990" id="2296990" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2299281" id="2299281" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5815.html" id="ALSA-2024:5815" type="self" title="ALSA-2024:5815"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <module name="nodejs" stream="20" version="9040020240826124927" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-full-i18n" version="20.16.0" release="1.module_el9.4.0+107+dbd477e4" epoch="1" arch="s390x" src="nodejs-20.16.0-1.module_el9.4.0+107+dbd477e4.src.rpm">
          <filename>nodejs-full-i18n-20.16.0-1.module_el9.4.0+107+dbd477e4.s390x.rpm</filename>
          <sum type="sha256">07eba36cfba84a3ade683cc65f8d1f01e65cc06bc89b37c41a2598a8110cb36e</sum>
        </package>
        <package name="nodejs-docs" version="20.16.0" release="1.module_el9.4.0+107+dbd477e4" epoch="1" arch="noarch" src="nodejs-20.16.0-1.module_el9.4.0+107+dbd477e4.src.rpm">
          <filename>nodejs-docs-20.16.0-1.module_el9.4.0+107+dbd477e4.noarch.rpm</filename>
          <sum type="sha256">54d42b8e6332690ae739d234375760478031d5587beb471bcb6bd3a503254a00</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.3.0+47+c33bc288" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.3.0+47+c33bc288.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.3.0+47+c33bc288.noarch.rpm</filename>
          <sum type="sha256">6c7def7dbed327b375d30e7aafa1c2627afb0c3399bfdf50f9721a64a87488aa</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.3.0+88+29afeaa2" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm</filename>
          <sum type="sha256">8014b60b14856a94feb49d7f2a8754c6fd531ac93bf52e19702e32eea1fb729f</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.3.0+88+29afeaa2" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm</filename>
          <sum type="sha256">94ac92c4ae695d87df9c616a6d3ecafca411d07358cf60516392e320eefcb3c6</sum>
        </package>
        <package name="nodejs" version="20.16.0" release="1.module_el9.4.0+107+dbd477e4" epoch="1" arch="s390x" src="nodejs-20.16.0-1.module_el9.4.0+107+dbd477e4.src.rpm">
          <filename>nodejs-20.16.0-1.module_el9.4.0+107+dbd477e4.s390x.rpm</filename>
          <sum type="sha256">9f27b0990d6936f55d1aa46df40870906bca651ce7b4439d5e42e9f73a30a652</sum>
        </package>
        <package name="nodejs-devel" version="20.16.0" release="1.module_el9.4.0+107+dbd477e4" epoch="1" arch="s390x" src="nodejs-20.16.0-1.module_el9.4.0+107+dbd477e4.src.rpm">
          <filename>nodejs-devel-20.16.0-1.module_el9.4.0+107+dbd477e4.s390x.rpm</filename>
          <sum type="sha256">b743409083ae1a20fa8ecbaf881dec8fa16b92233d42a7dadd966d688796e7d9</sum>
        </package>
        <package name="npm" version="10.8.1" release="1.20.16.0.1.module_el9.4.0+107+dbd477e4" epoch="1" arch="s390x" src="nodejs-20.16.0-1.module_el9.4.0+107+dbd477e4.src.rpm">
          <filename>npm-10.8.1-1.20.16.0.1.module_el9.4.0+107+dbd477e4.s390x.rpm</filename>
          <sum type="sha256">fd7127db11acfa37704dea859727eb27414ca1fe065fe569b3b591f4c9ae2657</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5928</id>
    <title>Important: kernel security update</title>
    <issued date="2024-08-28 00:00:00"/>
    <updated date="2024-11-03 22:28:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nftables: nft_set_rbtree skip end interval element from gc (CVE-2024-26581)
  * kernel: netfilter: nft_limit: reject configurations that cause integer overflow (CVE-2024-26668)
  * kernel: vfio/pci: Lock external INTx masking ops (CVE-2024-26810)
  * kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CVE-2024-26855)
  * kernel: x86/xen: Add some null pointer checking to smp.c (CVE-2024-26908)
  * kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925)
  * kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020)
  * kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019)
  * kernel: netfilter: flowtable: validate pppoe header (CVE-2024-27016)
  * kernel: netfilter: bridge: confirm multicast packets before passing them up the stack (CVE-2024-27415)
  * kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info (CVE-2024-35839)
  * kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898)
  * kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion (CVE-2024-35897)
  * kernel: netfilter: validate user input for expected length (CVE-2024-35896)
  * kernel: netfilter: complete validation of user input (CVE-2024-35962)
  * kernel: ice: fix LAG and VF lock dependency in ice_reset_vf() (CVE-2024-36003)
  * kernel: cxl/port: Fix delete_endpoint() vs parent unregistration race (CVE-2023-52771)
  * kernel: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (CVE-2023-52880)
  * kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (CVE-2024-36025)
  * kernel: net/mlx5e: Fix netif state handling (CVE-2024-38608)
  * kernel: crypto: bcm - Fix pointer arithmetic (CVE-2024-38579)
  * kernel: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (CVE-2024-38544)
  * kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (CVE-2024-38540)
  * kernel: net: bridge: xmit: make sure we have at least eth header len bytes (CVE-2024-38538)
  * kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (CVE-2024-39476)
  * kernel: ipv6: fix possible race in __fib6_drop_pcpu_from() (CVE-2024-40905)
  * kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station (CVE-2024-40911)
  * kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CVE-2024-40912)
  * kernel: mm/huge_memory: don&amp;#39;t unpoison huge_zero_folio (CVE-2024-40914)
  * kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CVE-2024-40929)
  * kernel: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (CVE-2024-40939)
  * kernel: wifi: iwlwifi: mvm: don&amp;#39;t read past the mfuart notifcation (CVE-2024-40941)
  * kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (CVE-2024-40957)
  * kernel: scsi: qedi: Fix crash while reading debugfs attribute (CVE-2024-40978)
  * kernel: tipc: force a dst refcount before doing decryption (CVE-2024-40983)
  * kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090)
  * kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091)
  * kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (CVE-2024-41041)
  * kernel: NFSv4: Fix memory leak in nfs4_set_security_label (CVE-2024-41076)
  * kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CVE-2024-42110)
  * kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment (CVE-2024-42152)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5928" id="RHSA-2024:5928" type="rhsa" title="RHSA-2024:5928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52771" id="CVE-2023-52771" type="cve" title="CVE-2023-52771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52880" id="CVE-2023-52880" type="cve" title="CVE-2023-52880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26581" id="CVE-2024-26581" type="cve" title="CVE-2024-26581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26668" id="CVE-2024-26668" type="cve" title="CVE-2024-26668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26810" id="CVE-2024-26810" type="cve" title="CVE-2024-26810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26855" id="CVE-2024-26855" type="cve" title="CVE-2024-26855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26908" id="CVE-2024-26908" type="cve" title="CVE-2024-26908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26925" id="CVE-2024-26925" type="cve" title="CVE-2024-26925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27016" id="CVE-2024-27016" type="cve" title="CVE-2024-27016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27019" id="CVE-2024-27019" type="cve" title="CVE-2024-27019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27020" id="CVE-2024-27020" type="cve" title="CVE-2024-27020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27415" id="CVE-2024-27415" type="cve" title="CVE-2024-27415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35839" id="CVE-2024-35839" type="cve" title="CVE-2024-35839"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35896" id="CVE-2024-35896" type="cve" title="CVE-2024-35896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35897" id="CVE-2024-35897" type="cve" title="CVE-2024-35897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35898" id="CVE-2024-35898" type="cve" title="CVE-2024-35898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35962" id="CVE-2024-35962" type="cve" title="CVE-2024-35962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36003" id="CVE-2024-36003" type="cve" title="CVE-2024-36003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36025" id="CVE-2024-36025" type="cve" title="CVE-2024-36025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38538" id="CVE-2024-38538" type="cve" title="CVE-2024-38538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38540" id="CVE-2024-38540" type="cve" title="CVE-2024-38540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38544" id="CVE-2024-38544" type="cve" title="CVE-2024-38544"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38579" id="CVE-2024-38579" type="cve" title="CVE-2024-38579"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38608" id="CVE-2024-38608" type="cve" title="CVE-2024-38608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39476" id="CVE-2024-39476" type="cve" title="CVE-2024-39476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40905" id="CVE-2024-40905" type="cve" title="CVE-2024-40905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40911" id="CVE-2024-40911" type="cve" title="CVE-2024-40911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40912" id="CVE-2024-40912" type="cve" title="CVE-2024-40912"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40914" id="CVE-2024-40914" type="cve" title="CVE-2024-40914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40929" id="CVE-2024-40929" type="cve" title="CVE-2024-40929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40939" id="CVE-2024-40939" type="cve" title="CVE-2024-40939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40941" id="CVE-2024-40941" type="cve" title="CVE-2024-40941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40957" id="CVE-2024-40957" type="cve" title="CVE-2024-40957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40978" id="CVE-2024-40978" type="cve" title="CVE-2024-40978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40983" id="CVE-2024-40983" type="cve" title="CVE-2024-40983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41041" id="CVE-2024-41041" type="cve" title="CVE-2024-41041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41076" id="CVE-2024-41076" type="cve" title="CVE-2024-41076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41090" id="CVE-2024-41090" type="cve" title="CVE-2024-41090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41091" id="CVE-2024-41091" type="cve" title="CVE-2024-41091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42110" id="CVE-2024-42110" type="cve" title="CVE-2024-42110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42152" id="CVE-2024-42152" type="cve" title="CVE-2024-42152"/>
      <reference href="https://bugzilla.redhat.com/2265185" id="2265185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272797" id="2272797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273654" id="2273654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275742" id="2275742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275744" id="2275744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277166" id="2277166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278256" id="2278256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278258" id="2278258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278264" id="2278264" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281101" id="2281101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281284" id="2281284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281669" id="2281669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281672" id="2281672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281675" id="2281675" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281916" id="2281916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281958" id="2281958" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282720" id="2282720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283468" id="2283468" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284421" id="2284421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293356" id="2293356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293414" id="2293414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293455" id="2293455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293459" id="2293459" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293461" id="2293461" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295914" id="2295914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297489" id="2297489" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297495" id="2297495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297496" id="2297496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297498" id="2297498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297513" id="2297513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297523" id="2297523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297525" id="2297525" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297541" id="2297541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297562" id="2297562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297567" id="2297567" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2299240" id="2299240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2299336" id="2299336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300410" id="2300410" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300453" id="2300453" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301473" id="2301473" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301519" id="2301519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5928.html" id="ALSA-2024:5928" type="self" title="ALSA-2024:5928"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="kernel-headers" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-headers-5.14.0-427.33.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">11aeac6815462e21dfce7628e45c7b6fd58cebe06ce4e90610d4f39a2bd7f0b1</sum>
        </package>
        <package name="rv" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>rv-5.14.0-427.33.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">26d9af65cd4463e61022fa2e076a4cdce534ae2f6419338062974fcb052fdd14</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-427.33.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">48ca3ee3cabc65312b7007d5f1bdd51da3b47d62cea4212fabf1bf372baf9a7f</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-5.14.0-427.33.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">65b5f5316feaacc420bfe1f2e0e9f27dc5e3c3dc7c748f2fb7821869f0535943</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-427.33.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">6ab7273b3e1e32a08a34431bb4a138a742d2dd31e1347457fa2aad0c95bb9685</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-devel-5.14.0-427.33.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">7d7a4822a959efd053d6c096075507907c88884281bc293cc248590288f610eb</sum>
        </package>
        <package name="perf" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>perf-5.14.0-427.33.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">97c354386cd846ca14a3380f8b28de11230bc70046e29f8a2a568b918fc02b16</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-devel-matched-5.14.0-427.33.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">be166c137936d837672a936bcd2ca9375483e2f0f65a13f864abe6e0ff5b5f7f</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-doc-5.14.0-427.33.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">c652db69e7ae2a7888de8d1f379059d067e94fe3a5e03498067fa20f7cb4ae09</sum>
        </package>
        <package name="rtla" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>rtla-5.14.0-427.33.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c6e18bd0465cdf8cc1c920b3ac44da607309aea3fe06b6e579f76f6087baeb07</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-427.33.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">d5fe32ecd62f8de3fd2c2498f46bb2e7fb7b78017b3f08943e3ee25aab643b94</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5929</id>
    <title>Important: postgresql:16 security update</title>
    <issued date="2024-08-28 00:00:00"/>
    <updated date="2024-08-28 15:25:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:16 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks (CVE-2024-4317)
* postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5929" id="RHSA-2024:5929" type="rhsa" title="RHSA-2024:5929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4317" id="CVE-2024-4317" type="cve" title="CVE-2024-4317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7348" id="CVE-2024-7348" type="cve" title="CVE-2024-7348"/>
      <reference href="https://bugzilla.redhat.com/2279935" id="2279935" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303682" id="2303682" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5929.html" id="ALSA-2024:5929" type="self" title="ALSA-2024:5929"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <module name="postgresql" stream="16" version="9040020240828134336" context="8cf767d6" arch="s390x"/>
        <package name="postgresql-test" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-test-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">0ccff393a269c5b2c537c8bd96c9e2db26822eb171dc9410908725b084054343</sum>
        </package>
        <package name="postgresql-contrib" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-contrib-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">2eaede5222294b789713a13aff7077d05928a9f022a26dc03329c7ac7c5b82b3</sum>
        </package>
        <package name="postgresql" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">3875bc4f4963d4309c245f807670e69e5bad2341eae84a50fcfa93145fb929b0</sum>
        </package>
        <package name="postgresql-private-libs" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-private-libs-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">41c40b84467c89891609a2de2317466127cd91728973e2a497630ef92e55f0ee</sum>
        </package>
        <package name="postgresql-pltcl" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-pltcl-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">4cb757ccd6c33c2be6dd49bd84b8ae9020a36ac591f316733e88e6ebc15f50de</sum>
        </package>
        <package name="postgresql-plpython3" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-plpython3-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">8efe37374243ceefb7620a1529bbf7aa75c4cb1b12d30c81959947983491fdd1</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el9.4.0+66+eb9878bc" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el9.4.0+66+eb9878bc.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el9.4.0+66+eb9878bc.s390x.rpm</filename>
          <sum type="sha256">94efc54332bce0e7d22ea099915d7356397e7517cc3a90837d7e24725b87461e</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="noarch" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-test-rpm-macros-16.4-1.module_el9.4.0+109+624ac33a.noarch.rpm</filename>
          <sum type="sha256">9a63e985bd0be681d52f689ef51210d8174d13c50f2de4208d0a784cc74ab9d2</sum>
        </package>
        <package name="postgresql-server-devel" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-server-devel-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">9d00cedfbbd81f503571367b61e1161669a8fc19ee7e41af9fd65aa5c02c0661</sum>
        </package>
        <package name="postgresql-server" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-server-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">a03cd07e1e57406db0613cf2096b55e1c92cbb1f5f0d1e8ffc20bc40e2357617</sum>
        </package>
        <package name="postgresql-static" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-static-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">b00c079bffb2f8ef502a5e7d8d5f0884c5d3ac768815ccff50c244f2ac608172</sum>
        </package>
        <package name="postgresql-private-devel" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-private-devel-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">b5c42c8366f74c32bf969492c310465f127297313f352342740afdafd1295c0e</sum>
        </package>
        <package name="postgres-decoderbufs" version="2.4.0" release="1.Final.module_el9.4.0+66+eb9878bc" epoch="0" arch="s390x" src="postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.src.rpm">
          <filename>postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm</filename>
          <sum type="sha256">b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c</sum>
        </package>
        <package name="postgresql-docs" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-docs-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">bd37ba266bdd2e97e7d0ce98d6e5e58b8d698ff843b9638a3d06b433efc01bab</sum>
        </package>
        <package name="postgresql-plperl" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-plperl-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">bf343cd28274be8a57dfca6c3cf636e52a183df85660bcd2c8dc3d5e7d2411f4</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-upgrade-devel-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">c332750f7cc9f55e170fed972aa550a2eb91048d3e0b195443df46066d7d1ffb</sum>
        </package>
        <package name="postgresql-upgrade" version="16.4" release="1.module_el9.4.0+109+624ac33a" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el9.4.0+109+624ac33a.src.rpm">
          <filename>postgresql-upgrade-16.4-1.module_el9.4.0+109+624ac33a.s390x.rpm</filename>
          <sum type="sha256">da1abb4dfcea961c8a4fd263cf96322a15d08b999b37f76c7b80e0b51117e8b6</sum>
        </package>
        <package name="pgaudit" version="16.0" release="1.module_el9.4.0+66+eb9878bc" epoch="0" arch="s390x" src="pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.src.rpm">
          <filename>pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm</filename>
          <sum type="sha256">dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5999</id>
    <title>Important: postgresql security update</title>
    <issued date="2024-08-29 00:00:00"/>
    <updated date="2024-08-29 13:54:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5999" id="RHSA-2024:5999" type="rhsa" title="RHSA-2024:5999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7348" id="CVE-2024-7348" type="cve" title="CVE-2024-7348"/>
      <reference href="https://bugzilla.redhat.com/2303682" id="2303682" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5999.html" id="ALSA-2024:5999" type="self" title="ALSA-2024:5999"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="postgresql-plpython3" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-plpython3-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">13e05649e9a50d0093f9a360987fac86dc98e535d39fc11f416cb90b655e74e7</sum>
        </package>
        <package name="postgresql" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">2efc7b8c82e6450bd6f16cb5133937370467abe7497543249ff7c518d841b483</sum>
        </package>
        <package name="postgresql-plperl" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-plperl-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">4148977a3d11fedbf2593eff966d0317173f61177c428ae5f56588c56194619d</sum>
        </package>
        <package name="postgresql-upgrade" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-upgrade-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">50db5949f71dac5a564b7b076e042c64d1d525bf5d198f3a9d48d4827c466d1c</sum>
        </package>
        <package name="postgresql-contrib" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-contrib-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">5811b931cead3d09047a798f04bd22338abcaa493d7dd88dbcd4b44126b86275</sum>
        </package>
        <package name="postgresql-server" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-server-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">b94bf72eebfe2f8e9d7cf548a1193877e226f746e059d37f3970db229431ec82</sum>
        </package>
        <package name="postgresql-private-libs" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-private-libs-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c84919416be64fc8280306e320a227d21ff027fc68bb9ad57845297db86ec234</sum>
        </package>
        <package name="postgresql-pltcl" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-pltcl-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">e8e3419c59c24aa7b54ecbe8c2fbf492d7ebd3a28072298ece28f75e8ed489e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6020</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2024-08-29 00:00:00"/>
    <updated date="2024-08-29 13:44:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348)
* postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks (CVE-2024-4317)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6020" id="RHSA-2024:6020" type="rhsa" title="RHSA-2024:6020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4317" id="CVE-2024-4317" type="cve" title="CVE-2024-4317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7348" id="CVE-2024-7348" type="cve" title="CVE-2024-7348"/>
      <reference href="https://bugzilla.redhat.com/2279935" id="2279935" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303682" id="2303682" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6020.html" id="ALSA-2024:6020" type="self" title="ALSA-2024:6020"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <module name="postgresql" stream="15" version="9040020240829130124" context="8cf767d6" arch="s390x"/>
        <package name="postgresql-pltcl" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-pltcl-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">0694b2a480810fbf632c587a9a8b9e004f4b2e60e899cc309e863b6788890a66</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89</sum>
        </package>
        <package name="postgresql-private-libs" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-private-libs-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">340b50ddaf24d27acf77529d70917046dc2cf99d41834c97652ba9315b388f44</sum>
        </package>
        <package name="postgresql-server" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-server-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">34beaeeee69b202a29ae21757ba24b894cfbfee39917d520593381eff3725427</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445</sum>
        </package>
        <package name="postgresql" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">39aeb61d59f5026f8aa0826cd649afa1784c67c082fba357e25ef93ded01ce3c</sum>
        </package>
        <package name="postgresql-upgrade" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-upgrade-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">3e0976630f2d5ba24cdd9107404515614acbd8ca6b427b9a9d4392c276a0a863</sum>
        </package>
        <package name="postgresql-private-devel" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-private-devel-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">4427eeab882815d89d646d69e5cff537838fb42fe23b8c76f1ab8a13d38deacb</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-upgrade-devel-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">4582f6ff612fc537ea9112194fbd9fb37314a11eec7028e6cff8b606bfe96a97</sum>
        </package>
        <package name="postgresql-test" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-test-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">49006a663a2d767ed2785281b2c105dbcc8ec68b39a00a597b5c58fa43436cb9</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">5f868073dcfefc5ea23c26a1624fa9e78b698d25c3e02e08a7533e2e4c6589e2</sum>
        </package>
        <package name="postgresql-docs" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-docs-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">9bd90a46160c45e06f9631e7d3010c74c2c0159d45fd7c392bc1d36f8646ef79</sum>
        </package>
        <package name="postgresql-plpython3" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-plpython3-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">a5347b2efd6ac505ad08d02cf069f7d320afde5d16d25e0321887275c478b103</sum>
        </package>
        <package name="postgresql-contrib" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-contrib-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">b88e5d6bda54e31ceea627ff0cd27842686502e408436fb13492ebf6f142c4e6</sum>
        </package>
        <package name="postgresql-plperl" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-plperl-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">bdc9ac4537bebc94b6e8a6307756881e2ae6bd3320ebea3de24abe2cd4f7604b</sum>
        </package>
        <package name="postgresql-static" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-static-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">c3ed92181c140027b3c366d4d40cf66b784dce500cbf9bab8fda3c2d7cd956cd</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="noarch" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-test-rpm-macros-15.8-1.module_el9.4.0+111+667b9e9e.noarch.rpm</filename>
          <sum type="sha256">dee51d8823d2bdd22387d82a4d8e40de05058d00c94a5e9216bdaba278f792dd</sum>
        </package>
        <package name="postgresql-server-devel" version="15.8" release="1.module_el9.4.0+111+667b9e9e" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el9.4.0+111+667b9e9e.src.rpm">
          <filename>postgresql-server-devel-15.8-1.module_el9.4.0+111+667b9e9e.s390x.rpm</filename>
          <sum type="sha256">f7f0eadc171b4f5c1880e76784a28ec88b2db57453ef983439cf1e9ddbbae335</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6146</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-03 07:39:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.  The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately.  Documentation for Python is provided in the python3.12-docs package.  Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.

Security Fix(es):

* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6146" id="RHSA-2024:6146" type="rhsa" title="RHSA-2024:6146"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6146.html" id="ALSA-2024:6146" type="self" title="ALSA-2024:6146"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.12-libs" version="3.12.1" release="4.el9_4.3" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.3.src.rpm">
          <filename>python3.12-libs-3.12.1-4.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">0044f8837f3629750f669de199c5a38fc97a4479060a5f9b280325650dccb6f7</sum>
        </package>
        <package name="python3.12" version="3.12.1" release="4.el9_4.3" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.3.src.rpm">
          <filename>python3.12-3.12.1-4.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">a70cfed14937a859194f478c9b850e93f20e4a921073f749966379e5e2ac67ea</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.1" release="4.el9_4.3" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.3.src.rpm">
          <filename>python3.12-tkinter-3.12.1-4.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">ab27bc4384f98ca4ca314b23dc0bfbc9a5d2145aa9e994075f7d96141b542abd</sum>
        </package>
        <package name="python3.12-devel" version="3.12.1" release="4.el9_4.3" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.3.src.rpm">
          <filename>python3.12-devel-3.12.1-4.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">cb3b446df230eb4118863a7ccb0bc3165baaf469f5605bf9362792f8a9704f72</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6147</id>
    <title>Moderate: nodejs:18 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-03 13:09:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:18 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863)
* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6147" id="RHSA-2024:6147" type="rhsa" title="RHSA-2024:6147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22020" id="CVE-2024-22020" type="cve" title="CVE-2024-22020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28863" id="CVE-2024-28863" type="cve" title="CVE-2024-28863"/>
      <reference href="https://bugzilla.redhat.com/2293200" id="2293200" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296417" id="2296417" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6147.html" id="ALSA-2024:6147" type="self" title="ALSA-2024:6147"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <module name="nodejs" stream="18" version="9040020240903074554" context="8cf767d6" arch="s390x"/>
        <package name="nodejs" version="18.20.4" release="1.module_el9.4.0+112+bb28ff81" epoch="1" arch="s390x" src="nodejs-18.20.4-1.module_el9.4.0+112+bb28ff81.src.rpm">
          <filename>nodejs-18.20.4-1.module_el9.4.0+112+bb28ff81.s390x.rpm</filename>
          <sum type="sha256">453c4867352d2829b52d34979eec702c449aaeb85d2d9ffcb79fb4382dfb3c6f</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.2.0+36+853e48f5" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm</filename>
          <sum type="sha256">6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">7c19c5f85137e7d0b3132a379dc2d5364bd19e6da1ecee409666857bcc1a68d8</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.20.4" release="1.module_el9.4.0+112+bb28ff81" epoch="1" arch="s390x" src="nodejs-18.20.4-1.module_el9.4.0+112+bb28ff81.src.rpm">
          <filename>nodejs-full-i18n-18.20.4-1.module_el9.4.0+112+bb28ff81.s390x.rpm</filename>
          <sum type="sha256">7c65c11a838c2531a78015673461afa0a239f2f0b3f1b6894f429c56a5b0171f</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.1.0+13+d9a595ea" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.1.0+13+d9a595ea.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.1.0+13+d9a595ea.noarch.rpm</filename>
          <sum type="sha256">8c650e8cd661aec62ef26c2867e44b6902ba928bcd228650ecf14be525515ad0</sum>
        </package>
        <package name="nodejs-docs" version="18.20.4" release="1.module_el9.4.0+112+bb28ff81" epoch="1" arch="noarch" src="nodejs-18.20.4-1.module_el9.4.0+112+bb28ff81.src.rpm">
          <filename>nodejs-docs-18.20.4-1.module_el9.4.0+112+bb28ff81.noarch.rpm</filename>
          <sum type="sha256">c1e7db42d47c00e5e295bdcf95a9537a5fe05b24354641c7e5c16390e6498698</sum>
        </package>
        <package name="nodejs-devel" version="18.20.4" release="1.module_el9.4.0+112+bb28ff81" epoch="1" arch="s390x" src="nodejs-18.20.4-1.module_el9.4.0+112+bb28ff81.src.rpm">
          <filename>nodejs-devel-18.20.4-1.module_el9.4.0+112+bb28ff81.s390x.rpm</filename>
          <sum type="sha256">cbd646200d3a6a430329b481f5297b522ff6b565df8f8b37d1637c65191da268</sum>
        </package>
        <package name="npm" version="10.7.0" release="1.18.20.4.1.module_el9.4.0+112+bb28ff81" epoch="1" arch="s390x" src="nodejs-18.20.4-1.module_el9.4.0+112+bb28ff81.src.rpm">
          <filename>npm-10.7.0-1.18.20.4.1.module_el9.4.0+112+bb28ff81.s390x.rpm</filename>
          <sum type="sha256">f4ddd38c9784b1edf2b69239ffa894732b065b05053eace294677bbf43da363d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6163</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:28:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6163" id="RHSA-2024:6163" type="rhsa" title="RHSA-2024:6163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6163.html" id="ALSA-2024:6163" type="self" title="ALSA-2024:6163"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3-devel" version="3.9.18" release="3.el9_4.5" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.5.src.rpm">
          <filename>python3-devel-3.9.18-3.el9_4.5.s390x.rpm</filename>
          <sum type="sha256">6b3a8efa7556ee2f7ec32b27206240ecafc0355e27fc92599825b8ccdbd412a4</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.18" release="3.el9_4.5" epoch="0" arch="noarch" src="python3.9-3.9.18-3.el9_4.5.src.rpm">
          <filename>python-unversioned-command-3.9.18-3.el9_4.5.noarch.rpm</filename>
          <sum type="sha256">e1a6012337dbcb80e3b8adae23768f6d42391a00e2dab862efff55c711a18e90</sum>
        </package>
        <package name="python3-tkinter" version="3.9.18" release="3.el9_4.5" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.5.src.rpm">
          <filename>python3-tkinter-3.9.18-3.el9_4.5.s390x.rpm</filename>
          <sum type="sha256">e842a8b97147e569d1cb54c9a3153422c455beccd68918df7500885723db35cb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6166</id>
    <title>Moderate: krb5 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:26:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

* krb5: GSS message token handling (CVE-2024-37371)
* krb5: GSS message token handling (CVE-2024-37370)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6166" id="RHSA-2024:6166" type="rhsa" title="RHSA-2024:6166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37370" id="CVE-2024-37370" type="cve" title="CVE-2024-37370"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37371" id="CVE-2024-37371" type="cve" title="CVE-2024-37371"/>
      <reference href="https://bugzilla.redhat.com/2294676" id="2294676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294677" id="2294677" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6166.html" id="ALSA-2024:6166" type="self" title="ALSA-2024:6166"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="krb5-devel" version="1.21.1" release="2.el9_4" epoch="0" arch="s390x" src="krb5-1.21.1-2.el9_4.src.rpm">
          <filename>krb5-devel-1.21.1-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">4ec883a8ca6d13506d7bb71d23dbdfe02e27ce1fce1fd2649047afa7e9f95f4b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6179</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:24:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6179" id="RHSA-2024:6179" type="rhsa" title="RHSA-2024:6179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6179.html" id="ALSA-2024:6179" type="self" title="ALSA-2024:6179"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.11-devel" version="3.11.7" release="1.el9_4.5" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.5.src.rpm">
          <filename>python3.11-devel-3.11.7-1.el9_4.5.s390x.rpm</filename>
          <sum type="sha256">5243aec7838299ee93f547360e7a266e23f6775606af8e934192c882b51785ba</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.7" release="1.el9_4.5" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.5.src.rpm">
          <filename>python3.11-tkinter-3.11.7-1.el9_4.5.s390x.rpm</filename>
          <sum type="sha256">614ba2d5487beea86896d33be47e0b930caf53c6c3d34306c3983a5a887daf3d</sum>
        </package>
        <package name="python3.11-libs" version="3.11.7" release="1.el9_4.5" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.5.src.rpm">
          <filename>python3.11-libs-3.11.7-1.el9_4.5.s390x.rpm</filename>
          <sum type="sha256">e51a5f1c4797abfa9f1ed42b2b64848364366c25a4beb044fd6739f4c76d1e41</sum>
        </package>
        <package name="python3.11" version="3.11.7" release="1.el9_4.5" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.5.src.rpm">
          <filename>python3.11-3.11.7-1.el9_4.5.s390x.rpm</filename>
          <sum type="sha256">f33724a9aff08d9bc6205fe70d5117e38c0469746446d8c124e79bdb42cbc181</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6184</id>
    <title>Moderate: orc security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 09:13:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>orc security update</summary>
    <description>Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data.  The "language" is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic operations.

Security Fix(es):

* orc: Stack-based buffer overflow vulnerability in ORC (CVE-2024-40897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6184" id="RHSA-2024:6184" type="rhsa" title="RHSA-2024:6184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40897" id="CVE-2024-40897" type="cve" title="CVE-2024-40897"/>
      <reference href="https://bugzilla.redhat.com/2300010" id="2300010" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6184.html" id="ALSA-2024:6184" type="self" title="ALSA-2024:6184"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="orc" version="0.4.31" release="7.el9_4" epoch="0" arch="s390x" src="orc-0.4.31-7.el9_4.src.rpm">
          <filename>orc-0.4.31-7.el9_4.s390x.rpm</filename>
          <sum type="sha256">090c62a007a4ac8ef06b8e4a59427452b911acbc45d99ab41353d4e210c3743e</sum>
        </package>
        <package name="orc-devel" version="0.4.31" release="7.el9_4" epoch="0" arch="s390x" src="orc-0.4.31-7.el9_4.src.rpm">
          <filename>orc-devel-0.4.31-7.el9_4.s390x.rpm</filename>
          <sum type="sha256">498af633a70ed1ef5abd1f182e3fdca863451e667e03624b961aeb0b9bf2e1e2</sum>
        </package>
        <package name="orc-compiler" version="0.4.31" release="7.el9_4" epoch="0" arch="s390x" src="orc-0.4.31-7.el9_4.src.rpm">
          <filename>orc-compiler-0.4.31-7.el9_4.s390x.rpm</filename>
          <sum type="sha256">70ce91e581ea8295f483de1664b65a7ae96bf340077570a4524f7a1da24bba5f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6186</id>
    <title>Moderate: containernetworking-plugins security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:23:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>containernetworking-plugins security update</summary>
    <description>The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. 

Security Fix(es):

* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6186" id="RHSA-2024:6186" type="rhsa" title="RHSA-2024:6186"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24783" id="CVE-2024-24783" type="cve" title="CVE-2024-24783"/>
      <reference href="https://bugzilla.redhat.com/2268019" id="2268019" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6186.html" id="ALSA-2024:6186" type="self" title="ALSA-2024:6186"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="containernetworking-plugins" version="1.4.0" release="5.el9_4" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-5.el9_4.src.rpm">
          <filename>containernetworking-plugins-1.4.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">65387cbd789f38d9493400bb42bdba9bc4b828170992f94bc01927342d87f078</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6187</id>
    <title>Moderate: gvisor-tap-vsock security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-03 13:25:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gvisor-tap-vsock security update</summary>
    <description>A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding.

Security Fix(es):

* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6187" id="RHSA-2024:6187" type="rhsa" title="RHSA-2024:6187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24783" id="CVE-2024-24783" type="cve" title="CVE-2024-24783"/>
      <reference href="https://bugzilla.redhat.com/2268019" id="2268019" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6187.html" id="ALSA-2024:6187" type="self" title="ALSA-2024:6187"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="gvisor-tap-vsock" version="0.7.3" release="5.el9_4.alma.1" epoch="6" arch="s390x" src="gvisor-tap-vsock-0.7.3-5.el9_4.alma.1.src.rpm">
          <filename>gvisor-tap-vsock-0.7.3-5.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">0243834f1d37a1588bd8a06bac950d03093444a0fc95489aa0720b61b331082b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6188</id>
    <title>Moderate: runc security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:22:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>runc security update</summary>
    <description>The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.

Security Fix(es):

* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6188" id="RHSA-2024:6188" type="rhsa" title="RHSA-2024:6188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24783" id="CVE-2024-24783" type="cve" title="CVE-2024-24783"/>
      <reference href="https://bugzilla.redhat.com/2268019" id="2268019" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6188.html" id="ALSA-2024:6188" type="self" title="ALSA-2024:6188"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="runc" version="1.1.12" release="4.el9_4" epoch="4" arch="s390x" src="runc-1.1.12-4.el9_4.src.rpm">
          <filename>runc-1.1.12-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">2629602bcd40393f3d5c8a828dbca545723a5894620b40579e37190a3e079da7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6189</id>
    <title>Moderate: buildah security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-03 13:24:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. 

Security Fix(es):

* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6189" id="RHSA-2024:6189" type="rhsa" title="RHSA-2024:6189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24783" id="CVE-2024-24783" type="cve" title="CVE-2024-24783"/>
      <reference href="https://bugzilla.redhat.com/2268019" id="2268019" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6189.html" id="ALSA-2024:6189" type="self" title="ALSA-2024:6189"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="buildah-tests" version="1.33.7" release="4.el9_4" epoch="2" arch="s390x" src="buildah-1.33.7-4.el9_4.src.rpm">
          <filename>buildah-tests-1.33.7-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">394a60a34000ddc4f5e91765f6866225342ceef2beb4866bcbdebbc739683a45</sum>
        </package>
        <package name="buildah" version="1.33.7" release="4.el9_4" epoch="2" arch="s390x" src="buildah-1.33.7-4.el9_4.src.rpm">
          <filename>buildah-1.33.7-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">81cf725b0f6c502d1a08b64e012184ffa50e871abcb31028027a7d2d1c56194c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6192</id>
    <title>Moderate: wget security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:20:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wget security update</summary>
    <description>The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols.

Security Fix(es):

* wget: Misinterpretation of input may lead to improper behavior (CVE-2024-38428)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6192" id="RHSA-2024:6192" type="rhsa" title="RHSA-2024:6192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38428" id="CVE-2024-38428" type="cve" title="CVE-2024-38428"/>
      <reference href="https://bugzilla.redhat.com/2292836" id="2292836" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6192.html" id="ALSA-2024:6192" type="self" title="ALSA-2024:6192"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="wget" version="1.21.1" release="8.el9_4" epoch="0" arch="s390x" src="wget-1.21.1-8.el9_4.src.rpm">
          <filename>wget-1.21.1-8.el9_4.s390x.rpm</filename>
          <sum type="sha256">e61fedcfe951df916ca35758286b32a0fe0f594590f558e2ca440cdc9c62221e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6194</id>
    <title>Important: podman security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:19:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)
* go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)
* gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6194" id="RHSA-2024:6194" type="rhsa" title="RHSA-2024:6194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24783" id="CVE-2024-24783" type="cve" title="CVE-2024-24783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37298" id="CVE-2024-37298" type="cve" title="CVE-2024-37298"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6104" id="CVE-2024-6104" type="cve" title="CVE-2024-6104"/>
      <reference href="https://bugzilla.redhat.com/2268019" id="2268019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294000" id="2294000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295010" id="2295010" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6194.html" id="ALSA-2024:6194" type="self" title="ALSA-2024:6194"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="podman-remote" version="4.9.4" release="10.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-10.el9_4.src.rpm">
          <filename>podman-remote-4.9.4-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">8ae4d1e9faf7f2144b44123b66f084a8bbfdd0adee14f95774d9efe3726cec45</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="10.el9_4" epoch="4" arch="noarch" src="podman-4.9.4-10.el9_4.src.rpm">
          <filename>podman-docker-4.9.4-10.el9_4.noarch.rpm</filename>
          <sum type="sha256">9211804ac5d3c7cc1f7490d67ca70d07a72c9b68c3bc0830397903b832991129</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="10.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-10.el9_4.src.rpm">
          <filename>podman-tests-4.9.4-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">f3b4645129d4f522c082fa800e3fe3bf3d817d2ca3a45da57eb7af00f8c7749e</sum>
        </package>
        <package name="podman" version="4.9.4" release="10.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-10.el9_4.src.rpm">
          <filename>podman-4.9.4-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">f5cd26e686b73ec23ecf9567f25920c2e9d5a7f74766b9fdfd489a2260f4d16c</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="10.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-10.el9_4.src.rpm">
          <filename>podman-plugins-4.9.4-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">ffb0475f78cceb0ea7ee38a38f8b32b769bde7896a09341cae68aa326623d4e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6195</id>
    <title>Moderate: skopeo security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-03 13:22:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>skopeo security update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. 

Security Fix(es):

* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6195" id="RHSA-2024:6195" type="rhsa" title="RHSA-2024:6195"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24783" id="CVE-2024-24783" type="cve" title="CVE-2024-24783"/>
      <reference href="https://bugzilla.redhat.com/2268019" id="2268019" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6195.html" id="ALSA-2024:6195" type="self" title="ALSA-2024:6195"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="skopeo-tests" version="1.14.5" release="1.el9_4" epoch="2" arch="s390x" src="skopeo-1.14.5-1.el9_4.src.rpm">
          <filename>skopeo-tests-1.14.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">08bdccfc257a7cb5324b55ba177dc968e08ec54244237c31792f69e9a967b966</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="1.el9_4" epoch="2" arch="s390x" src="skopeo-1.14.5-1.el9_4.src.rpm">
          <filename>skopeo-1.14.5-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">d8d683815e17b0e9566c337e9b0ce941d50af218d161c89abb0b4ef34c890458</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6197</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:17:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: format string injection leads to shell command execution (SAFER bypass) (CVE-2024-29510)
* ghostscript: path traversal and command execution due to path reduction (CVE-2024-33869)
* ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths (CVE-2024-33870)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6197" id="RHSA-2024:6197" type="rhsa" title="RHSA-2024:6197"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-29510" id="CVE-2024-29510" type="cve" title="CVE-2024-29510"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33869" id="CVE-2024-33869" type="cve" title="CVE-2024-33869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33870" id="CVE-2024-33870" type="cve" title="CVE-2024-33870"/>
      <reference href="https://bugzilla.redhat.com/2293950" id="2293950" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293958" id="2293958" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293959" id="2293959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6197.html" id="ALSA-2024:6197" type="self" title="ALSA-2024:6197"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="ghostscript" version="9.54.0" release="17.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-17.el9_4.src.rpm">
          <filename>ghostscript-9.54.0-17.el9_4.s390x.rpm</filename>
          <sum type="sha256">2ce44cc9c030c1dfb0ba6ae77c7ebd11406786b905049d66e86543a252c0e8cc</sum>
        </package>
        <package name="ghostscript-tools-fonts" version="9.54.0" release="17.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-17.el9_4.src.rpm">
          <filename>ghostscript-tools-fonts-9.54.0-17.el9_4.s390x.rpm</filename>
          <sum type="sha256">2ec60ec5861f58494f3fe8c5539b636918c5ae725ffbba8638612e02c3e80356</sum>
        </package>
        <package name="ghostscript-x11" version="9.54.0" release="17.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-17.el9_4.src.rpm">
          <filename>ghostscript-x11-9.54.0-17.el9_4.s390x.rpm</filename>
          <sum type="sha256">624e69fe26ba034e9bcda18b655ad6c2337b2b2b6f94c16c1d1e7f6a2153db13</sum>
        </package>
        <package name="libgs" version="9.54.0" release="17.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-17.el9_4.src.rpm">
          <filename>libgs-9.54.0-17.el9_4.s390x.rpm</filename>
          <sum type="sha256">73ecf3a0c6d276c368f29892ed1ffedae4a35c08c62ad36587eaa02ff45a2a9b</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.54.0" release="17.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-17.el9_4.src.rpm">
          <filename>ghostscript-tools-printing-9.54.0-17.el9_4.s390x.rpm</filename>
          <sum type="sha256">750f0293fccb14dfa85b9e63d531a2bb2c261ca2a1c31743a9d617f3f4ae2e86</sum>
        </package>
        <package name="ghostscript-doc" version="9.54.0" release="17.el9_4" epoch="0" arch="noarch" src="ghostscript-9.54.0-17.el9_4.src.rpm">
          <filename>ghostscript-doc-9.54.0-17.el9_4.noarch.rpm</filename>
          <sum type="sha256">876f49c2bf4783256e97669baae56fdab8ac9e9e87b009224182323e48476af4</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.54.0" release="17.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-17.el9_4.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.54.0-17.el9_4.s390x.rpm</filename>
          <sum type="sha256">87a3b365280eeafcf87a8dda56868f91e3b6ddb8af0f378c952cf20e9587700f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6356</id>
    <title>Important: bubblewrap and flatpak security update</title>
    <issued date="2024-09-04 00:00:00"/>
    <updated date="2024-09-05 06:55:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bubblewrap and flatpak security update</summary>
    <description>Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.

Security Fix(es):

* flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6356" id="RHSA-2024:6356" type="rhsa" title="RHSA-2024:6356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42472" id="CVE-2024-42472" type="cve" title="CVE-2024-42472"/>
      <reference href="https://bugzilla.redhat.com/2305202" id="2305202" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6356.html" id="ALSA-2024:6356" type="self" title="ALSA-2024:6356"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="flatpak-session-helper" version="1.12.9" release="3.el9_4" epoch="0" arch="s390x" src="flatpak-1.12.9-3.el9_4.src.rpm">
          <filename>flatpak-session-helper-1.12.9-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">4dca9ab068ffacc00bd7e1236882d17c494ba792a98ca1fe5da7420772adf572</sum>
        </package>
        <package name="flatpak" version="1.12.9" release="3.el9_4" epoch="0" arch="s390x" src="flatpak-1.12.9-3.el9_4.src.rpm">
          <filename>flatpak-1.12.9-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">57f82acad52a8c6800f53a1e0189298e47e6a9a3ecbfc191d26080519bcf7091</sum>
        </package>
        <package name="flatpak-selinux" version="1.12.9" release="3.el9_4" epoch="0" arch="noarch" src="flatpak-1.12.9-3.el9_4.src.rpm">
          <filename>flatpak-selinux-1.12.9-3.el9_4.noarch.rpm</filename>
          <sum type="sha256">7e2b017a0ca2293f95a3bb3e8e7162e4f52deabe086853c3704c4fd5c5048d1e</sum>
        </package>
        <package name="flatpak-libs" version="1.12.9" release="3.el9_4" epoch="0" arch="s390x" src="flatpak-1.12.9-3.el9_4.src.rpm">
          <filename>flatpak-libs-1.12.9-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">aacd40b255034e3da04ac9a4efc5cb675dc07011fd189a889a257ff40087f311</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6464</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2024-09-09 00:00:00"/>
    <updated date="2024-09-10 06:20:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib2: Signal subscription vulnerabilities (CVE-2024-34397)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6464" id="RHSA-2024:6464" type="rhsa" title="RHSA-2024:6464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34397" id="CVE-2024-34397" type="cve" title="CVE-2024-34397"/>
      <reference href="https://bugzilla.redhat.com/2279632" id="2279632" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6464.html" id="ALSA-2024:6464" type="self" title="ALSA-2024:6464"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="glib2-doc" version="2.68.4" release="14.el9_4.1" epoch="0" arch="noarch" src="glib2-2.68.4-14.el9_4.1.src.rpm">
          <filename>glib2-doc-2.68.4-14.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">6f5dc26757eaf41ad7827166a1f9d8d08025b1145beab9ac66b523b2b90f55f1</sum>
        </package>
        <package name="glib2-tests" version="2.68.4" release="14.el9_4.1" epoch="0" arch="s390x" src="glib2-2.68.4-14.el9_4.1.src.rpm">
          <filename>glib2-tests-2.68.4-14.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">7a9a814e1720e3674dddb25e1d1e592798c6263bb2b4a7eb6a389b74380d8030</sum>
        </package>
        <package name="glib2-devel" version="2.68.4" release="14.el9_4.1" epoch="0" arch="s390x" src="glib2-2.68.4-14.el9_4.1.src.rpm">
          <filename>glib2-devel-2.68.4-14.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">963bea2782464473e09792fe5855a86bada303c4f865eeae963f99f743462735</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6510</id>
    <title>Moderate: emacs security update</title>
    <issued date="2024-09-09 00:00:00"/>
    <updated date="2024-09-10 06:22:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>emacs security update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6510" id="RHSA-2024:6510" type="rhsa" title="RHSA-2024:6510"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39331" id="CVE-2024-39331" type="cve" title="CVE-2024-39331"/>
      <reference href="https://bugzilla.redhat.com/2293942" id="2293942" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6510.html" id="ALSA-2024:6510" type="self" title="ALSA-2024:6510"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="emacs-nox" version="27.2" release="10.el9_4" epoch="1" arch="s390x" src="emacs-27.2-10.el9_4.src.rpm">
          <filename>emacs-nox-27.2-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">1dfd21688a7a31c380adcd1a5c32ee100ad5f47779bb7509c970653ed46f86da</sum>
        </package>
        <package name="emacs-lucid" version="27.2" release="10.el9_4" epoch="1" arch="s390x" src="emacs-27.2-10.el9_4.src.rpm">
          <filename>emacs-lucid-27.2-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">430423b1ede43c153b79741c267b1ceac04e29c924a24bfcc2af31132db516c9</sum>
        </package>
        <package name="emacs-common" version="27.2" release="10.el9_4" epoch="1" arch="s390x" src="emacs-27.2-10.el9_4.src.rpm">
          <filename>emacs-common-27.2-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">aadc7dbb9770b5e5bbfa796add0fb30d09adce7fe79815631cc0ca4cdb4b2255</sum>
        </package>
        <package name="emacs" version="27.2" release="10.el9_4" epoch="1" arch="s390x" src="emacs-27.2-10.el9_4.src.rpm">
          <filename>emacs-27.2-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">cfd9744bd0100cc5a7e11a8b38a45681f5dfbf4c9eb20326022f991f0f17405b</sum>
        </package>
        <package name="emacs-filesystem" version="27.2" release="10.el9_4" epoch="1" arch="noarch" src="emacs-27.2-10.el9_4.src.rpm">
          <filename>emacs-filesystem-27.2-10.el9_4.noarch.rpm</filename>
          <sum type="sha256">ef93dbe7e32a0acc409bf52449feea9913b5cd3c0d64f9cc01d02a7b54c2ce33</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6529</id>
    <title>Moderate: dovecot security update</title>
    <issued date="2024-09-10 00:00:00"/>
    <updated date="2024-09-11 09:48:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: using a large number of address headers may trigger a denial of service (CVE-2024-23184)
* dovecot: very large headers can cause resource exhaustion when parsing message (CVE-2024-23185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6529" id="RHSA-2024:6529" type="rhsa" title="RHSA-2024:6529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23184" id="CVE-2024-23184" type="cve" title="CVE-2024-23184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23185" id="CVE-2024-23185" type="cve" title="CVE-2024-23185"/>
      <reference href="https://bugzilla.redhat.com/2305909" id="2305909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2305910" id="2305910" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6529.html" id="ALSA-2024:6529" type="self" title="ALSA-2024:6529"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="dovecot-mysql" version="2.3.16" release="11.el9_4.1" epoch="1" arch="s390x" src="dovecot-2.3.16-11.el9_4.1.src.rpm">
          <filename>dovecot-mysql-2.3.16-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">415eeaffc476826d809b7676e9fd03b08c5d28868d597ead6bf1da23f2b3ce7f</sum>
        </package>
        <package name="dovecot-pgsql" version="2.3.16" release="11.el9_4.1" epoch="1" arch="s390x" src="dovecot-2.3.16-11.el9_4.1.src.rpm">
          <filename>dovecot-pgsql-2.3.16-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">d9ca3a2a839759d49df49863ce5eeed97908b5fa2249988fc27368706a64bf81</sum>
        </package>
        <package name="dovecot-pigeonhole" version="2.3.16" release="11.el9_4.1" epoch="1" arch="s390x" src="dovecot-2.3.16-11.el9_4.1.src.rpm">
          <filename>dovecot-pigeonhole-2.3.16-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">db70d10736bb948c296a521eec1183e450237b1ce3df97397bce3a6cf735f5a3</sum>
        </package>
        <package name="dovecot" version="2.3.16" release="11.el9_4.1" epoch="1" arch="s390x" src="dovecot-2.3.16-11.el9_4.1.src.rpm">
          <filename>dovecot-2.3.16-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">fc71161a7ec261c53c2061aab1f747a5ba69ea956051108a9eb1430034be351e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6567</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-09-11 00:00:00"/>
    <updated date="2024-11-03 22:31:51"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
  * kernel: nfsd: fix RELEASE_LOCKOWNER (CVE-2024-26629)
  * kernel: mm: cachestat: fix folio read-after-free in cache walk (CVE-2024-26630)
  * kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (CVE-2024-26720)
  * kernel: Bluetooth: af_bluetooth: Fix deadlock (CVE-2024-26886)
  * kernel: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (CVE-2024-26946)
  * kernel: KVM: SVM: Flush pages under kvm-&amp;gt;lock to fix UAF in svm_register_enc_region() (CVE-2024-35791)
  * kernel: mm: cachestat: fix two shmem bugs (CVE-2024-35797)
  * kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems (CVE-2024-35875)
  * kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
  * kernel: iommufd: Fix missing update of domains_itree after splitting iopt_area (CVE-2023-52801)
  * kernel: net: fix out-of-bounds access in ops_init (CVE-2024-36883)
  * kernel: regmap: maple: Fix cache corruption in regcache_maple_drop() (CVE-2024-36019)
  * kernel: usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619)
  * kernel: net: bridge: mst: fix vlan use-after-free (CVE-2024-36979)
  * kernel: scsi: qedf: Ensure the copied buf is NUL terminated (CVE-2024-38559)
  * kernel: xhci: Handle TD clearing for multiple streams case (CVE-2024-40927)
  * kernel: cxl/region: Fix memregion leaks in devm_cxl_add_region() (CVE-2024-40936)
  * kernel: net/sched: Fix UAF when resolving a clash (CVE-2024-41040)
  * kernel: ppp: reject claimed-as-LCP but actually malformed packets (CVE-2024-41044)
  * kernel: mm: prevent derefencing NULL ptr in pfn_section_valid() (CVE-2024-41055)
  * kernel: PCI/MSI: Fix UAF in msi_capability_init (CVE-2024-41096)
  * kernel: xdp: Remove WARN() from __xdp_reg_mem_model() (CVE-2024-42082)
  * kernel: x86: stop playing stack games in profile_pc() (CVE-2024-42096)
  * kernel: Revert &amp;#34;mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again&amp;#34; (CVE-2024-42102)
  * kernel: mm: avoid overflows in dirty throttling logic (CVE-2024-42131)
  * kernel: nvme: avoid double free special payload (CVE-2024-41073)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6567" id="RHSA-2024:6567" type="rhsa" title="RHSA-2024:6567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52463" id="CVE-2023-52463" type="cve" title="CVE-2023-52463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52801" id="CVE-2023-52801" type="cve" title="CVE-2023-52801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26629" id="CVE-2024-26629" type="cve" title="CVE-2024-26629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26630" id="CVE-2024-26630" type="cve" title="CVE-2024-26630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26720" id="CVE-2024-26720" type="cve" title="CVE-2024-26720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26886" id="CVE-2024-26886" type="cve" title="CVE-2024-26886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26946" id="CVE-2024-26946" type="cve" title="CVE-2024-26946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35791" id="CVE-2024-35791" type="cve" title="CVE-2024-35791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35797" id="CVE-2024-35797" type="cve" title="CVE-2024-35797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35875" id="CVE-2024-35875" type="cve" title="CVE-2024-35875"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36000" id="CVE-2024-36000" type="cve" title="CVE-2024-36000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36019" id="CVE-2024-36019" type="cve" title="CVE-2024-36019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36883" id="CVE-2024-36883" type="cve" title="CVE-2024-36883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36979" id="CVE-2024-36979" type="cve" title="CVE-2024-36979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38559" id="CVE-2024-38559" type="cve" title="CVE-2024-38559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38619" id="CVE-2024-38619" type="cve" title="CVE-2024-38619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40927" id="CVE-2024-40927" type="cve" title="CVE-2024-40927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40936" id="CVE-2024-40936" type="cve" title="CVE-2024-40936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41040" id="CVE-2024-41040" type="cve" title="CVE-2024-41040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41044" id="CVE-2024-41044" type="cve" title="CVE-2024-41044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41055" id="CVE-2024-41055" type="cve" title="CVE-2024-41055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41073" id="CVE-2024-41073" type="cve" title="CVE-2024-41073"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41096" id="CVE-2024-41096" type="cve" title="CVE-2024-41096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42082" id="CVE-2024-42082" type="cve" title="CVE-2024-42082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42096" id="CVE-2024-42096" type="cve" title="CVE-2024-42096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42102" id="CVE-2024-42102" type="cve" title="CVE-2024-42102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42131" id="CVE-2024-42131" type="cve" title="CVE-2024-42131"/>
      <reference href="https://bugzilla.redhat.com/2265797" id="2265797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269434" id="2269434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269436" id="2269436" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273141" id="2273141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275678" id="2275678" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278206" id="2278206" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281052" id="2281052" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281151" id="2281151" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281727" id="2281727" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281968" id="2281968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282709" id="2282709" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284271" id="2284271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284402" id="2284402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293273" id="2293273" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293276" id="2293276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293440" id="2293440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297511" id="2297511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297520" id="2297520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300409" id="2300409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300414" id="2300414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300429" id="2300429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300491" id="2300491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300520" id="2300520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300713" id="2300713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301465" id="2301465" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301496" id="2301496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301637" id="2301637" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6567.html" id="ALSA-2024:6567" type="self" title="ALSA-2024:6567"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="kernel-headers" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-headers-5.14.0-427.35.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">11b659f3d001cfbb4b3871b2447ef7a0e48ffd09e2e85833ebd1641ad2f478a8</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-427.35.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">17bb7f6d5988eb5aa346e5a42dab2df8a1a5ff18a05b860bd4189f5179655ade</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-427.35.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">3ffc160bb8c246eeff4a0af75f7d490ed0a2dbe0babd51dc3f5aeb70e8063d17</sum>
        </package>
        <package name="rtla" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>rtla-5.14.0-427.35.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">4d928c42de8ba65cd8bccafb24db657e0e361e80940a485663ebdfd07643454f</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-devel-5.14.0-427.35.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">523d457ef79a1d00e2eb46fc3fcefd5f1ae027c9b134ba4aab13f23f7a0a52eb</sum>
        </package>
        <package name="perf" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>perf-5.14.0-427.35.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">67ed643eebe5293af33b8c0cb228c595d8bea4075c946ffdb8eeea3a9a849aa4</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-devel-matched-5.14.0-427.35.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">7b9cd04a0e3204d68d6f044d91c9f05a31e9f88c3dd812b0f75ffe423338d80b</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-doc-5.14.0-427.35.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">8940be9bc5c5169ae4ed41a0408afd2d67daf12a689a4ebc2b947485cfb89c5b</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-5.14.0-427.35.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">92dac77d111962f0be9789bf7a38ebdd58974123606c9c212658851765b21870</sum>
        </package>
        <package name="rv" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>rv-5.14.0-427.35.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">9c4ce119e04f6c69091db13f2cffb87277fb6dd08f4c124bafc3b922347a1dfc</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-427.35.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">cb13f2a43c5dac4aa695fe81398df2719bf9079ece764af2fb975876a4cebef6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6681</id>
    <title>Important: firefox security update</title>
    <issued date="2024-09-16 00:00:00"/>
    <updated date="2024-09-20 18:08:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: 115.15/128.2 ESR ()
* mozilla: Type confusion when looking up a property name in a &amp;quot;with&amp;quot; block (CVE-2024-8381)
* mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran (CVE-2024-8382)
* mozilla: Firefox did not ask before openings news: links in an external application (CVE-2024-8383)
* mozilla: Garbage collection could mis-color cross-compartment objects in OOM conditions (CVE-2024-8384)
* mozilla: WASM type confusion involving ArrayTypes (CVE-2024-8385)
* mozilla: SelectElements could be shown over another site if popups are allowed (CVE-2024-8386)
* mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 (CVE-2024-8387)
* mozilla: Type Confusion in Async Generators in Javascript Engine (CVE-2024-7652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6681" id="RHSA-2024:6681" type="rhsa" title="RHSA-2024:6681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7652" id="CVE-2024-7652" type="cve" title="CVE-2024-7652"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8381" id="CVE-2024-8381" type="cve" title="CVE-2024-8381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8382" id="CVE-2024-8382" type="cve" title="CVE-2024-8382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8383" id="CVE-2024-8383" type="cve" title="CVE-2024-8383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8384" id="CVE-2024-8384" type="cve" title="CVE-2024-8384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8385" id="CVE-2024-8385" type="cve" title="CVE-2024-8385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8386" id="CVE-2024-8386" type="cve" title="CVE-2024-8386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8387" id="CVE-2024-8387" type="cve" title="CVE-2024-8387"/>
      <reference href="https://bugzilla.redhat.com/2309427" id="2309427" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309428" id="2309428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309429" id="2309429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309430" id="2309430" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309431" id="2309431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309432" id="2309432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309433" id="2309433" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310490" id="2310490" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6681.html" id="ALSA-2024:6681" type="self" title="ALSA-2024:6681"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="firefox-x11" version="128.2.0" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-128.2.0-1.el9_4.alma.1.src.rpm">
          <filename>firefox-x11-128.2.0-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">9ef450f7fbcb93f2a8dc347d8365244f19dce30a76d63167b1fc5d48b213102d</sum>
        </package>
        <package name="firefox" version="128.2.0" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-128.2.0-1.el9_4.alma.1.src.rpm">
          <filename>firefox-128.2.0-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">f63537e35fbba933eeb2d506abc0d1119d121bb087be2f29b951dcb82953f616</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6683</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-09-16 00:00:00"/>
    <updated date="2024-09-20 18:06:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* thunderbird: 115.15/128.2 ()
* mozilla: Type confusion when looking up a property name in a &amp;quot;with&amp;quot; block (CVE-2024-8381)
* mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran (CVE-2024-8382)
* mozilla: Garbage collection could mis-color cross-compartment objects in OOM conditions (CVE-2024-8384)
* mozilla: WASM type confusion involving ArrayTypes (CVE-2024-8385)
* mozilla: SelectElements could be shown over another site if popups are allowed (CVE-2024-8386)
* mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 (CVE-2024-8387)
* thunderbird: Crash when aborting verification of OTR chat (CVE-2024-8394)
* mozilla: Type Confusion in Async Generators in Javascript Engine (CVE-2024-7652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6683" id="RHSA-2024:6683" type="rhsa" title="RHSA-2024:6683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7652" id="CVE-2024-7652" type="cve" title="CVE-2024-7652"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8381" id="CVE-2024-8381" type="cve" title="CVE-2024-8381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8382" id="CVE-2024-8382" type="cve" title="CVE-2024-8382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8384" id="CVE-2024-8384" type="cve" title="CVE-2024-8384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8385" id="CVE-2024-8385" type="cve" title="CVE-2024-8385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8386" id="CVE-2024-8386" type="cve" title="CVE-2024-8386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8387" id="CVE-2024-8387" type="cve" title="CVE-2024-8387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8394" id="CVE-2024-8394" type="cve" title="CVE-2024-8394"/>
      <reference href="https://bugzilla.redhat.com/2309427" id="2309427" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309428" id="2309428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309430" id="2309430" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309431" id="2309431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309432" id="2309432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309433" id="2309433" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310481" id="2310481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310490" id="2310490" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6683.html" id="ALSA-2024:6683" type="self" title="ALSA-2024:6683"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="thunderbird" version="128.2.0" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="thunderbird-128.2.0-1.el9_4.alma.1.src.rpm">
          <filename>thunderbird-128.2.0-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">2acdbd5c84981f1a66513bcb2fb3d28c5bc23625b3ff31e6c74236844499697c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6726</id>
    <title>Important: fence-agents security update</title>
    <issued date="2024-09-17 00:00:00"/>
    <updated date="2024-09-18 14:46:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. 

Security Fix(es):

* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6726" id="RHSA-2024:6726" type="rhsa" title="RHSA-2024:6726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6726.html" id="ALSA-2024:6726" type="self" title="ALSA-2024:6726"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="fence-agents-kubevirt" version="4.10.0" release="62.el9_4.5" epoch="0" arch="s390x" src="fence-agents-4.10.0-62.el9_4.5.src.rpm">
          <filename>fence-agents-kubevirt-4.10.0-62.el9_4.5.s390x.rpm</filename>
          <sum type="sha256">148727be2c6d0347123c1ee47bd109be77e90634187de47850bd488ec41206fc</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.10.0" release="62.el9_4.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9_4.5.src.rpm">
          <filename>fence-agents-ibm-vpc-4.10.0-62.el9_4.5.noarch.rpm</filename>
          <sum type="sha256">3d429e1c1ae226a8b751760329fee14d0cd426cd371379edb1ba91204b2efac3</sum>
        </package>
        <package name="fence-agents-ibm-powervs" version="4.10.0" release="62.el9_4.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9_4.5.src.rpm">
          <filename>fence-agents-ibm-powervs-4.10.0-62.el9_4.5.noarch.rpm</filename>
          <sum type="sha256">6d9d0109c086db60429c98c9cf1a8434e74b836d2cea1263a7b223558363651e</sum>
        </package>
        <package name="fence-agents-common" version="4.10.0" release="62.el9_4.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9_4.5.src.rpm">
          <filename>fence-agents-common-4.10.0-62.el9_4.5.noarch.rpm</filename>
          <sum type="sha256">bb8e86bfef0b69d3c507e075d45f573402d5a0993d7200167ee06a3de8e6c7a6</sum>
        </package>
        <package name="fence-agents-virsh" version="4.10.0" release="62.el9_4.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-62.el9_4.5.src.rpm">
          <filename>fence-agents-virsh-4.10.0-62.el9_4.5.noarch.rpm</filename>
          <sum type="sha256">dc5f33cff413eeb80c3345d8820de96512dc3267e77e6ac41b565ab725436d8c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6754</id>
    <title>Moderate: expat security update</title>
    <issued date="2024-09-18 00:00:00"/>
    <updated date="2024-09-19 07:30:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.

Security Fix(es):

* libexpat: Negative Length Parsing Vulnerability in libexpat (CVE-2024-45490)
* libexpat: Integer Overflow or Wraparound (CVE-2024-45491)
* libexpat: integer overflow (CVE-2024-45492)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6754" id="RHSA-2024:6754" type="rhsa" title="RHSA-2024:6754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45490" id="CVE-2024-45490" type="cve" title="CVE-2024-45490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45491" id="CVE-2024-45491" type="cve" title="CVE-2024-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45492" id="CVE-2024-45492" type="cve" title="CVE-2024-45492"/>
      <reference href="https://bugzilla.redhat.com/2308615" id="2308615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2308616" id="2308616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2308617" id="2308617" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6754.html" id="ALSA-2024:6754" type="self" title="ALSA-2024:6754"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="expat-devel" version="2.5.0" release="2.el9_4.1" epoch="0" arch="s390x" src="expat-2.5.0-2.el9_4.1.src.rpm">
          <filename>expat-devel-2.5.0-2.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">5fea1267d90bf8a5ef17bd02da90c3734ea7b6744c97f892483cbbdfff38e246</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6757</id>
    <title>Moderate: libnbd security update</title>
    <issued date="2024-09-18 00:00:00"/>
    <updated date="2024-09-20 13:13:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libnbd security update</summary>
    <description>Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients.

Security Fix(es):

* libnbd: NBD server improper certificate validation (CVE-2024-7383)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6757" id="RHSA-2024:6757" type="rhsa" title="RHSA-2024:6757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7383" id="CVE-2024-7383" type="cve" title="CVE-2024-7383"/>
      <reference href="https://bugzilla.redhat.com/2302865" id="2302865" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6757.html" id="ALSA-2024:6757" type="self" title="ALSA-2024:6757"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3-libnbd" version="1.18.1" release="4.el9_4" epoch="0" arch="s390x" src="libnbd-1.18.1-4.el9_4.src.rpm">
          <filename>python3-libnbd-1.18.1-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">1d3dc4d74e4b59ece06bcfdaee1a33c5755683914f2138fc59fa68312af8373a</sum>
        </package>
        <package name="nbdfuse" version="1.18.1" release="4.el9_4" epoch="0" arch="s390x" src="libnbd-1.18.1-4.el9_4.src.rpm">
          <filename>nbdfuse-1.18.1-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">20153f29b661828830135b62a8402c1af038a0c548f8f4dc67be4a9b1aa3606c</sum>
        </package>
        <package name="libnbd-bash-completion" version="1.18.1" release="4.el9_4" epoch="0" arch="noarch" src="libnbd-1.18.1-4.el9_4.src.rpm">
          <filename>libnbd-bash-completion-1.18.1-4.el9_4.noarch.rpm</filename>
          <sum type="sha256">7567f1ba72caef39942e13d41c4c9c22ca2f3f47a99cbe2f37fffb64b4507430</sum>
        </package>
        <package name="libnbd" version="1.18.1" release="4.el9_4" epoch="0" arch="s390x" src="libnbd-1.18.1-4.el9_4.src.rpm">
          <filename>libnbd-1.18.1-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">baeccd30455ca1235abdd0d998d23cb146d7c7dea7b28a652ae76b9ede41f821</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6783</id>
    <title>Moderate: openssl security update</title>
    <issued date="2024-09-18 00:00:00"/>
    <updated date="2024-09-19 07:29:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: Possible denial of service in X.509 name checks (CVE-2024-6119)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6783" id="RHSA-2024:6783" type="rhsa" title="RHSA-2024:6783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6119" id="CVE-2024-6119" type="cve" title="CVE-2024-6119"/>
      <reference href="https://bugzilla.redhat.com/2306158" id="2306158" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6783.html" id="ALSA-2024:6783" type="self" title="ALSA-2024:6783"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="openssl-devel" version="3.0.7" release="28.el9_4" epoch="1" arch="s390x" src="openssl-3.0.7-28.el9_4.src.rpm">
          <filename>openssl-devel-3.0.7-28.el9_4.s390x.rpm</filename>
          <sum type="sha256">8aa7dc0be97aa1fdfd06b2076036e2fe521d66834c3e459e0ad82b633b6c2f70</sum>
        </package>
        <package name="openssl-perl" version="3.0.7" release="28.el9_4" epoch="1" arch="s390x" src="openssl-3.0.7-28.el9_4.src.rpm">
          <filename>openssl-perl-3.0.7-28.el9_4.s390x.rpm</filename>
          <sum type="sha256">e4f7c819f47a40c83403c88f7d734c1a4504cbcbfb12febc24a9aebfa0a143d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6785</id>
    <title>Moderate: ruby:3.3 security update</title>
    <issued date="2024-09-18 00:00:00"/>
    <updated date="2024-09-19 16:35:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.3 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

* rexml: DoS vulnerability in REXML (CVE-2024-39908)
* rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, &gt;] and ]&gt; (CVE-2024-41123)
* rexml: DoS vulnerability in REXML (CVE-2024-41946)
* rexml: DoS vulnerability in REXML (CVE-2024-43398)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6785" id="RHSA-2024:6785" type="rhsa" title="RHSA-2024:6785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39908" id="CVE-2024-39908" type="cve" title="CVE-2024-39908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41123" id="CVE-2024-41123" type="cve" title="CVE-2024-41123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41946" id="CVE-2024-41946" type="cve" title="CVE-2024-41946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43398" id="CVE-2024-43398" type="cve" title="CVE-2024-43398"/>
      <reference href="https://bugzilla.redhat.com/2298243" id="2298243" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302268" id="2302268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302272" id="2302272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307297" id="2307297" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6785.html" id="ALSA-2024:6785" type="self" title="ALSA-2024:6785"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <module name="ruby" stream="3.3" version="9040020240404125003" context="8cf767d6" arch="s390x"/>
        <package name="rubygem-rexml" version="3.3.6" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-rexml-3.3.6-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">01b567338af4d61c6a835bbaebc646a8595f5cd016e21509794a81b393c75f8c</sum>
        </package>
        <package name="ruby-default-gems" version="3.3.5" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>ruby-default-gems-3.3.5-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">0351daf0db7b974a5f6477748ecbf3279a489aaad57ed5f65f7c6902d1701587</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.5" release="1.module_el9.4.0+75+1a8fe981" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.5-1.module_el9.4.0+75+1a8fe981.src.rpm">
          <filename>rubygem-mysql2-0.5.5-1.module_el9.4.0+75+1a8fe981.s390x.rpm</filename>
          <sum type="sha256">05258957f4a8ba14cc6ebf5219ecc4e0e325a64dcd11edc78435445fb2231e41</sum>
        </package>
        <package name="ruby-devel" version="3.3.5" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>ruby-devel-3.3.5-3.module_el9.4.0+115+226a984b.s390x.rpm</filename>
          <sum type="sha256">0a03825ea7bbe60ff05a00f14a5cb16999ae6d085fc4c1ecd4f6d1bb7aef8baa</sum>
        </package>
        <package name="rubygem-psych" version="5.1.2" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-psych-5.1.2-3.module_el9.4.0+115+226a984b.s390x.rpm</filename>
          <sum type="sha256">0a89bd3ea548c70760c15fefa5eb84229b72f9393fc33aebfb57883966aa2ebf</sum>
        </package>
        <package name="ruby-doc" version="3.3.5" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>ruby-doc-3.3.5-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">10a6e030a0e01466854ff77a489671066c0afae33a9c302a7b4a2b1759d0e9a4</sum>
        </package>
        <package name="rubygem-bundler" version="2.5.16" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-bundler-2.5.16-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">1dad4f622c6d8e5718e20d88f2fdfd4805c58b17cbb3c5b007d4c17511132a0c</sum>
        </package>
        <package name="rubygem-io-console" version="0.7.1" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-io-console-0.7.1-3.module_el9.4.0+115+226a984b.s390x.rpm</filename>
          <sum type="sha256">25c96b780574575854ea6815c560e86208465445fcbdc6e6b9684cc18c256cf1</sum>
        </package>
        <package name="rubygems" version="3.5.16" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygems-3.5.16-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">26b6048365106718e21840305172ce1de134b53c73690d93b49e95d30699b806</sum>
        </package>
        <package name="ruby-libs" version="3.3.5" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>ruby-libs-3.3.5-3.module_el9.4.0+115+226a984b.s390x.rpm</filename>
          <sum type="sha256">2abc6e6f85b7585eea1bc29e82e7cc1b39e9f27af9165a13a6c9a87b1736fff9</sum>
        </package>
        <package name="rubygems-devel" version="3.5.16" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygems-devel-3.5.16-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">2cec22f63f0ee9a4743b8b035f6219accf700d2f7b7f53c8da4ea18a52396e7e</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.5" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-bigdecimal-3.1.5-3.module_el9.4.0+115+226a984b.s390x.rpm</filename>
          <sum type="sha256">2dc4dede6b949f484de0f62b13decb8089aa0f3e17ef287cb8bfe470a76a0694</sum>
        </package>
        <package name="rubygem-test-unit" version="3.6.1" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-test-unit-3.6.1-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">36815187b458555d7c33e736abe8606c9b47f05e1f4f5431dd04df376ed1ecb1</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.5.4" release="1.module_el9.4.0+75+1a8fe981" epoch="0" arch="noarch" src="rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.src.rpm">
          <filename>rubygem-pg-doc-1.5.4-1.module_el9.4.0+75+1a8fe981.noarch.rpm</filename>
          <sum type="sha256">37ef36e0456b9c62427f8dd08442c622c134e026ded1488b8fd55487b69d2a58</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.5" release="1.module_el9.4.0+75+1a8fe981" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.5-1.module_el9.4.0+75+1a8fe981.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.5-1.module_el9.4.0+75+1a8fe981.noarch.rpm</filename>
          <sum type="sha256">65b0d0cc45f0088e7962db0543b7f1672cbc730924b371f28cdda18a25b33edf</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.3" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-power_assert-2.0.3-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">6933cce96666eb2c7a499796b717c035a58461dbd8727c62c67a0da8c8f26a57</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.3.5" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>ruby-bundled-gems-3.3.5-3.module_el9.4.0+115+226a984b.s390x.rpm</filename>
          <sum type="sha256">6e7dc0aeb166b4b2dbc04bc964eca88310cb14be0bd2efd3fef69446db6baec8</sum>
        </package>
        <package name="rubygem-json" version="2.7.1" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-json-2.7.1-3.module_el9.4.0+115+226a984b.s390x.rpm</filename>
          <sum type="sha256">76f852382a4abe4afa455b310d077ff2c87513e57291bde8c6bb9a38ebd63106</sum>
        </package>
        <package name="rubygem-rdoc" version="6.6.3.1" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-rdoc-6.6.3.1-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">8926bf67c5af8614216ce5a08f227efdd104a5e2af6972405379bb549b1fe5fd</sum>
        </package>
        <package name="rubygem-rake" version="13.1.0" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-rake-13.1.0-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">9972528d830029d64bd6804bf54568df638b640a81aec5c71f115c6f1d36be18</sum>
        </package>
        <package name="rubygem-pg" version="1.5.4" release="1.module_el9.4.0+75+1a8fe981" epoch="0" arch="s390x" src="rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.src.rpm">
          <filename>rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.s390x.rpm</filename>
          <sum type="sha256">a81354cf449ea715f53abe583ed241f40275e30991a4a7bafc454729c2c75cc0</sum>
        </package>
        <package name="rubygem-irb" version="1.13.1" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-irb-1.13.1-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">bc7ffb08fd40e98e821c072bc7ba265f8f451365f692698f073fa8dc155aeb4d</sum>
        </package>
        <package name="rubygem-minitest" version="5.20.0" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-minitest-5.20.0-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">c1bbe8d893ed1d0f2f0954403db9c24bf8363aa194f2ac8dc61f6ad9c2f94651</sum>
        </package>
        <package name="rubygem-rss" version="0.3.1" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-rss-0.3.1-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">e0d4ad72d336733fef97fe3e25963dab793801a7258a69131ec501ec87f2a583</sum>
        </package>
        <package name="ruby" version="3.3.5" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>ruby-3.3.5-3.module_el9.4.0+115+226a984b.s390x.rpm</filename>
          <sum type="sha256">ee420d64f27b53d782b2872646492610969ecfad58667a4910dec98ef06d8ec8</sum>
        </package>
        <package name="rubygem-rbs" version="3.4.0" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-rbs-3.4.0-3.module_el9.4.0+115+226a984b.s390x.rpm</filename>
          <sum type="sha256">ee4bc25dc5249b7910aad5f8cd4b5cd6879d50e55f71b5073efbf626a217dca0</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.9" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-typeprof-0.21.9-3.module_el9.4.0+115+226a984b.noarch.rpm</filename>
          <sum type="sha256">ef651c4f8cee6bcd1879db53dd45cce247b031335bc451c6126129cd55185694</sum>
        </package>
        <package name="rubygem-racc" version="1.7.3" release="3.module_el9.4.0+115+226a984b" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el9.4.0+115+226a984b.src.rpm">
          <filename>rubygem-racc-1.7.3-3.module_el9.4.0+115+226a984b.s390x.rpm</filename>
          <sum type="sha256">fa85c6ff19a93f557580f074f80147c90fa4851807dcd76456f229fc6f525314</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6848</id>
    <title>Important: pcp security update</title>
    <issued date="2024-09-19 00:00:00"/>
    <updated date="2024-09-20 14:08:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pcp security update</summary>
    <description>Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.

Security Fix(es):

* pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)
* pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6848" id="RHSA-2024:6848" type="rhsa" title="RHSA-2024:6848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45769" id="CVE-2024-45769" type="cve" title="CVE-2024-45769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45770" id="CVE-2024-45770" type="cve" title="CVE-2024-45770"/>
      <reference href="https://bugzilla.redhat.com/2310451" id="2310451" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310452" id="2310452" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6848.html" id="ALSA-2024:6848" type="self" title="ALSA-2024:6848"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="pcp-export-pcp2spark" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-export-pcp2spark-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">0756d4b88e0f6e5c5fc4cfd6ab2bb8c5ec153d67851b263617eb190560558bb3</sum>
        </package>
        <package name="pcp-libs-devel" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-libs-devel-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">0b3966b7bb6c84db6cdfc8ed2b4be0f7071a145cd98fa21e644410c38e64c6bc</sum>
        </package>
        <package name="pcp-selinux" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-selinux-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">0e9c6021af3bebb4d5fdb050272d2f7ab8981e63d6439e6cacf442de06e8222a</sum>
        </package>
        <package name="pcp-pmda-bash" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-bash-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">127e2c1e421678d73eafccd76655557ac61dd11e43753afa85f2360604927d21</sum>
        </package>
        <package name="pcp-export-pcp2influxdb" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-export-pcp2influxdb-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">138d75191c91a3e7927e146aa1308be492e88352b13b3c796bf107cae26bfaa5</sum>
        </package>
        <package name="pcp-pmda-libvirt" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-libvirt-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">150a9e1768d7a43e5a5446a8e6344392367cea681a09742680ace1f08ac73ee9</sum>
        </package>
        <package name="pcp-gui" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-gui-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">16a88e6415b4d0c7829d73979a160926705152f9f21e55dbf52780950f74a571</sum>
        </package>
        <package name="pcp-pmda-trace" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-trace-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">1bcc66e81af3ba190edec856114affb946f04744553d8545467dee2e02ffeccf</sum>
        </package>
        <package name="pcp-pmda-pdns" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-pdns-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">1c81c18601a50b3ad7fdb0038edabcced58b51fac0e725849e5224a4f587f8ae</sum>
        </package>
        <package name="pcp-pmda-lio" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-lio-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">1d440d603074f7970701e030c7152dc45ce796738aa34ee83cead4b5deed306b</sum>
        </package>
        <package name="pcp-export-pcp2graphite" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-export-pcp2graphite-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">26d5a3056d61af06a6fa50067ace8f75f02a853e8ca1d99e860bcfd259e194d8</sum>
        </package>
        <package name="pcp-pmda-named" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-named-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">2d94d5e421dbc739e0d7805fdde2feafabdd61779c3b31dfeb404b416ccea59e</sum>
        </package>
        <package name="pcp-pmda-elasticsearch" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-elasticsearch-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">2f077f17b9fc3b4312cb4ce7001e963ed797eccf7f0f1026ea303e62a80fa1fa</sum>
        </package>
        <package name="pcp-pmda-rsyslog" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-rsyslog-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">31a36298dbcde377ec75916513d52a341ada8384efc602fc0cc0b4a5798c081a</sum>
        </package>
        <package name="pcp-import-sar2pcp" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-import-sar2pcp-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">355eb0407c430fd1cd5a49dd8085392614d498b24515bad48ba77147c6b36581</sum>
        </package>
        <package name="pcp-pmda-mailq" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-mailq-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">35e9e6a89a9f0d8d6eeda9f35613767e7455d95da0276004d3ee9383a0ebd429</sum>
        </package>
        <package name="pcp-testsuite" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-testsuite-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">387ea29f02d2f31724800b0b3c8d52ff38bff0129c47b59e7c00cc809bfa67eb</sum>
        </package>
        <package name="pcp-pmda-memcache" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-memcache-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">3a628c170bf0168ce59b03d72aad3671927a6e71d75d61982e84028c4ee03f5a</sum>
        </package>
        <package name="pcp-pmda-ds389" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-ds389-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">3ea93700ee64f0b93c0a7f383a790898f129b5af481e4d128452432a67de9ed7</sum>
        </package>
        <package name="pcp-pmda-mic" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-mic-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">3f18ad4b474326549be952b6c3c39b71834ad2c78046ced71a49580533614c92</sum>
        </package>
        <package name="pcp-pmda-dm" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-dm-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">40295dce619fd3b1b5d7ab981999658f8fea0da3406af977e53e166b782b92eb</sum>
        </package>
        <package name="pcp-pmda-gpfs" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-gpfs-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">40d83fa42561069d8db218d9a066dd1d53e8fb981a411fc72bcfd4ad37e6bd68</sum>
        </package>
        <package name="pcp-pmda-zswap" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-zswap-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">41fd0a00f2611a02aaa7d9e87e24fc90770aca9208d1d7bdf99374fd0094be76</sum>
        </package>
        <package name="pcp-pmda-oracle" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-oracle-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">44e316cf190d8475ee4e34961f09a9c7726f7d4f425b31701a4c93994f5aa64f</sum>
        </package>
        <package name="pcp-geolocate" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-geolocate-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">4dfdbce2c714a5af39bf0984b3da58a975bb4400ef95ba48749bfc592c9d5301</sum>
        </package>
        <package name="pcp-pmda-redis" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-redis-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">4e353bcbe1c551945981d9464a214cacb4057406896b78368af7f9c04b87be91</sum>
        </package>
        <package name="pcp-pmda-activemq" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-activemq-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">63cd62682d67a6ce5cf921015d2ca786559837ba91dd4b5a36189405a354783e</sum>
        </package>
        <package name="pcp-pmda-haproxy" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-haproxy-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">642e73fe148dd57166e6ecba8bed77c66fc4ac7b2afbc4433b26c3b1c10ca0ca</sum>
        </package>
        <package name="pcp-pmda-bind2" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-bind2-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">64608d5239cf364e744f45d6288f3810e0c52ec3c5481a2fd078beec01af3fe1</sum>
        </package>
        <package name="pcp-pmda-snmp" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-snmp-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">648922653b5f3dab6090dcafe90c1926358dfff96740e872a781dea4957ead2a</sum>
        </package>
        <package name="pcp-pmda-openmetrics" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-openmetrics-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">65026b3e9eb76b5b4cf18880cb18074b215b73228f7692c4c960395fa9131fa6</sum>
        </package>
        <package name="pcp-pmda-hacluster" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-hacluster-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">6697ae79694044083e112bd0aad8bf33e746fcdbfb5838584f677c736941bc2f</sum>
        </package>
        <package name="pcp-zeroconf" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-zeroconf-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">6ca731bf9d61dc175ea19c89b6088c720648d91758a5274af42ad48fe4c714bb</sum>
        </package>
        <package name="pcp-import-iostat2pcp" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-import-iostat2pcp-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">6cc95b5eca48167a7b576fecae6eeff2f00f1e95dbdc82b89d9aa2156333ac12</sum>
        </package>
        <package name="pcp-export-pcp2json" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-export-pcp2json-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">6cebbf85331d14401b329c16017f052e7f5ea54c41177fd6b5b0e737c01b3b57</sum>
        </package>
        <package name="pcp-pmda-mongodb" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-mongodb-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">7090df5d384cb02be21115225aae7833913831f5cbd4d293ba0616e44690f2c4</sum>
        </package>
        <package name="pcp-doc" version="6.2.0" release="5.el9_4" epoch="0" arch="noarch" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-doc-6.2.0-5.el9_4.noarch.rpm</filename>
          <sum type="sha256">76b193e4674d16310141c86556ee0011aa5ac58e65d5b6681fea838941d2ad27</sum>
        </package>
        <package name="pcp-pmda-denki" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-denki-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">76c311e867998163dfc00aa5e5a35832e583eca5727c8973b16423b541c8c832</sum>
        </package>
        <package name="python3-pcp" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>python3-pcp-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">7b5711577db8ca31b13b4103fe320343c1dca2213b117bee13b8f1b43f349ea7</sum>
        </package>
        <package name="perl-PCP-MMV" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>perl-PCP-MMV-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">7caa32ff0b929e33fce3da8ebd46150ebe5a2647156ae7077eab0ca1a1e71881</sum>
        </package>
        <package name="pcp-pmda-samba" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-samba-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">7d103f32af1fb1f4be215e0a7576976c046fd5370b29997da523dcb10a00a1b9</sum>
        </package>
        <package name="pcp-export-zabbix-agent" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-export-zabbix-agent-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">7de3cbf6d1389cb4d2f94be3c72f155512abdab840856faeb0b118192b0859b3</sum>
        </package>
        <package name="pcp-libs" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-libs-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">7e5b0d0da2b20e55316019d4102654a92c22c07f659d50160d0181c895e5a256</sum>
        </package>
        <package name="pcp-pmda-cisco" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-cisco-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">813abba710a7f9f078804dc819c7733b7aa412a4898845c4a314c9269d7f4f17</sum>
        </package>
        <package name="pcp-pmda-gluster" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-gluster-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">841214f483c7907bc40050077c952d17265090d5caa118e77bdbeea8ca8e2375</sum>
        </package>
        <package name="pcp-pmda-cifs" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-cifs-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">849b06f809b5248aaaedc324d5c0310770964d25385d672e2f1690bcfa501caf</sum>
        </package>
        <package name="pcp-pmda-news" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-news-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">85d3cab7cc052c8bbf0311fc58cf28a0fe5948422664b246125969efe548409d</sum>
        </package>
        <package name="pcp-pmda-docker" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-docker-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">867a8dc16eba139257e97930a35c40e1a8ab39fa2a4c7560fe33efff9bacc6d1</sum>
        </package>
        <package name="perl-PCP-PMDA" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>perl-PCP-PMDA-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">8728bf977fb8da714a003bbba77feba31686f98db970595e8033bb580dc728d8</sum>
        </package>
        <package name="pcp-system-tools" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-system-tools-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">8c8b4bf0587787d9be78bac07f6bef7f23e782c38201fd6ac9e8b12b84e7a4b1</sum>
        </package>
        <package name="pcp-pmda-sockets" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-sockets-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">8eb92e1c5ae7182a8d79fbdc562c51e1fe7f3b5a486df03464bbc354108f533d</sum>
        </package>
        <package name="pcp-conf" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-conf-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">903c6fdb64cfa1580607d5178be4e5209c9ccf81ffecaed060e7379b56a3386c</sum>
        </package>
        <package name="pcp-pmda-shping" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-shping-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">92a794e9b212482d678fbcaadd732326afa154cead2d31c36304b5772c09bc5c</sum>
        </package>
        <package name="pcp-pmda-farm" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-farm-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">9684f80eae8ce71ef21dfda3a32bc5a64ba111b2cbbc6c63d4afe9e88ba1028b</sum>
        </package>
        <package name="pcp-pmda-statsd" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-statsd-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">996c87f827201b4ade79e61c34814107521700ba5b675f4c3966678e222734de</sum>
        </package>
        <package name="pcp-pmda-json" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-json-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">9c77721043e4f698cfd51707b7b03715c74778c79902a0ef886690c7c889738f</sum>
        </package>
        <package name="pcp-pmda-netfilter" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-netfilter-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">a1cb303c2674118eed94b1a80daec35066549a634106da06df201753613dedf2</sum>
        </package>
        <package name="pcp-pmda-logger" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-logger-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">a573b33d5d7a6784d84723f18a48e193cd49205cd2869f1599f20dbdf6cc9e4a</sum>
        </package>
        <package name="pcp-pmda-summary" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-summary-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">a592b1c7c8f76b072453aa9be6ad5d48df1f29a927dc42c8716085a117a506b3</sum>
        </package>
        <package name="pcp-pmda-lmsensors" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-lmsensors-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">a5ab6c635065eed64d152c3e51c5f3fa471519d9675b513a174c2f0394f24b10</sum>
        </package>
        <package name="pcp-pmda-mysql" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-mysql-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">a660b688e736a3956c33b3303499a1d9fe838184b91f682ad59e67f6c7b85eb9</sum>
        </package>
        <package name="pcp-pmda-roomtemp" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-roomtemp-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">a8722863406e203c4742cb4372d9e62efbf9e1a91da07bf49af8a1ddb6b461ba</sum>
        </package>
        <package name="pcp-export-pcp2zabbix" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-export-pcp2zabbix-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">aabae5f9911602e169334dcadd09a491f42bc33ea74f071b2b94253e110a7f05</sum>
        </package>
        <package name="pcp" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">ac93b4c9d27b6715cf08c1c2169c019bb9931ca6a640ee0d610b31d5b69e5274</sum>
        </package>
        <package name="pcp-pmda-podman" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-podman-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">ae61f24a910a70c0a645a49d76de1ed0c5d8ae58dc3ef79b47327e89f38fee68</sum>
        </package>
        <package name="pcp-pmda-mounts" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-mounts-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">b2af7bb791da8a89207a754245e810f0ec090bdccdf9e1d2a581cbb9828c38d1</sum>
        </package>
        <package name="pcp-devel" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-devel-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">b670bac023aa425199cd5044f16161ea5ac6923d5d4736bad552bfc0b08b4dee</sum>
        </package>
        <package name="pcp-pmda-rabbitmq" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-rabbitmq-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">b6ca978066a2a2a60adf2369ed9cbcaca2e417bdd23e7b9de3dda769feab2c50</sum>
        </package>
        <package name="pcp-pmda-nfsclient" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-nfsclient-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">b718fea46eb53aaa5e0d749dc43adf3e5dfb76456d65cb14bcf12fcdd7714700</sum>
        </package>
        <package name="pcp-pmda-slurm" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-slurm-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">b7e86aca6f3fe3faa4163204d0eff43c751b572d64dac83f42bbe71f72be62a1</sum>
        </package>
        <package name="pcp-export-pcp2xml" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-export-pcp2xml-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">b8d1c49f1f4da61accbf9f7e6d7c252858b5cecd2dcb303716059f82847dbee5</sum>
        </package>
        <package name="pcp-pmda-openvswitch" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-openvswitch-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">bc7c8879763b3a380a1deb8bd0bacf9d3facea05289694707c96220b7531a3c8</sum>
        </package>
        <package name="pcp-pmda-dbping" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-dbping-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">be1fc5a1ec437b744f2a9f161e4870945c35c98474d6abff2b47ceb209b0d1e8</sum>
        </package>
        <package name="pcp-pmda-bonding" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-bonding-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">be98c76a40b97311e0e90365d79c7960c239b08074e13a422ee9f0b971bc5936</sum>
        </package>
        <package name="pcp-pmda-netcheck" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-netcheck-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">beae7526eabd5979840060f371679eb1d734b42fd598f5dccc82ee76b9400045</sum>
        </package>
        <package name="pcp-pmda-gpsd" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-gpsd-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">c204d28954305fa5aed600f8a256b1589d6978a8d8bd14a70d887c19b2d46fc8</sum>
        </package>
        <package name="pcp-import-ganglia2pcp" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-import-ganglia2pcp-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">c6ac1a26e92a3a9507fd97b0fcf38b3e6b140e9c99250ad57d88098e05e1d354</sum>
        </package>
        <package name="pcp-pmda-lustrecomm" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-lustrecomm-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">ce288c6d56184b9aa4fecf546d16d10f76ac8fda2fb24e3e04b767de7b22b83b</sum>
        </package>
        <package name="perl-PCP-LogSummary" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>perl-PCP-LogSummary-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">cf6c8d0a4fa49823724973d87cba718652e41ee3dea16e3e00ba13e36238c572</sum>
        </package>
        <package name="pcp-pmda-postgresql" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-postgresql-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">d06016aa65aadc233aad07a2d4b9bdf4fb6881efa0e93099a8e3da57e8f388a2</sum>
        </package>
        <package name="pcp-import-mrtg2pcp" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-import-mrtg2pcp-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">d70afea74fb366d9622d3755760cae83ea9a2337e0d556d112d21ef6873b29a6</sum>
        </package>
        <package name="pcp-pmda-ds389log" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-ds389log-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">d79214788c535b57a5edb96a44d73147efeaed246eb80d174acbf13f3638730e</sum>
        </package>
        <package name="pcp-import-collectl2pcp" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-import-collectl2pcp-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">db87fa957e3e4e55bc9f9731506e563e29cd8a8930a0d32e11c7bb0a3c7a3cc0</sum>
        </package>
        <package name="pcp-pmda-systemd" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-systemd-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">dc285c28ca7674da0212495043c00290d5ae423c2ec454d5b14a64359c7154bb</sum>
        </package>
        <package name="pcp-pmda-lustre" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-lustre-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">de367dc1b5433743060455a049343bc1eed31a1343c85f9479d075a7981cc090</sum>
        </package>
        <package name="pcp-pmda-zimbra" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-zimbra-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">e27b1e48d3479b79a02ebfcc995005ef9675171fa2a7cf8e924a368b9bcc8374</sum>
        </package>
        <package name="pcp-pmda-bpftrace" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-bpftrace-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">e682966df395aee2f12228734e78b24127ee79e233041dd2d5864ace9a343bd5</sum>
        </package>
        <package name="pcp-pmda-unbound" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-unbound-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">ebd97102161e47cbe3068a700b62e8c032c6606287ec2496f99dfc6b9056b754</sum>
        </package>
        <package name="pcp-pmda-sendmail" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-sendmail-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">ed5c1584961ea27cabc1e1c6ad2a467efa9048748deef20e3426ddcdb489771f</sum>
        </package>
        <package name="pcp-pmda-postfix" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-postfix-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">eda088b76f4ae5222f6efe4bcdfb22738b47bb4b5a6ec4dfb3144aa6d4e68a80</sum>
        </package>
        <package name="pcp-pmda-weblog" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-weblog-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">edfeae747ea25a7b25248ad95485ef76a2693c39963371a3af81fdcc12414391</sum>
        </package>
        <package name="perl-PCP-LogImport" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>perl-PCP-LogImport-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">ee755d9414c1cd88cd43c37d6cf13b63e4104d891b855fcef55328d6496faecc</sum>
        </package>
        <package name="pcp-pmda-apache" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-apache-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">f045358fb2c99144157a39656bf623157c88c0d7709b76e534cb9d837b19bbf9</sum>
        </package>
        <package name="pcp-pmda-smart" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-smart-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">f0f432bd1cc8221707c8505ed3fe31fd9fa9320c6c94d30caa14dd410700f471</sum>
        </package>
        <package name="pcp-pmda-bcc" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-bcc-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">f1e74789a13790a05397cfab113a7a0edd9555446cb940e84c471062460a9bde</sum>
        </package>
        <package name="pcp-pmda-gfs2" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-gfs2-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">f814646af8bc83804df68eb523c450e996466856cbbe7c437a903db4ecec410b</sum>
        </package>
        <package name="pcp-export-pcp2elasticsearch" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-export-pcp2elasticsearch-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">f9db7d2865c0b1975892f83b6a170cb5bda3400f3847220d5b7a5daa5ad3ad6a</sum>
        </package>
        <package name="pcp-pmda-nginx" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-nginx-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">fead453451c7584e953a313c024094352e1de80cdb11dc585cf7c9bf35ea0db8</sum>
        </package>
        <package name="pcp-pmda-nvidia-gpu" version="6.2.0" release="5.el9_4" epoch="0" arch="s390x" src="pcp-6.2.0-5.el9_4.src.rpm">
          <filename>pcp-pmda-nvidia-gpu-6.2.0-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">fec6b480c45fb32407b1cdeeed6d524d85bbf19241d9143f67b0c1841cd1bd56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6913</id>
    <title>Important: golang security update</title>
    <issued date="2024-09-23 00:00:00"/>
    <updated date="2024-09-24 09:37:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.

Security Fix(es):

* net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)
* go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155)
* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)
* go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6913" id="RHSA-2024:6913" type="rhsa" title="RHSA-2024:6913"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24791" id="CVE-2024-24791" type="cve" title="CVE-2024-24791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34155" id="CVE-2024-34155" type="cve" title="CVE-2024-34155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34158" id="CVE-2024-34158" type="cve" title="CVE-2024-34158"/>
      <reference href="https://bugzilla.redhat.com/2295310" id="2295310" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310527" id="2310527" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310529" id="2310529" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6913.html" id="ALSA-2024:6913" type="self" title="ALSA-2024:6913"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="golang-tests" version="1.21.13" release="3.el9_4" epoch="0" arch="noarch" src="golang-1.21.13-3.el9_4.src.rpm">
          <filename>golang-tests-1.21.13-3.el9_4.noarch.rpm</filename>
          <sum type="sha256">0a9a2e10f59fcd9afdedd681cc2094369a54047107e97b51f89dbbbc7a8f88da</sum>
        </package>
        <package name="golang-misc" version="1.21.13" release="3.el9_4" epoch="0" arch="noarch" src="golang-1.21.13-3.el9_4.src.rpm">
          <filename>golang-misc-1.21.13-3.el9_4.noarch.rpm</filename>
          <sum type="sha256">4c96643e7b664e24c52084d40ba7e275c8ad632bac3ea356c27933cbedaf288b</sum>
        </package>
        <package name="golang" version="1.21.13" release="3.el9_4" epoch="0" arch="s390x" src="golang-1.21.13-3.el9_4.src.rpm">
          <filename>golang-1.21.13-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">810368ae2683be44f640ede786ba7000974fdd4515dc70b7b9e5f012e70fd7b2</sum>
        </package>
        <package name="golang-docs" version="1.21.13" release="3.el9_4" epoch="0" arch="noarch" src="golang-1.21.13-3.el9_4.src.rpm">
          <filename>golang-docs-1.21.13-3.el9_4.noarch.rpm</filename>
          <sum type="sha256">cb58cdb66dfd1b8b62f02981ce8a93b0ac62f5a533cc85df49c70b58d10b2785</sum>
        </package>
        <package name="golang-bin" version="1.21.13" release="3.el9_4" epoch="0" arch="s390x" src="golang-1.21.13-3.el9_4.src.rpm">
          <filename>golang-bin-1.21.13-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">da067d2573dc55f36b6a6fb98257e6ee928fa15cbe9082e22f44b1e36d522065</sum>
        </package>
        <package name="go-toolset" version="1.21.13" release="3.el9_4" epoch="0" arch="s390x" src="golang-1.21.13-3.el9_4.src.rpm">
          <filename>go-toolset-1.21.13-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">dbdf03ab2f53a9216d8280bd0a9dfa751d3bc4f4c61881304d88f9fd52c41f4e</sum>
        </package>
        <package name="golang-src" version="1.21.13" release="3.el9_4" epoch="0" arch="noarch" src="golang-1.21.13-3.el9_4.src.rpm">
          <filename>golang-src-1.21.13-3.el9_4.noarch.rpm</filename>
          <sum type="sha256">fa177fd98f928892135d944e2f65fbdeeb1a1135cc3e724ad3af2acf7711333b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6946</id>
    <title>Important: grafana-pcp security update</title>
    <issued date="2024-09-23 00:00:00"/>
    <updated date="2024-09-24 09:33:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.

Security Fix(es):

* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6946" id="RHSA-2024:6946" type="rhsa" title="RHSA-2024:6946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6946.html" id="ALSA-2024:6946" type="self" title="ALSA-2024:6946"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="grafana-pcp" version="5.1.1" release="3.el9_4" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-3.el9_4.src.rpm">
          <filename>grafana-pcp-5.1.1-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">a952716b1fcf60c9ad31298104ee6a06aeafe1c1e5309aea987873a40d33eb69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6947</id>
    <title>Important: grafana security update</title>
    <issued date="2024-09-23 00:00:00"/>
    <updated date="2024-09-24 09:31:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB. 

Security Fix(es):

* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6947" id="RHSA-2024:6947" type="rhsa" title="RHSA-2024:6947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6947.html" id="ALSA-2024:6947" type="self" title="ALSA-2024:6947"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="grafana" version="9.2.10" release="17.el9_4" epoch="0" arch="s390x" src="grafana-9.2.10-17.el9_4.src.rpm">
          <filename>grafana-9.2.10-17.el9_4.s390x.rpm</filename>
          <sum type="sha256">1e0a53bf59fcb5a60b32983f59a6de004f91a87455e5a96b2c834f869f7ce251</sum>
        </package>
        <package name="grafana-selinux" version="9.2.10" release="17.el9_4" epoch="0" arch="s390x" src="grafana-9.2.10-17.el9_4.src.rpm">
          <filename>grafana-selinux-9.2.10-17.el9_4.s390x.rpm</filename>
          <sum type="sha256">248976cac47d24d275f15801b41e013cb839e64c4dfde36cc78069a4cc268306</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6997</id>
    <title>Important: kernel security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-11-03 22:34:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
  * kernel: net/sched: act_mirred: don't override retval if we already lost the skb (CVE-2024-26739)
  * kernel: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (CVE-2024-26947)
  * kernel: scsi: qla2xxx: Fix command flush on cable pull (CVE-2024-26931)
  * kernel: scsi: qla2xxx: Fix double free of the ha-&amp;gt;vp_map pointer (CVE-2024-26930)
  * kernel: scsi: qla2xxx: Fix double free of fcport (CVE-2024-26929)
  * kernel: fork: defer linking file vma until vma is fully initialized (CVE-2024-27022)
  * kernel: KVM: x86/mmu: x86: Don&amp;#39;t overflow lpage_info when checking attributes (CVE-2024-26991)
  * kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem (CVE-2024-35895)
  * kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (CVE-2024-36016)
  * kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)
  * kernel: cpufreq: exit() callback is optional (CVE-2024-38615)
  * kernel: ring-buffer: Fix a race between readers and resize checks (CVE-2024-38601)
  * kernel: cppc_cpufreq: Fix possible null pointer dereference (CVE-2024-38573)
  * kernel: gfs2: Fix potential glock use-after-free on unmount (CVE-2024-38570)
  * kernel: wifi: nl80211: Avoid address calculations via out of bounds array indexing (CVE-2024-38562)
  * kernel: Input: cyapa - add missing input core locking to suspend/resume functions (CVE-2023-52884)
  * kernel: ACPICA: Revert &amp;#34;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&amp;#34; (CVE-2024-40984)
  * kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071)
  * kernel: wifi: mt76: replace skb_put with skb_put_zero (CVE-2024-42225)
  * kernel: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CVE-2024-42246)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6997" id="RHSA-2024:6997" type="rhsa" title="RHSA-2024:6997"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52439" id="CVE-2023-52439" type="cve" title="CVE-2023-52439"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52884" id="CVE-2023-52884" type="cve" title="CVE-2023-52884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26739" id="CVE-2024-26739" type="cve" title="CVE-2024-26739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26929" id="CVE-2024-26929" type="cve" title="CVE-2024-26929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26930" id="CVE-2024-26930" type="cve" title="CVE-2024-26930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26931" id="CVE-2024-26931" type="cve" title="CVE-2024-26931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26947" id="CVE-2024-26947" type="cve" title="CVE-2024-26947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26991" id="CVE-2024-26991" type="cve" title="CVE-2024-26991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27022" id="CVE-2024-27022" type="cve" title="CVE-2024-27022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35895" id="CVE-2024-35895" type="cve" title="CVE-2024-35895"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36016" id="CVE-2024-36016" type="cve" title="CVE-2024-36016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36899" id="CVE-2024-36899" type="cve" title="CVE-2024-36899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38562" id="CVE-2024-38562" type="cve" title="CVE-2024-38562"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38570" id="CVE-2024-38570" type="cve" title="CVE-2024-38570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38573" id="CVE-2024-38573" type="cve" title="CVE-2024-38573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38601" id="CVE-2024-38601" type="cve" title="CVE-2024-38601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38615" id="CVE-2024-38615" type="cve" title="CVE-2024-38615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40984" id="CVE-2024-40984" type="cve" title="CVE-2024-40984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41071" id="CVE-2024-41071" type="cve" title="CVE-2024-41071"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42225" id="CVE-2024-42225" type="cve" title="CVE-2024-42225"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42246" id="CVE-2024-42246" type="cve" title="CVE-2024-42246"/>
      <reference href="https://bugzilla.redhat.com/2265271" id="2265271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273270" id="2273270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278167" id="2278167" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278245" id="2278245" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278248" id="2278248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278250" id="2278250" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278252" id="2278252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278318" id="2278318" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281677" id="2281677" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283894" id="2283894" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284549" id="2284549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293348" id="2293348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293364" id="2293364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293420" id="2293420" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293423" id="2293423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293431" id="2293431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293685" id="2293685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297568" id="2297568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300448" id="2300448" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301543" id="2301543" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6997.html" id="ALSA-2024:6997" type="self" title="ALSA-2024:6997"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="perf" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>perf-5.14.0-427.37.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">0e2b5da508c10fda1949325c61b6734bebd1b6a729731481fa4208a4726d4565</sum>
        </package>
        <package name="rtla" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>rtla-5.14.0-427.37.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">18476ad118d5af626958a2f262b4d20188119f35a2a7201d292c5ccf8dadcfc3</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-devel-matched-5.14.0-427.37.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">1915a070299b716afba7cf6854dc76127fafcd7ff02781304630dfdc9f13094f</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-headers-5.14.0-427.37.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">24f374e98f8daf9598490b48b8851989c8302bebd6ec91ccee50d7d2af2ca844</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-427.37.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">3dce346c09ba00a33195d03fa03843482ab3a9fb7045346bff8a3bed6628f946</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-devel-5.14.0-427.37.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">56997fc00329967e8392f26744e45516937812363af0d7666786af0109995c4a</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-5.14.0-427.37.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">b7b4d48c960e1c269bfc94174491b945686d6f1d2dbbfb732ad799c97218f81b</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-427.37.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">ce2768aa7366a3d66c2a9a2f4743685e30dee50d7b770d9bb9efdd5d2769da26</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-427.37.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">d4c57bed1ff61212b84c5d9c22a78282235bd649da387b6509d9b93dc10043c8</sum>
        </package>
        <package name="rv" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>rv-5.14.0-427.37.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">ec2f2e9b201081b814d9ac4b32d6d85fb975761db1076af58bf8fdad5fcd548e</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-doc-5.14.0-427.37.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">fb1929d07c80de3e2bbbf647ab980790d752af44a051795ee39a8d498f981f6a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7136</id>
    <title>Important: git-lfs security update</title>
    <issued date="2024-09-25 00:00:00"/>
    <updated date="2024-09-26 06:08:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7136" id="RHSA-2024:7136" type="rhsa" title="RHSA-2024:7136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7136.html" id="ALSA-2024:7136" type="self" title="ALSA-2024:7136"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="git-lfs" version="3.4.1" release="4.el9_4" epoch="0" arch="s390x" src="git-lfs-3.4.1-4.el9_4.src.rpm">
          <filename>git-lfs-3.4.1-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">34dbbde3f87e997cf6a6cb685ad34413d553785c49487e797412fabc87d920fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7204</id>
    <title>Important: osbuild-composer security update</title>
    <issued date="2024-09-26 00:00:00"/>
    <updated date="2024-09-27 09:50:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud.  It is compatible with composer-cli and cockpit-composer clients.

Security Fix(es):

* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7204" id="RHSA-2024:7204" type="rhsa" title="RHSA-2024:7204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7204.html" id="ALSA-2024:7204" type="self" title="ALSA-2024:7204"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="osbuild-composer" version="101" release="2.el9_4.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-2.el9_4.alma.1.src.rpm">
          <filename>osbuild-composer-101-2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">1c2380dd9749dfdfcaa62aa5e4e01f5aac91d17006b4f68f1d09e3bcc2fc0368</sum>
        </package>
        <package name="osbuild-composer-worker" version="101" release="2.el9_4.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-2.el9_4.alma.1.src.rpm">
          <filename>osbuild-composer-worker-101-2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">2eb097661000e6d8adc6e02f1479bc9998c3564afdd36655cf74775e16f2d525</sum>
        </package>
        <package name="osbuild-composer-core" version="101" release="2.el9_4.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-2.el9_4.alma.1.src.rpm">
          <filename>osbuild-composer-core-101-2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">d7e766b82e4a79ff9a4dd8705db8fcdb5ef8b650597fab02e9a65514b7006363</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7260</id>
    <title>Moderate: net-snmp security update</title>
    <issued date="2024-09-26 00:00:00"/>
    <updated date="2024-09-27 07:22:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>net-snmp security update</summary>
    <description>The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser.

Security Fix(es):

* net-snmp: A buffer overflow in the handling of the INDEX of             NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. (CVE-2022-24805)
* : net-snmp: Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously (CVE-2022-24806)
* net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access (CVE-2022-24807)
* net-snmp: A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference. (CVE-2022-24809)
* net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference (CVE-2022-24808)
* net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference. (CVE-2022-24810)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7260" id="RHSA-2024:7260" type="rhsa" title="RHSA-2024:7260"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24805" id="CVE-2022-24805" type="cve" title="CVE-2022-24805"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24806" id="CVE-2022-24806" type="cve" title="CVE-2022-24806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24807" id="CVE-2022-24807" type="cve" title="CVE-2022-24807"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24808" id="CVE-2022-24808" type="cve" title="CVE-2022-24808"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24809" id="CVE-2022-24809" type="cve" title="CVE-2022-24809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24810" id="CVE-2022-24810" type="cve" title="CVE-2022-24810"/>
      <reference href="https://bugzilla.redhat.com/2103225" id="2103225" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104759" id="2104759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104763" id="2104763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104766" id="2104766" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104768" id="2104768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104769" id="2104769" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7260.html" id="ALSA-2024:7260" type="self" title="ALSA-2024:7260"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="net-snmp" version="5.9.1" release="13.el9_4.3" epoch="1" arch="s390x" src="net-snmp-5.9.1-13.el9_4.3.src.rpm">
          <filename>net-snmp-5.9.1-13.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">28c47afe97cb6caa6bbf746502e90da65a352a7c4cc3e2515ba74031be2bdff5</sum>
        </package>
        <package name="net-snmp-libs" version="5.9.1" release="13.el9_4.3" epoch="1" arch="s390x" src="net-snmp-5.9.1-13.el9_4.3.src.rpm">
          <filename>net-snmp-libs-5.9.1-13.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">3dccf58f5f688a6d26cd8dbc4fdbe15339bcaddc9a369763609638aac81599cc</sum>
        </package>
        <package name="python3-net-snmp" version="5.9.1" release="13.el9_4.3" epoch="1" arch="s390x" src="net-snmp-5.9.1-13.el9_4.3.src.rpm">
          <filename>python3-net-snmp-5.9.1-13.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">3ed0cfbce60c05ad85758c6716e3d0019ae52acaedd130b7f8bc949b067c702f</sum>
        </package>
        <package name="net-snmp-devel" version="5.9.1" release="13.el9_4.3" epoch="1" arch="s390x" src="net-snmp-5.9.1-13.el9_4.3.src.rpm">
          <filename>net-snmp-devel-5.9.1-13.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">9378eb95076d68d43c0729c8650da4116d85dff166bf2e6f0d8c656c69ec6767</sum>
        </package>
        <package name="net-snmp-agent-libs" version="5.9.1" release="13.el9_4.3" epoch="1" arch="s390x" src="net-snmp-5.9.1-13.el9_4.3.src.rpm">
          <filename>net-snmp-agent-libs-5.9.1-13.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">9f66c1c4eddfa9df23d23275ffb7d38b611279e420f53ac87f5d5e49949651ec</sum>
        </package>
        <package name="net-snmp-utils" version="5.9.1" release="13.el9_4.3" epoch="1" arch="s390x" src="net-snmp-5.9.1-13.el9_4.3.src.rpm">
          <filename>net-snmp-utils-5.9.1-13.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">a536566afebd28b4ad07e54544659255510c27a2ecc4d0d3b3a845c43fa04081</sum>
        </package>
        <package name="net-snmp-perl" version="5.9.1" release="13.el9_4.3" epoch="1" arch="s390x" src="net-snmp-5.9.1-13.el9_4.3.src.rpm">
          <filename>net-snmp-perl-5.9.1-13.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">f341760eab884be93923b94bb900f8197c42f93c2229216b6cc788ea0e916fbb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7346</id>
    <title>Important: cups-filters security update</title>
    <issued date="2024-09-27 00:00:00"/>
    <updated date="2024-09-28 10:34:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups-filters security update</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()
* cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes (CVE-2024-47076)
* cups: libppd: remote command injection via attacker controlled data in PPD file ()

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7346" id="RHSA-2024:7346" type="rhsa" title="RHSA-2024:7346"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47076" id="CVE-2024-47076" type="cve" title="CVE-2024-47076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47175" id="CVE-2024-47175" type="cve" title="CVE-2024-47175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47176" id="CVE-2024-47176" type="cve" title="CVE-2024-47176"/>
      <reference href="https://bugzilla.redhat.com/2314252" id="2314252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314253" id="2314253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314256" id="2314256" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7346.html" id="ALSA-2024:7346" type="self" title="ALSA-2024:7346"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="cups-filters" version="1.28.7" release="17.el9_4" epoch="0" arch="s390x" src="cups-filters-1.28.7-17.el9_4.src.rpm">
          <filename>cups-filters-1.28.7-17.el9_4.s390x.rpm</filename>
          <sum type="sha256">b1c5c1ba21e10c0964c75a4a16310a2d5a7991e4e0a7250b812bc808958ecd0b</sum>
        </package>
        <package name="cups-filters-libs" version="1.28.7" release="17.el9_4" epoch="0" arch="s390x" src="cups-filters-1.28.7-17.el9_4.src.rpm">
          <filename>cups-filters-libs-1.28.7-17.el9_4.s390x.rpm</filename>
          <sum type="sha256">c6a3d0ed654d3b973d7bc36b6ce9de460df9ef1746578bcd6315c085d43ef6f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7457</id>
    <title>Moderate: mod_jk bug fix update</title>
    <issued date="2024-10-01 00:00:00"/>
    <updated date="2024-10-09 08:59:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mod_jk bug fix update</summary>
    <description>The mod_jk module is an Apache HTTP Server plug-in that enables the Apache HTTP Server to connect with the Apache Tomcat servlet engine.

Bug Fix(es):

* Rebase to upstream 1.2.50 release (JIRA:AlmaLinux-58855)

Security fix(es):

* mod_jk: information Disclosure / DoS (CVE-2024-46544) (JIRA:AlmaLinux-59800)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7457" id="RHSA-2024:7457" type="rhsa" title="RHSA-2024:7457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46544" id="CVE-2024-46544" type="cve" title="CVE-2024-46544"/>
      <reference href="https://bugzilla.redhat.com/2314194" id="2314194" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7457.html" id="ALSA-2024:7457" type="self" title="ALSA-2024:7457"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="mod_jk" version="1.2.50" release="1.el9_4.1" epoch="0" arch="s390x" src="mod_jk-1.2.50-1.el9_4.1.src.rpm">
          <filename>mod_jk-1.2.50-1.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">f31342a12bc4cd9bfe85ac8b3d014934e537bd4e2d7523d17b9455eae1598dc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7505</id>
    <title>Important: firefox security update</title>
    <issued date="2024-10-02 00:00:00"/>
    <updated date="2024-10-04 05:27:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: 115.16/128.3 ESR ()
* firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9401)
* firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9402)
* firefox: thunderbird: Cross-origin access to PDF contents through multipart responses (CVE-2024-9393)
* firefox: thunderbird: Cross-origin access to JSON contents through multipart responses (CVE-2024-9394)
* firefox: thunderbird: Compromised content process can bypass site isolation (CVE-2024-9392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7505" id="RHSA-2024:7505" type="rhsa" title="RHSA-2024:7505"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9392" id="CVE-2024-9392" type="cve" title="CVE-2024-9392"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9393" id="CVE-2024-9393" type="cve" title="CVE-2024-9393"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9394" id="CVE-2024-9394" type="cve" title="CVE-2024-9394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9401" id="CVE-2024-9401" type="cve" title="CVE-2024-9401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9402" id="CVE-2024-9402" type="cve" title="CVE-2024-9402"/>
      <reference href="https://bugzilla.redhat.com/2315950" id="2315950" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315951" id="2315951" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315956" id="2315956" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315957" id="2315957" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315959" id="2315959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7505.html" id="ALSA-2024:7505" type="self" title="ALSA-2024:7505"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="firefox" version="128.3.0" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-128.3.0-1.el9_4.alma.1.src.rpm">
          <filename>firefox-128.3.0-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">36b0f80801d3e67c82eb0cd971f2f19cfa4796b15fb9271ef22ce3830f6b7351</sum>
        </package>
        <package name="firefox-x11" version="128.3.0" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-128.3.0-1.el9_4.alma.1.src.rpm">
          <filename>firefox-x11-128.3.0-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">dae509fcfed81977691f41083558e1f11d34155f3867205d8c1d7ad33c77dc90</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7550</id>
    <title>Moderate: golang security update</title>
    <issued date="2024-10-02 00:00:00"/>
    <updated date="2024-10-03 12:54:49"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.

Security Fix(es):

* golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7550" id="RHSA-2024:7550" type="rhsa" title="RHSA-2024:7550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9355" id="CVE-2024-9355" type="cve" title="CVE-2024-9355"/>
      <reference href="https://bugzilla.redhat.com/2315719" id="2315719" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7550.html" id="ALSA-2024:7550" type="self" title="ALSA-2024:7550"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="golang-bin" version="1.21.13" release="4.el9_4" epoch="0" arch="s390x" src="golang-1.21.13-4.el9_4.src.rpm">
          <filename>golang-bin-1.21.13-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">0300dd31facda1fe353395dc82015ce7db069d5199cf251d38a22ef95dafbdad</sum>
        </package>
        <package name="golang-misc" version="1.21.13" release="4.el9_4" epoch="0" arch="noarch" src="golang-1.21.13-4.el9_4.src.rpm">
          <filename>golang-misc-1.21.13-4.el9_4.noarch.rpm</filename>
          <sum type="sha256">0f72d31e8fbde81879a46087a6220436db2b8631d2c713649e87305cc7f210dc</sum>
        </package>
        <package name="golang" version="1.21.13" release="4.el9_4" epoch="0" arch="s390x" src="golang-1.21.13-4.el9_4.src.rpm">
          <filename>golang-1.21.13-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">37c6353679c7a4b44763e14ab1bac8f19bbf4e1600c33d9c0039ddbf5c9ee3ed</sum>
        </package>
        <package name="golang-tests" version="1.21.13" release="4.el9_4" epoch="0" arch="noarch" src="golang-1.21.13-4.el9_4.src.rpm">
          <filename>golang-tests-1.21.13-4.el9_4.noarch.rpm</filename>
          <sum type="sha256">a0ff5a7dfcd2c46d774fe24b5b8e059cf04914ca594917c161bac2f7f8828714</sum>
        </package>
        <package name="golang-src" version="1.21.13" release="4.el9_4" epoch="0" arch="noarch" src="golang-1.21.13-4.el9_4.src.rpm">
          <filename>golang-src-1.21.13-4.el9_4.noarch.rpm</filename>
          <sum type="sha256">a62939759bf10a05b8f7f952edf57a46532e54e0b173d668b5e6487da2c0c0fb</sum>
        </package>
        <package name="go-toolset" version="1.21.13" release="4.el9_4" epoch="0" arch="s390x" src="golang-1.21.13-4.el9_4.src.rpm">
          <filename>go-toolset-1.21.13-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">aa3cb7cd82ed5bf99692c07914946a138178e0bb9dbcc88ab26b16c8f429c8c8</sum>
        </package>
        <package name="golang-docs" version="1.21.13" release="4.el9_4" epoch="0" arch="noarch" src="golang-1.21.13-4.el9_4.src.rpm">
          <filename>golang-docs-1.21.13-4.el9_4.noarch.rpm</filename>
          <sum type="sha256">e512e9dac95c21e867e8756b6d47f671a5f41144b9d8c652c45ddf27712b9365</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7552</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-10-02 00:00:00"/>
    <updated date="2024-10-04 05:25:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* thunderbird: 115.16/128.3 ()
* firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service (CVE-2024-9399)
* firefox: thunderbird: Memory safety bugs fixed in Firefox 131 and Thunderbird 131 (CVE-2024-9403)
* firefox: thunderbird: Potential directory upload bypass via clickjacking (CVE-2024-9397)
* firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9401)
* firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9402)
* firefox: thunderbird: External protocol handlers could be enumerated via popups (CVE-2024-9398)
* firefox: thunderbird: Potential memory corruption during JIT compilation (CVE-2024-9400)
* firefox: thunderbird: Potential memory corruption may occur when cloning certain objects (CVE-2024-9396)
* firefox: thunderbird: Cross-origin access to PDF contents through multipart responses (CVE-2024-9393)
* firefox: thunderbird: Cross-origin access to JSON contents through multipart responses (CVE-2024-9394)
* firefox: thunderbird: Compromised content process can bypass site isolation (CVE-2024-9392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7552" id="RHSA-2024:7552" type="rhsa" title="RHSA-2024:7552"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9392" id="CVE-2024-9392" type="cve" title="CVE-2024-9392"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9393" id="CVE-2024-9393" type="cve" title="CVE-2024-9393"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9394" id="CVE-2024-9394" type="cve" title="CVE-2024-9394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9396" id="CVE-2024-9396" type="cve" title="CVE-2024-9396"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9397" id="CVE-2024-9397" type="cve" title="CVE-2024-9397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9398" id="CVE-2024-9398" type="cve" title="CVE-2024-9398"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9399" id="CVE-2024-9399" type="cve" title="CVE-2024-9399"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9400" id="CVE-2024-9400" type="cve" title="CVE-2024-9400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9401" id="CVE-2024-9401" type="cve" title="CVE-2024-9401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9402" id="CVE-2024-9402" type="cve" title="CVE-2024-9402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9403" id="CVE-2024-9403" type="cve" title="CVE-2024-9403"/>
      <reference href="https://bugzilla.redhat.com/2315945" id="2315945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315947" id="2315947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315949" id="2315949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315950" id="2315950" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315951" id="2315951" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315952" id="2315952" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315953" id="2315953" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315954" id="2315954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315956" id="2315956" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315957" id="2315957" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315959" id="2315959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7552.html" id="ALSA-2024:7552" type="self" title="ALSA-2024:7552"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="thunderbird" version="128.3.0" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="thunderbird-128.3.0-1.el9_4.alma.1.src.rpm">
          <filename>thunderbird-128.3.0-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">99d8ae8d668ebc3a11f223856065c017551047aadbe987be9cc3ca1c533b4e4c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7867</id>
    <title>Important: .NET 6.0 security update</title>
    <issued date="2024-10-09 00:00:00"/>
    <updated date="2024-10-11 07:48:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.135 and .NET Runtime 6.0.35.

Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7867" id="RHSA-2024:7867" type="rhsa" title="RHSA-2024:7867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485"/>
      <reference href="https://bugzilla.redhat.com/2315729" id="2315729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315730" id="2315730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315731" id="2315731" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7867.html" id="ALSA-2024:7867" type="self" title="ALSA-2024:7867"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="dotnet-apphost-pack-6.0" version="6.0.35" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el9_4.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.35-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">2387365629aa63dca1b32a63656c2f842a7cea4b558b6e45d4cea0f1c1b566df</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.35" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el9_4.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.35-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">31f22365b55ead23f46a7c5ca599eacd6a82fb8a8d48bf914ed52f7fa285a702</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.35" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el9_4.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.35-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">69c73a25fa982cbe6847227e45e11a947df3e811271f82bef6bfc7414ecd2964</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.35" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el9_4.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.35-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">9d4381f465e24ec14f19bb7a4cedb955754a7b1c0867134bd0eb7f7ad71a1b77</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.135" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el9_4.src.rpm">
          <filename>dotnet-templates-6.0-6.0.135-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">bfa71fe85614457e01f002e35a19cd1eda90217891192201579cc5143608cf03</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.35" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el9_4.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.35-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c02f7694d8729d6f57c033dc66945c157100e60df4fcffad3cab1d21c97ce3af</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.35" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el9_4.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.35-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c5e5ada7eeee4daf6568834c0fc685406cb0464d33e092b1db049207dae647d4</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.135" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el9_4.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.135-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">f4c7defaed09afefa1d2c260b15097e9db9dadfd09c9507fe1dd46b267111b37</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7869</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-10-09 00:00:00"/>
    <updated date="2024-10-11 07:46:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.110 and .NET Runtime 8.0.10.

Security Fix(es):

* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)
* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7869" id="RHSA-2024:7869" type="rhsa" title="RHSA-2024:7869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38229" id="CVE-2024-38229" type="cve" title="CVE-2024-38229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485"/>
      <reference href="https://bugzilla.redhat.com/2315729" id="2315729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315730" id="2315730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315731" id="2315731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2316161" id="2316161" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7869.html" id="ALSA-2024:7869" type="self" title="ALSA-2024:7869"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.110" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.110-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">16e35b134d022b5a591d7da1380191157b52397d96d07383c754c6f4c761ce98</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="8.0.110" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.110-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">2600ee70e338650ea15ec65dc379d8f05b215f76ea45a9f324cabb176adcf497</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.10" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.10-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">2ab5edbc6a8d0e8fda9163f324df0f3391a1055f13387c7c34d93daac6e022a1</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.10" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.10-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">2c142d195a5e34864d872d4f0083c183825217a13878e459980addd1d7e294fa</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.10" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.10-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">67e989d9b6753463b2892d4ee500876a613d40d016569258f32afa4e5e9c1a78</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.10" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.10-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">8d00b203e29080179f5c99b188ccc866b9740d078683c1a9ef7c16760b9654be</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.10" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.10-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">969680b5cea24914c6d3b66670b45e25b39aac643f8a007627355e029db74c5b</sum>
        </package>
        <package name="dotnet-host" version="8.0.10" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>dotnet-host-8.0.10-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">96c3f5da9c842aeedeca4ef48f252fc0b5c7b42050e1bd405fd5d1f9eee5ee25</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.10" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.10-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">972a60789f63c6af584c2a7b73c5492f1fc9292ac0a2b92eb44b02ebd3c56867</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.10" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.10-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">9a26b7e8716f6e244d5c154d09a1a40447a78f660f3d164e26ff735d69311c08</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.10" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.10-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">b899a33201c7c6908ef6c051978b95fcb06e4e5835c09b54f8877d446f99f325</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.110" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>dotnet-templates-8.0-8.0.110-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">d9c0d12ec000211c97dd4359f0bd270e163dcc3f35ac45dc6f0bd05c22c55493</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.110" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.110-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">fb5ab288bdda1d32cde8f209d3a86ba0912a2238f20dd99dbfa19613c984a385</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7958</id>
    <title>Important: firefox security update</title>
    <issued date="2024-10-10 00:00:00"/>
    <updated date="2024-10-12 13:30:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7958" id="RHSA-2024:7958" type="rhsa" title="RHSA-2024:7958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9680" id="CVE-2024-9680" type="cve" title="CVE-2024-9680"/>
      <reference href="https://bugzilla.redhat.com/2317442" id="2317442" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7958.html" id="ALSA-2024:7958" type="self" title="ALSA-2024:7958"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="firefox" version="128.3.1" release="2.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-128.3.1-2.el9_4.alma.1.src.rpm">
          <filename>firefox-128.3.1-2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">889d8b46f50a87bf95352c58ccff01b6a1add9e1957946a6df3347e1251dbf14</sum>
        </package>
        <package name="firefox-x11" version="128.3.1" release="2.el9_4.alma.1" epoch="0" arch="s390x" src="firefox-128.3.1-2.el9_4.alma.1.src.rpm">
          <filename>firefox-x11-128.3.1-2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">f965e49992ca11eff9a208eb843b9c7034e048b1ad1a55e23579f535fa136a4b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8025</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-10-14 00:00:00"/>
    <updated date="2024-10-15 09:17:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8025" id="RHSA-2024:8025" type="rhsa" title="RHSA-2024:8025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9680" id="CVE-2024-9680" type="cve" title="CVE-2024-9680"/>
      <reference href="https://bugzilla.redhat.com/2317442" id="2317442" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8025.html" id="ALSA-2024:8025" type="self" title="ALSA-2024:8025"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="thunderbird" version="128.3.1" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="thunderbird-128.3.1-1.el9_4.alma.1.src.rpm">
          <filename>thunderbird-128.3.1-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">0e73c9976c29763f2d7e8cbb9631d8582a0403fc83fea03121c26b2837177d33</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8037</id>
    <title>Moderate: OpenIPMI security update</title>
    <issued date="2024-10-14 00:00:00"/>
    <updated date="2024-10-15 09:16:14"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>OpenIPMI security update</summary>
    <description>The OpenIPMI packages provide command-line tools and utilities to access platform information using Intelligent Platform Management Interface (IPMI). System administrators can use OpenIPMI to manage systems and to perform system health monitoring.

Security Fix(es):

* openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator (CVE-2024-42934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8037" id="RHSA-2024:8037" type="rhsa" title="RHSA-2024:8037"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42934" id="CVE-2024-42934" type="cve" title="CVE-2024-42934"/>
      <reference href="https://bugzilla.redhat.com/2308375" id="2308375" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8037.html" id="ALSA-2024:8037" type="self" title="ALSA-2024:8037"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="OpenIPMI" version="2.0.32" release="5.el9_4" epoch="0" arch="s390x" src="OpenIPMI-2.0.32-5.el9_4.src.rpm">
          <filename>OpenIPMI-2.0.32-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">2b794b536cf479dc4ece61a17443e2c034ce728b6c1767503df4c54761425c2e</sum>
        </package>
        <package name="OpenIPMI-libs" version="2.0.32" release="5.el9_4" epoch="0" arch="s390x" src="OpenIPMI-2.0.32-5.el9_4.src.rpm">
          <filename>OpenIPMI-libs-2.0.32-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">b39b0e3e83611e6b4d47e34fc3e4adc23242b1fb037218c6ef415f5097a10043</sum>
        </package>
        <package name="OpenIPMI-lanserv" version="2.0.32" release="5.el9_4" epoch="0" arch="s390x" src="OpenIPMI-2.0.32-5.el9_4.src.rpm">
          <filename>OpenIPMI-lanserv-2.0.32-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">c4df55e7ce81369948ae6719299ad7cd62bdff1fd0e0206c5b950aa1d3c196ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8039</id>
    <title>Important: podman security update</title>
    <issued date="2024-10-14 00:00:00"/>
    <updated date="2024-10-15 09:11:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

* go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155)
* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)
* go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158)
* Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8039" id="RHSA-2024:8039" type="rhsa" title="RHSA-2024:8039"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34155" id="CVE-2024-34155" type="cve" title="CVE-2024-34155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34158" id="CVE-2024-34158" type="cve" title="CVE-2024-34158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9341" id="CVE-2024-9341" type="cve" title="CVE-2024-9341"/>
      <reference href="https://bugzilla.redhat.com/2310527" id="2310527" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310529" id="2310529" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315691" id="2315691" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8039.html" id="ALSA-2024:8039" type="self" title="ALSA-2024:8039"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="podman-plugins" version="4.9.4" release="13.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-13.el9_4.src.rpm">
          <filename>podman-plugins-4.9.4-13.el9_4.s390x.rpm</filename>
          <sum type="sha256">7e770b9ae82b969adedd0421dbc2539a80a01e1251209dbf6665ebcc91f0a974</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="13.el9_4" epoch="4" arch="noarch" src="podman-4.9.4-13.el9_4.src.rpm">
          <filename>podman-docker-4.9.4-13.el9_4.noarch.rpm</filename>
          <sum type="sha256">8e99dfe6481b7e84d3a8caf5f2458c7f6851abb4570575d78c4014b823ed0dad</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="13.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-13.el9_4.src.rpm">
          <filename>podman-remote-4.9.4-13.el9_4.s390x.rpm</filename>
          <sum type="sha256">d4061b04cb8e4368163749fecc26f4a84054a9790d2a7d551427099b2392c66f</sum>
        </package>
        <package name="podman" version="4.9.4" release="13.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-13.el9_4.src.rpm">
          <filename>podman-4.9.4-13.el9_4.s390x.rpm</filename>
          <sum type="sha256">d541b6870031f9bd70ec874385be20c060bbf70c7d9e006ee13a263444b7a0dd</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="13.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-13.el9_4.src.rpm">
          <filename>podman-tests-4.9.4-13.el9_4.s390x.rpm</filename>
          <sum type="sha256">df538143b5ec76a22b0758d87cbaf547cbce5b04d89b96e9208bd41feccaae49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8110</id>
    <title>Important: containernetworking-plugins security update</title>
    <issued date="2024-10-15 00:00:00"/>
    <updated date="2024-10-15 15:04:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>containernetworking-plugins security update</summary>
    <description>The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. 

Security Fix(es):

* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8110" id="RHSA-2024:8110" type="rhsa" title="RHSA-2024:8110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8110.html" id="ALSA-2024:8110" type="self" title="ALSA-2024:8110"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="containernetworking-plugins" version="1.4.0" release="6.el9_4" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-6.el9_4.src.rpm">
          <filename>containernetworking-plugins-1.4.0-6.el9_4.s390x.rpm</filename>
          <sum type="sha256">ba787fc67eb3c5024799cdc36db907c78bb95371ab1e7c80a6719fae6e93aead</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8111</id>
    <title>Important: skopeo security update</title>
    <issued date="2024-10-15 00:00:00"/>
    <updated date="2024-10-15 15:06:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>skopeo security update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. 

Security Fix(es):

* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8111" id="RHSA-2024:8111" type="rhsa" title="RHSA-2024:8111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8111.html" id="ALSA-2024:8111" type="self" title="ALSA-2024:8111"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="skopeo" version="1.14.5" release="2.el9_4" epoch="2" arch="s390x" src="skopeo-1.14.5-2.el9_4.src.rpm">
          <filename>skopeo-1.14.5-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">38068598312b01d9dc316035ed250864414cd6107f72414e60b851701013409f</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="2.el9_4" epoch="2" arch="s390x" src="skopeo-1.14.5-2.el9_4.src.rpm">
          <filename>skopeo-tests-1.14.5-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">d1d01bdc10e9ca1f8f563a652fd41bffab5a11b234da156b0b46cd1346a1f1a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8112</id>
    <title>Important: buildah security update</title>
    <issued date="2024-10-15 00:00:00"/>
    <updated date="2024-10-16 10:11:51"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. 

Security Fix(es):

* go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155)
* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)
* go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158)
* Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8112" id="RHSA-2024:8112" type="rhsa" title="RHSA-2024:8112"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34155" id="CVE-2024-34155" type="cve" title="CVE-2024-34155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34158" id="CVE-2024-34158" type="cve" title="CVE-2024-34158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9341" id="CVE-2024-9341" type="cve" title="CVE-2024-9341"/>
      <reference href="https://bugzilla.redhat.com/2310527" id="2310527" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310529" id="2310529" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315691" id="2315691" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8112.html" id="ALSA-2024:8112" type="self" title="ALSA-2024:8112"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="buildah-tests" version="1.33.9" release="1.el9_4" epoch="2" arch="s390x" src="buildah-1.33.9-1.el9_4.src.rpm">
          <filename>buildah-tests-1.33.9-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">1c206ed116a0b25cc4d5d04cba370dd147faafaf9ea75680ba225e34b8f493bb</sum>
        </package>
        <package name="buildah" version="1.33.9" release="1.el9_4" epoch="2" arch="s390x" src="buildah-1.33.9-1.el9_4.src.rpm">
          <filename>buildah-1.33.9-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">5f3f4e7c7ea7c575d8030c06354d91caa96bdeca055db0c299de2dd87c3151bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8117</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:35:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8117" id="RHSA-2024:8117" type="rhsa" title="RHSA-2024:8117"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8117.html" id="ALSA-2024:8117" type="self" title="ALSA-2024:8117"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.432.b06" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.432.b06-2.el9.s390x.rpm</filename>
          <sum type="sha256">2cd967032b75c6ee3c9f988377566dd0d3feb7a8be4b16983bf14dc9197196ba</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.432.b06" release="2.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.432.b06-2.el9.noarch.rpm</filename>
          <sum type="sha256">4ddf0bcc6626495dce4e4d805a971106c42927125ead702018b3e1e31558268b</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.432.b06" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.432.b06-2.el9.s390x.rpm</filename>
          <sum type="sha256">53b61662168eea9b5275af70ab914e4043f436bef07a6e1aa52884532d691c81</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.432.b06" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.432.b06-2.el9.s390x.rpm</filename>
          <sum type="sha256">6155a6a477d1391468e6c635c20276639e8740894be3ae1af2f83552e8014ca4</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.432.b06" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.432.b06-2.el9.s390x.rpm</filename>
          <sum type="sha256">86113aaf08dea4ea0b2e34fee2f9ba1c63362fd38cec28d5634fe8b31cc33902</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.432.b06" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.432.b06-2.el9.s390x.rpm</filename>
          <sum type="sha256">8d333b23f2baaa0124a8d6bb7c3be5315c48861f24eaeea55b0be138d721f975</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.432.b06" release="2.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.432.b06-2.el9.noarch.rpm</filename>
          <sum type="sha256">bb77d29b8740cded757516caecc65e5a1ad349e1368fab4a402f1135d5e5be63</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8121</id>
    <title>Moderate: java-11-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:33:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8121" id="RHSA-2024:8121" type="rhsa" title="RHSA-2024:8121"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8121.html" id="ALSA-2024:8121" type="self" title="ALSA-2024:8121"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="java-11-openjdk-static-libs" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">0c57680895616aad182eaeeb16d454683df75f83cf2972b156619b8a8f3745a0</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">1c6daec1237ea29e496f5783f505ff103623c224344f4de319e0a6405c843fd0</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">1daf76d869fa41951f179d7b262a39ef93bae0931b8a377309c96113b6ea3d30</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">3fceb0605db9592e38fda23d8a2f7b85af72dad1dbd311ce9b1ef88a10e1fa07</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-src-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">6440e681454e98dc04027d5243df26367c8a93f0f3921dd30c0dbe2e478e0272</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">8920c94d4ba942fb970e93c3f923d35e22100a85fd896763424c93af472269fe</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">b38549a9973d5fae2ab8e9a0021e877d1ab5c3ae3775bc318a957bd676f518ba</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">bb42f0363fe1db4efa0e711f8c13d4fd3cc2cc154a5600b0717dd0af908253e5</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">f0b7913403308d27531534a22e43f4ee0822e01f2293940288608c753333d80c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8124</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:29:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8124" id="RHSA-2024:8124" type="rhsa" title="RHSA-2024:8124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8124.html" id="ALSA-2024:8124" type="self" title="ALSA-2024:8124"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="java-17-openjdk-demo" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">186d99d3999c4e1617a58293ace8e139d47405c5890a97f42ed3d596b75e7125</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">1abac7170cae2688d845a0ac85b6ab1230efd15875a454af82570eaaa60f4eec</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">29ed865469620fdd5707ee8217310ce41feeb6d3745434e53148cf24ca6b3043</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">7329d32342bc375ae03471433bf2fd954e185935af1221943d7127f95e9ae74a</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">96a95ca3944de44940030acab8bd578854f8448d79f4eb9fe0e99981d6505b8b</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">aeb03c3b139fd0e4cbeaf883bf61c93808617f1f800de47c9fcbe4e5fdc93ab6</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">cc8ee1af442fe0686c381f5ef758008d6ef0531cc78208599a57bf18c287cdf4</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e193ebbcc7a2a3247aa7ef7ad991a620d78a5dd27cbf91b01bedf8b7d245a5db</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f3448e13e0a19055ab6e37f82148216a824c9ba5dde4744e56e19bb8e5747f23</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8127</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:24:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 runtime environment.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8127" id="RHSA-2024:8127" type="rhsa" title="RHSA-2024:8127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8127.html" id="ALSA-2024:8127" type="self" title="ALSA-2024:8127"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="java-21-openjdk-headless" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">18e5839e8c7b363587e823ca4b8cebf3357ed15c8f215352a7a5e5a5ac2a2775</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">33da6883bdb83f23cf2bae43db160dfa2a356405551669620c672bab77df1b7b</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">3bc155937f06a3b4e2e91c9ee1f652ea112fa413f148bbb222128773b865a465</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">57245e221e5309559689bf6301e2d9ff25a519eb05d46814be034578823f308c</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">cc3d789ebb959d4bb06d562a8090b43f1c6be41ae515571da52b87279f216988</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d3431925ca51913fbd91d2bad2951940ef696521635e47a15b9b02b8e33c920d</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ef1c7cc613453c6364d41fb3552817181445cbed7fb1cd2a8e3ca22278777f64</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f083bf3902082f0d3be67e59d8a0a8729b4fb82470c6eaa2d0389e9be620f17f</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f79bc133fe3e89007abe4ddfc2f628af680579df3d7a7558d9d89366963e5c90</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8162</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-25 06:30:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)
  * kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow (CVE-2024-27403)
  * kernel: Revert &amp;#34;net/mlx5: Block entering switchdev mode with ns inconsistency&amp;#34; (CVE-2023-52658)
  * kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CVE-2024-35989)
  * kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (CVE-2021-47385)
  * kernel: mptcp: ensure snd_nxt is properly initialized on connect (CVE-2024-36889)
  * kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978)
  * kernel: net/mlx5: Add a timeout to acquire the command queue semaphore (CVE-2024-38556)
  * kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CVE-2024-39483)
  * kernel: ionic: fix use after netif_napi_del() (CVE-2024-39502)
  * kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CVE-2024-40959)
  * kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush (CVE-2024-42079)
  * kernel: sched: act_ct: take care of padding in struct zones_ht_key (CVE-2024-42272)
  * kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error (CVE-2024-42284)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8162" id="RHSA-2024:8162" type="rhsa" title="RHSA-2024:8162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47385" id="CVE-2021-47385" type="cve" title="CVE-2021-47385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28746" id="CVE-2023-28746" type="cve" title="CVE-2023-28746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52658" id="CVE-2023-52658" type="cve" title="CVE-2023-52658"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27403" id="CVE-2024-27403" type="cve" title="CVE-2024-27403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35989" id="CVE-2024-35989" type="cve" title="CVE-2024-35989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36889" id="CVE-2024-36889" type="cve" title="CVE-2024-36889"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36978" id="CVE-2024-36978" type="cve" title="CVE-2024-36978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38556" id="CVE-2024-38556" type="cve" title="CVE-2024-38556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39483" id="CVE-2024-39483" type="cve" title="CVE-2024-39483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39502" id="CVE-2024-39502" type="cve" title="CVE-2024-39502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40959" id="CVE-2024-40959" type="cve" title="CVE-2024-40959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42079" id="CVE-2024-42079" type="cve" title="CVE-2024-42079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42272" id="CVE-2024-42272" type="cve" title="CVE-2024-42272"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42284" id="CVE-2024-42284" type="cve" title="CVE-2024-42284"/>
      <reference href="https://bugzilla.redhat.com/2270700" id="2270700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281127" id="2281127" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281149" id="2281149" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281847" id="2281847" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282355" id="2282355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284571" id="2284571" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293078" id="2293078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293443" id="2293443" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295921" id="2295921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297474" id="2297474" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297543" id="2297543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300517" id="2300517" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8162.html" id="ALSA-2024:8162" type="self" title="ALSA-2024:8162"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="kernel-devel-matched" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-devel-matched-5.14.0-427.40.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">29dd1a54eb711d5b42bbcd1100d9efd00b2680edd7499c19fa60bede9cb62d6b</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-427.40.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">30737576701b839f7ceddb31496d55886957b9a80b070cb1b53516c6b2fac9e3</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-headers-5.14.0-427.40.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">42ac7baa4551f0500add7999c4c8c507eedff48c31f5850b4d6982531b11064f</sum>
        </package>
        <package name="perf" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>perf-5.14.0-427.40.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">5b67d72000719813b9162fa263061ecf3c9a4954e576adfa9ada7d985092d0e5</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-5.14.0-427.40.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">6476153c054e76650daf471fca10728f7a6872cc272af1dba5b3b33df1643ced</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-devel-5.14.0-427.40.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">69e5d34d1567f9afa9bb911fb3a9e2f776201520a11ea41bde6f518eeb115649</sum>
        </package>
        <package name="rtla" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>rtla-5.14.0-427.40.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">6f60fa811a20a4c3c433c70b3b32d4c233f8eb003de6fc1dc046ff5db7464300</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-doc-5.14.0-427.40.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">86622373d7e6b6e7a3a3c609bc6a724fcd1620c90ff30b454cb9163d9040524b</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-427.40.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c3d983442b578a45c2b782efb80d9f7921e1b44c80a7df27468855087f25723b</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-427.40.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">d89c98a7cdce51b5f287fc4472c0daa299703e6b350522e0d6fc70bb422f798f</sum>
        </package>
        <package name="rv" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>rv-5.14.0-427.40.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">df4fe0e163df8b9139d4740736d14670ba7406beaf04248c056f25cfe8a1020f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8180</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:22:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution (CVE-2024-40776)
* webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789)
* webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780)
* webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779)
* webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782)
* webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866)
* webkitgtk: A malicious website may cause unexpected cross-origin behavior (CVE-2024-23271)
* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820)
* webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-27838)
* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851)
* webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8180" id="RHSA-2024:8180" type="rhsa" title="RHSA-2024:8180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23271" id="CVE-2024-23271" type="cve" title="CVE-2024-23271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27820" id="CVE-2024-27820" type="cve" title="CVE-2024-27820"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27838" id="CVE-2024-27838" type="cve" title="CVE-2024-27838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27851" id="CVE-2024-27851" type="cve" title="CVE-2024-27851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40776" id="CVE-2024-40776" type="cve" title="CVE-2024-40776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40779" id="CVE-2024-40779" type="cve" title="CVE-2024-40779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40780" id="CVE-2024-40780" type="cve" title="CVE-2024-40780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40782" id="CVE-2024-40782" type="cve" title="CVE-2024-40782"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40789" id="CVE-2024-40789" type="cve" title="CVE-2024-40789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40866" id="CVE-2024-40866" type="cve" title="CVE-2024-40866"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44187" id="CVE-2024-44187" type="cve" title="CVE-2024-44187"/>
      <reference href="https://bugzilla.redhat.com/2301841" id="2301841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302067" id="2302067" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302069" id="2302069" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302070" id="2302070" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302071" id="2302071" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312724" id="2312724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314696" id="2314696" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314698" id="2314698" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314702" id="2314702" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314704" id="2314704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314706" id="2314706" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8180.html" id="ALSA-2024:8180" type="self" title="ALSA-2024:8180"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="webkit2gtk3-jsc-devel" version="2.46.1" release="2.el9_4" epoch="0" arch="s390x" src="webkit2gtk3-2.46.1-2.el9_4.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.46.1-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">64ce1c297a162a634e390f2db40e0f131b720db0d8276636646bc271c1d4c09b</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.46.1" release="2.el9_4" epoch="0" arch="s390x" src="webkit2gtk3-2.46.1-2.el9_4.src.rpm">
          <filename>webkit2gtk3-devel-2.46.1-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">9a1591c999175fc803a48347f6809f1c7ad601bb61b128ba4ebc60904ffebe92</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.46.1" release="2.el9_4" epoch="0" arch="s390x" src="webkit2gtk3-2.46.1-2.el9_4.src.rpm">
          <filename>webkit2gtk3-jsc-2.46.1-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">a09861b87d50758ccae6560069aeacd46c3e7368a0be58b88029c78ec6683e78</sum>
        </package>
        <package name="webkit2gtk3" version="2.46.1" release="2.el9_4" epoch="0" arch="s390x" src="webkit2gtk3-2.46.1-2.el9_4.src.rpm">
          <filename>webkit2gtk3-2.46.1-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">d650e2395c2caa81bab9bc6ca8825dea89b8601674cbb727ab9e394d6600d42b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8374</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-10-23 00:00:00"/>
    <updated date="2024-10-24 07:32:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8374" id="RHSA-2024:8374" type="rhsa" title="RHSA-2024:8374"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8374.html" id="ALSA-2024:8374" type="self" title="ALSA-2024:8374"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.11-libs" version="3.11.7" release="1.el9_4.6" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.6.src.rpm">
          <filename>python3.11-libs-3.11.7-1.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">67ca4c4ba2d2087c0ec3b7fa71c2898eacc1c570da613c0bd403645a5b05f833</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.7" release="1.el9_4.6" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.6.src.rpm">
          <filename>python3.11-tkinter-3.11.7-1.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">8926f3a3fe03f4f5430369779e1a30aa7f93724a3fd5f85d40f8a1179ecac450</sum>
        </package>
        <package name="python3.11-devel" version="3.11.7" release="1.el9_4.6" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.6.src.rpm">
          <filename>python3.11-devel-3.11.7-1.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">8ba23053ad069fb92cab68e5b0588668db7e8dde34c373961385553b1cb2d2f8</sum>
        </package>
        <package name="python3.11" version="3.11.7" release="1.el9_4.6" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.6.src.rpm">
          <filename>python3.11-3.11.7-1.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">e83aa9a4913e05ef4adb87a118536ee73f2bbdccc4ef24ad80bdacd13f619b88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8446</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-10-24 00:00:00"/>
    <updated date="2024-10-24 22:22:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8446" id="RHSA-2024:8446" type="rhsa" title="RHSA-2024:8446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8446.html" id="ALSA-2024:8446" type="self" title="ALSA-2024:8446"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python-unversioned-command" version="3.9.18" release="3.el9_4.6" epoch="0" arch="noarch" src="python3.9-3.9.18-3.el9_4.6.src.rpm">
          <filename>python-unversioned-command-3.9.18-3.el9_4.6.noarch.rpm</filename>
          <sum type="sha256">4322cbb263e9dba528a82fdb49690dd6b957241192fe4601f57a5fa361653ff2</sum>
        </package>
        <package name="python3-devel" version="3.9.18" release="3.el9_4.6" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.6.src.rpm">
          <filename>python3-devel-3.9.18-3.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">51256b344004ebea9effc9384a842a6c884c5186614fa8adf07e120a5442d79c</sum>
        </package>
        <package name="python3-tkinter" version="3.9.18" release="3.el9_4.6" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.6.src.rpm">
          <filename>python3-tkinter-3.9.18-3.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">fea1532c74b20260a5748b7d052abc8bd899326b9e1710f57eb8f37c32f6049d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8447</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-10-24 00:00:00"/>
    <updated date="2024-10-24 22:24:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8447" id="RHSA-2024:8447" type="rhsa" title="RHSA-2024:8447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8447.html" id="ALSA-2024:8447" type="self" title="ALSA-2024:8447"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.12-libs" version="3.12.1" release="4.el9_4.4" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.4.src.rpm">
          <filename>python3.12-libs-3.12.1-4.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">1e35bd9c9d75d967951726c7349f50d3295bc2b9035bc5fcba743b54d3aa6837</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.1" release="4.el9_4.4" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.4.src.rpm">
          <filename>python3.12-tkinter-3.12.1-4.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">4cb62cf1df92bd77ea35083f505d540ac50ad5298b596c6d4add7c76f52f1b0b</sum>
        </package>
        <package name="python3.12" version="3.12.1" release="4.el9_4.4" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.4.src.rpm">
          <filename>python3.12-3.12.1-4.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">d97fa980ada7c7b9419bd0d95b1fe7cb0c18a140fd34a7b812e13ecb3ad4e96d</sum>
        </package>
        <package name="python3.12-devel" version="3.12.1" release="4.el9_4.4" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.4.src.rpm">
          <filename>python3.12-devel-3.12.1-4.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">f1f232675f5bc67319b590a33e6b33ed4537569dbc836b867fe6e5b592a3a692</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8563</id>
    <title>Important: buildah security update</title>
    <issued date="2024-10-29 00:00:00"/>
    <updated date="2024-10-29 12:38:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.   

Security Fix(es):  

  * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8563" id="RHSA-2024:8563" type="rhsa" title="RHSA-2024:8563"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9675" id="CVE-2024-9675" type="cve" title="CVE-2024-9675"/>
      <reference href="https://bugzilla.redhat.com/2317458" id="2317458" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8563.html" id="ALSA-2024:8563" type="self" title="ALSA-2024:8563"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="buildah" version="1.33.10" release="1.el9_4" epoch="2" arch="s390x" src="buildah-1.33.10-1.el9_4.src.rpm">
          <filename>buildah-1.33.10-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">a12a63923f5741a104017eea6c596a788514afa0ce018de98348a3850dfdb57b</sum>
        </package>
        <package name="buildah-tests" version="1.33.10" release="1.el9_4" epoch="2" arch="s390x" src="buildah-1.33.10-1.el9_4.src.rpm">
          <filename>buildah-tests-1.33.10-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">b77c4c0187a9a8992df1ae96295962ee2c95471462b1d503f2d175fbc71f5db5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8617</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-10-30 00:00:00"/>
    <updated date="2024-11-03 19:17:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201)
  * kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
  * kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
  * kernel: af_unix: Fix garbage collector racing against connect() (CVE-2024-26923)
  * kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del (CVE-2024-26961)
  * kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935)
  * kernel: tty: Fix out-of-bound vmalloc access in imageblit (CVE-2021-47383)
  * kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too (CVE-2024-36244)
  * kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup (CVE-2024-39472)
  * kernel: netfilter: nft_inner: validate mandatory meta and payload (CVE-2024-39504)
  * kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CVE-2024-40904)
  * kernel: mptcp: ensure snd_una is properly initialized on connect (CVE-2024-40931)
  * kernel: ipv6: prevent possible NULL dereference in rt6_probe() (CVE-2024-40960)
  * kernel: ext4: do not create EA inode under buffer lock (CVE-2024-40972)
  * kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CVE-2024-40977)
  * kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (CVE-2024-40995)
  * kernel: ext4: fix uninitialized ratelimit_state-&amp;gt;lock access in __ext4_fill_super() (CVE-2024-40998)
  * kernel: netpoll: Fix race condition in netpoll_owner_active (CVE-2024-41005)
  * kernel: xfs: don&amp;#39;t walk off the end of a directory data block (CVE-2024-41013)
  * kernel: xfs: add bounds checking to xlog_recover_process_data (CVE-2024-41014)
  * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854)
  * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8617" id="RHSA-2024:8617" type="rhsa" title="RHSA-2024:8617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47383" id="CVE-2021-47383" type="cve" title="CVE-2021-47383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2201" id="CVE-2024-2201" type="cve" title="CVE-2024-2201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26640" id="CVE-2024-26640" type="cve" title="CVE-2024-26640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26826" id="CVE-2024-26826" type="cve" title="CVE-2024-26826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26923" id="CVE-2024-26923" type="cve" title="CVE-2024-26923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26935" id="CVE-2024-26935" type="cve" title="CVE-2024-26935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26961" id="CVE-2024-26961" type="cve" title="CVE-2024-26961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36244" id="CVE-2024-36244" type="cve" title="CVE-2024-36244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39472" id="CVE-2024-39472" type="cve" title="CVE-2024-39472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39504" id="CVE-2024-39504" type="cve" title="CVE-2024-39504"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40904" id="CVE-2024-40904" type="cve" title="CVE-2024-40904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40931" id="CVE-2024-40931" type="cve" title="CVE-2024-40931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40960" id="CVE-2024-40960" type="cve" title="CVE-2024-40960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40972" id="CVE-2024-40972" type="cve" title="CVE-2024-40972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40977" id="CVE-2024-40977" type="cve" title="CVE-2024-40977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40995" id="CVE-2024-40995" type="cve" title="CVE-2024-40995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40998" id="CVE-2024-40998" type="cve" title="CVE-2024-40998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41005" id="CVE-2024-41005" type="cve" title="CVE-2024-41005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41013" id="CVE-2024-41013" type="cve" title="CVE-2024-41013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41014" id="CVE-2024-41014" type="cve" title="CVE-2024-41014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43854" id="CVE-2024-43854" type="cve" title="CVE-2024-43854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45018" id="CVE-2024-45018" type="cve" title="CVE-2024-45018"/>
      <reference href="https://bugzilla.redhat.com/2268118" id="2268118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270100" id="2270100" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275604" id="2275604" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277171" id="2277171" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278176" id="2278176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278235" id="2278235" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282357" id="2282357" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293654" id="2293654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296067" id="2296067" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297476" id="2297476" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297488" id="2297488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297515" id="2297515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297544" id="2297544" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297556" id="2297556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297561" id="2297561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297579" id="2297579" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297582" id="2297582" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297589" id="2297589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300296" id="2300296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300297" id="2300297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2311715" id="2311715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8617.html" id="ALSA-2024:8617" type="self" title="ALSA-2024:8617"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-427.42.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">43023e6e0d645976dffa463e16706f44c7a396b60ede5d735460f200147016cc</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="noarch" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-doc-5.14.0-427.42.1.el9_4.noarch.rpm</filename>
          <sum type="sha256">72bddd3c3e8ac424dd6e46fd025d65806a823f1136fb50a94065c460bec46bbc</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-427.42.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">73619dde6829bc9f7e2ce37c5a87ea05d821e8d23d6f29eb40ad26555ab7e8a6</sum>
        </package>
        <package name="perf" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>perf-5.14.0-427.42.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">91e83408596dd9d1638f3ba22f08ad62c5357a303d6f10b8c67ab484e815603e</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-devel-matched-5.14.0-427.42.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">9a83bbe36fe942f6e4bab3ee6ec03cfb8c36b2b83abfa8b90f2cc3fed0074b0f</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-headers-5.14.0-427.42.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">a7a24816b3fdbae8990cfa4b12e5075621058f7b1d6a54f42bc767ccce0aee78</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-devel-5.14.0-427.42.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c1fc9a1053e05bb7bba01e7ed4ea3a11a9555dcd76a6b5fd75ae35c6e026201d</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-427.42.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c2a5c3e044c4db38497d5e7558f9c95711ddd3c843177ca066d944f7da088bf5</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-debug-devel-5.14.0-427.42.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">e31819997e06062193834b1ae86f7640ae184b878b9fa5933390bc795f2e3b9f</sum>
        </package>
        <package name="rtla" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>rtla-5.14.0-427.42.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">f2435bb3b39aabf778feb91d2560540ad34413a71a91aee40f0a392a2488bda9</sum>
        </package>
        <package name="rv" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>rv-5.14.0-427.42.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">f5be5ff4281880ce244b1ee747eeaa157d19b2c331a1954239be244c8bc27c21</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8678</id>
    <title>Important: grafana security update</title>
    <issued date="2024-10-30 00:00:00"/>
    <updated date="2024-11-03 19:14:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)
  * dompurify: nesting-based mutation XSS vulnerability (CVE-2024-47875)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8678" id="RHSA-2024:8678" type="rhsa" title="RHSA-2024:8678"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47875" id="CVE-2024-47875" type="cve" title="CVE-2024-47875"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9355" id="CVE-2024-9355" type="cve" title="CVE-2024-9355"/>
      <reference href="https://bugzilla.redhat.com/2315719" id="2315719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318052" id="2318052" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8678.html" id="ALSA-2024:8678" type="self" title="ALSA-2024:8678"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="grafana-selinux" version="9.2.10" release="19.el9_4" epoch="0" arch="s390x" src="grafana-9.2.10-19.el9_4.src.rpm">
          <filename>grafana-selinux-9.2.10-19.el9_4.s390x.rpm</filename>
          <sum type="sha256">7bf9a2a22ec68639023df04aecf83dd02943f67cb5a3cc8960a4ac153345fd5e</sum>
        </package>
        <package name="grafana" version="9.2.10" release="19.el9_4" epoch="0" arch="s390x" src="grafana-9.2.10-19.el9_4.src.rpm">
          <filename>grafana-9.2.10-19.el9_4.s390x.rpm</filename>
          <sum type="sha256">8585334261b83d1509ddb4f54e4fcf68062ea0e33ddb14b9c8696c7ebcdf9c48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8680</id>
    <title>Low: mod_http2 security update</title>
    <issued date="2024-10-30 00:00:00"/>
    <updated date="2024-10-31 13:44:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>mod_http2 security update</summary>
    <description>The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.  

Security Fix(es):  

  * mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8680" id="RHSA-2024:8680" type="rhsa" title="RHSA-2024:8680"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36387" id="CVE-2024-36387" type="cve" title="CVE-2024-36387"/>
      <reference href="https://bugzilla.redhat.com/2295006" id="2295006" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8680.html" id="ALSA-2024:8680" type="self" title="ALSA-2024:8680"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="mod_http2" version="2.0.26" release="2.el9_4.1" epoch="0" arch="s390x" src="mod_http2-2.0.26-2.el9_4.1.src.rpm">
          <filename>mod_http2-2.0.26-2.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">6e7aa13aa204be5b2ffd2adf926ee99c2e499a706c57f1410992e694d1cc8611</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8726</id>
    <title>Moderate: firefox security update</title>
    <issued date="2024-10-31 00:00:00"/>
    <updated date="2024-11-04 08:02:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464)
  * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461)
  * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458)
  * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467)
  * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465)
  * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466)
  * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463)
  * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462)
  * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8726" id="RHSA-2024:8726" type="rhsa" title="RHSA-2024:8726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10458" id="CVE-2024-10458" type="cve" title="CVE-2024-10458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10459" id="CVE-2024-10459" type="cve" title="CVE-2024-10459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10460" id="CVE-2024-10460" type="cve" title="CVE-2024-10460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10461" id="CVE-2024-10461" type="cve" title="CVE-2024-10461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10462" id="CVE-2024-10462" type="cve" title="CVE-2024-10462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10463" id="CVE-2024-10463" type="cve" title="CVE-2024-10463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10464" id="CVE-2024-10464" type="cve" title="CVE-2024-10464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10465" id="CVE-2024-10465" type="cve" title="CVE-2024-10465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10466" id="CVE-2024-10466" type="cve" title="CVE-2024-10466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10467" id="CVE-2024-10467" type="cve" title="CVE-2024-10467"/>
      <reference href="https://bugzilla.redhat.com/2322424" id="2322424" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322425" id="2322425" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322428" id="2322428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322429" id="2322429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322433" id="2322433" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322434" id="2322434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322438" id="2322438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322439" id="2322439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322440" id="2322440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322444" id="2322444" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8726.html" id="ALSA-2024:8726" type="self" title="ALSA-2024:8726"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="firefox" version="128.4.0" release="1.el9_4" epoch="0" arch="s390x" src="firefox-128.4.0-1.el9_4.src.rpm">
          <filename>firefox-128.4.0-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">573630fe5f8009d5c5e23dc992987b8db7969a610f254080d2bd54dfe17f4b74</sum>
        </package>
        <package name="firefox-x11" version="128.4.0" release="1.el9_4" epoch="0" arch="s390x" src="firefox-128.4.0-1.el9_4.src.rpm">
          <filename>firefox-x11-128.4.0-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">b146cf8181468b9446f4fba3f3fb392b91b3702e6353174d4473af130aa88792</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8793</id>
    <title>Moderate: thunderbird security update</title>
    <issued date="2024-11-04 00:00:00"/>
    <updated date="2024-11-04 23:02:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464)
  * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461)
  * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458)
  * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467)
  * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465)
  * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466)
  * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463)
  * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462)
  * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8793" id="RHSA-2024:8793" type="rhsa" title="RHSA-2024:8793"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10458" id="CVE-2024-10458" type="cve" title="CVE-2024-10458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10459" id="CVE-2024-10459" type="cve" title="CVE-2024-10459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10460" id="CVE-2024-10460" type="cve" title="CVE-2024-10460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10461" id="CVE-2024-10461" type="cve" title="CVE-2024-10461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10462" id="CVE-2024-10462" type="cve" title="CVE-2024-10462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10463" id="CVE-2024-10463" type="cve" title="CVE-2024-10463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10464" id="CVE-2024-10464" type="cve" title="CVE-2024-10464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10465" id="CVE-2024-10465" type="cve" title="CVE-2024-10465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10466" id="CVE-2024-10466" type="cve" title="CVE-2024-10466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10467" id="CVE-2024-10467" type="cve" title="CVE-2024-10467"/>
      <reference href="https://bugzilla.redhat.com/2322424" id="2322424" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322425" id="2322425" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322428" id="2322428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322429" id="2322429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322433" id="2322433" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322434" id="2322434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322438" id="2322438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322439" id="2322439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322440" id="2322440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322444" id="2322444" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8793.html" id="ALSA-2024:8793" type="self" title="ALSA-2024:8793"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="thunderbird" version="128.4.0" release="1.el9_4.alma.1" epoch="0" arch="s390x" src="thunderbird-128.4.0-1.el9_4.alma.1.src.rpm">
          <filename>thunderbird-128.4.0-1.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">90399a724b3e18b22e3c10b79fff25b791e3e1ec7f1057ec79953a29b547e4d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8800</id>
    <title>Important: openexr security update</title>
    <issued date="2024-11-04 00:00:00"/>
    <updated date="2024-11-04 23:04:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openexr security update</summary>
    <description>OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.  

Security Fix(es):  

  * OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8800" id="RHSA-2024:8800" type="rhsa" title="RHSA-2024:8800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5841" id="CVE-2023-5841" type="cve" title="CVE-2023-5841"/>
      <reference href="https://bugzilla.redhat.com/2262397" id="2262397" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8800.html" id="ALSA-2024:8800" type="self" title="ALSA-2024:8800"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="openexr-libs" version="3.1.1" release="2.el9_4.1" epoch="0" arch="s390x" src="openexr-3.1.1-2.el9_4.1.src.rpm">
          <filename>openexr-libs-3.1.1-2.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">090cd942b418304dfe59c4613a5c71c33a4e16fe1b1fa6ceca09fea9e8c5bc24</sum>
        </package>
        <package name="openexr" version="3.1.1" release="2.el9_4.1" epoch="0" arch="s390x" src="openexr-3.1.1-2.el9_4.1.src.rpm">
          <filename>openexr-3.1.1-2.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">56b3bcc5a6bd6a3b75106de617d40be5c9644acc2cc1c603fef2d893ffd4689b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8914</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-05 22:28:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: NULL pointer dereference in tif_dirinfo.c (CVE-2024-7006)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8914" id="RHSA-2024:8914" type="rhsa" title="RHSA-2024:8914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7006" id="CVE-2024-7006" type="cve" title="CVE-2024-7006"/>
      <reference href="https://bugzilla.redhat.com/2302996" id="2302996" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8914.html" id="ALSA-2024:8914" type="self" title="ALSA-2024:8914"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libtiff-devel" version="4.4.0" release="12.el9_4.1" epoch="0" arch="s390x" src="libtiff-4.4.0-12.el9_4.1.src.rpm">
          <filename>libtiff-devel-4.4.0-12.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">fa7dabf020a6c5607897fc7f53d1a1ed2224cf4bb6f9dfbeb0fd6ad6d1e39a81</sum>
        </package>
        <package name="libtiff" version="4.4.0" release="12.el9_4.1" epoch="0" arch="s390x" src="libtiff-4.4.0-12.el9_4.1.src.rpm">
          <filename>libtiff-4.4.0-12.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">fc78119f0079c6af3bcefab86f3cc232d52d914c2faf8703a874944aca0339b2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8935</id>
    <title>Moderate: edk2 security update</title>
    <issued date="2024-11-06 00:00:00"/>
    <updated date="2024-11-08 09:03:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.   

Security Fix(es):  

  * openssl: Possible denial of service in X.509 name checks (CVE-2024-6119)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8935" id="RHSA-2024:8935" type="rhsa" title="RHSA-2024:8935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6119" id="CVE-2024-6119" type="cve" title="CVE-2024-6119"/>
      <reference href="https://bugzilla.redhat.com/2306158" id="2306158" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8935.html" id="ALSA-2024:8935" type="self" title="ALSA-2024:8935"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="edk2-aarch64" version="20231122" release="6.el9_4.4" epoch="0" arch="noarch" src="edk2-20231122-6.el9_4.4.src.rpm">
          <filename>edk2-aarch64-20231122-6.el9_4.4.noarch.rpm</filename>
          <sum type="sha256">6ead2d3429f2753faeac142fafcbdb556ed7e654686566cc8c3c51d6d0443a73</sum>
        </package>
        <package name="edk2-ovmf" version="20231122" release="6.el9_4.4" epoch="0" arch="noarch" src="edk2-20231122-6.el9_4.4.src.rpm">
          <filename>edk2-ovmf-20231122-6.el9_4.4.noarch.rpm</filename>
          <sum type="sha256">f240e4196ec775d8927b7347b3954c802adec030b855c4acc8bda3228f24530f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9051</id>
    <title>Important: podman security update</title>
    <issued date="2024-11-11 00:00:00"/>
    <updated date="2024-11-11 07:47:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (CVE-2024-9407)
  * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675)
  * Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2024-9676)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9051" id="RHSA-2024:9051" type="rhsa" title="RHSA-2024:9051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9407" id="CVE-2024-9407" type="cve" title="CVE-2024-9407"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9675" id="CVE-2024-9675" type="cve" title="CVE-2024-9675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9676" id="CVE-2024-9676" type="cve" title="CVE-2024-9676"/>
      <reference href="https://bugzilla.redhat.com/2315887" id="2315887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317458" id="2317458" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317467" id="2317467" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9051.html" id="ALSA-2024:9051" type="self" title="ALSA-2024:9051"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="podman-plugins" version="4.9.4" release="16.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-16.el9_4.src.rpm">
          <filename>podman-plugins-4.9.4-16.el9_4.s390x.rpm</filename>
          <sum type="sha256">34bd3b7fa0aad185028b5b8f8588a570fce893c5f3be8863684220d58de681b6</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="16.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-16.el9_4.src.rpm">
          <filename>podman-tests-4.9.4-16.el9_4.s390x.rpm</filename>
          <sum type="sha256">873ad89948902fb2bdd4feda05895028d4377e3a421bbb3af78bbef3f8ddeac6</sum>
        </package>
        <package name="podman" version="4.9.4" release="16.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-16.el9_4.src.rpm">
          <filename>podman-4.9.4-16.el9_4.s390x.rpm</filename>
          <sum type="sha256">ab3f797451eec4cb8722badc0c7ed19d139cf71381163d5127dbab0aaf2aa08d</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="16.el9_4" epoch="4" arch="s390x" src="podman-4.9.4-16.el9_4.src.rpm">
          <filename>podman-remote-4.9.4-16.el9_4.s390x.rpm</filename>
          <sum type="sha256">b382c675c7f3f49bcfc584b31721624147e7bc14e3320d8dd6151ab078828a8a</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="16.el9_4" epoch="4" arch="noarch" src="podman-4.9.4-16.el9_4.src.rpm">
          <filename>podman-docker-4.9.4-16.el9_4.noarch.rpm</filename>
          <sum type="sha256">cd443bee4356a06d153ed758b873dc9841cf680477297951706ae1557bd1a9bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9089</id>
    <title>Moderate: containernetworking-plugins security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>containernetworking-plugins security update</summary>
    <description>The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted.   

Security Fix(es):  

  * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
  * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9089" id="RHSA-2024:9089" type="rhsa" title="RHSA-2024:9089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24788" id="CVE-2024-24788" type="cve" title="CVE-2024-24788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24791" id="CVE-2024-24791" type="cve" title="CVE-2024-24791"/>
      <reference href="https://bugzilla.redhat.com/2279814" id="2279814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295310" id="2295310" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9089.html" id="ALSA-2024:9089" type="self" title="ALSA-2024:9089"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="containernetworking-plugins" version="1.5.1" release="2.el9" epoch="1" arch="s390x" src="containernetworking-plugins-1.5.1-2.el9.src.rpm">
          <filename>containernetworking-plugins-1.5.1-2.el9.s390x.rpm</filename>
          <sum type="sha256">86c7d7cdb15f05680cb1a719eed92defc3f50b3e6d4b4a006cfa8935293c7664</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9093</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
  * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
  * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9093" id="RHSA-2024:9093" type="rhsa" title="RHSA-2024:9093"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31080" id="CVE-2024-31080" type="cve" title="CVE-2024-31080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31081" id="CVE-2024-31081" type="cve" title="CVE-2024-31081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31083" id="CVE-2024-31083" type="cve" title="CVE-2024-31083"/>
      <reference href="https://bugzilla.redhat.com/2271997" id="2271997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271998" id="2271998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272000" id="2272000" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9093.html" id="ALSA-2024:9093" type="self" title="ALSA-2024:9093"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="xorg-x11-server-Xwayland" version="23.2.7" release="1.el9" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-23.2.7-1.el9.src.rpm">
          <filename>xorg-x11-server-Xwayland-23.2.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">9a027fc09be6ddbaeb8fba16abda572ab536edb173734548823e746202534efa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9097</id>
    <title>Moderate: buildah security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-19 06:25:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.   

Security Fix(es):  

  * containers/image: digest type does not guarantee valid type (CVE-2024-3727)
  * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9097" id="RHSA-2024:9097" type="rhsa" title="RHSA-2024:9097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24791" id="CVE-2024-24791" type="cve" title="CVE-2024-24791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3727" id="CVE-2024-3727" type="cve" title="CVE-2024-3727"/>
      <reference href="https://bugzilla.redhat.com/2274767" id="2274767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295310" id="2295310" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9097.html" id="ALSA-2024:9097" type="self" title="ALSA-2024:9097"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="buildah-tests" version="1.37.2" release="1.el9" epoch="2" arch="s390x" src="buildah-1.37.2-1.el9.src.rpm">
          <filename>buildah-tests-1.37.2-1.el9.s390x.rpm</filename>
          <sum type="sha256">436f25445c648134d1c424ebec471a41fabacc57ccd63f1efb2c0325c22c6ddc</sum>
        </package>
        <package name="buildah" version="1.37.2" release="1.el9" epoch="2" arch="s390x" src="buildah-1.37.2-1.el9.src.rpm">
          <filename>buildah-1.37.2-1.el9.s390x.rpm</filename>
          <sum type="sha256">f03acf2ed4cd604800717fb12d479759a704948eb1c11eda5d59ded55b2ef2d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9098</id>
    <title>Moderate: skopeo security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>skopeo security update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.   

Security Fix(es):  

  * containers/image: digest type does not guarantee valid type (CVE-2024-3727)
  * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
  * go-retryable[http:](http:) url might write sensitive information to log file (CVE-2024-6104)
  * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9098" id="RHSA-2024:9098" type="rhsa" title="RHSA-2024:9098"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24788" id="CVE-2024-24788" type="cve" title="CVE-2024-24788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24791" id="CVE-2024-24791" type="cve" title="CVE-2024-24791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3727" id="CVE-2024-3727" type="cve" title="CVE-2024-3727"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6104" id="CVE-2024-6104" type="cve" title="CVE-2024-6104"/>
      <reference href="https://bugzilla.redhat.com/2274767" id="2274767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279814" id="2279814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294000" id="2294000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295310" id="2295310" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9098.html" id="ALSA-2024:9098" type="self" title="ALSA-2024:9098"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="skopeo-tests" version="1.16.1" release="1.el9" epoch="2" arch="s390x" src="skopeo-1.16.1-1.el9.src.rpm">
          <filename>skopeo-tests-1.16.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">07fe07efbf54bf185b6424df987512d182655e8a3602e139873d273dbc89dc81</sum>
        </package>
        <package name="skopeo" version="1.16.1" release="1.el9" epoch="2" arch="s390x" src="skopeo-1.16.1-1.el9.src.rpm">
          <filename>skopeo-1.16.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">403e6ae5839c7f5afab0fbe5cbe9fb66a3afb8246d4e3b649393fa2ce20dbfdf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9114</id>
    <title>Moderate: gnome-shell and gnome-shell-extensions security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-19 06:29:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnome-shell and gnome-shell-extensions security update</summary>
    <description>GNOME Shell acts as a compositing manager for the desktop, and displays both application windows and other objects. It provides core interface functions like switching windows, launching applications, and notifications. It takes advantage of the capabilities of modern graphics hardware and introduces innovative user interface concepts.   

Security Fix(es):  

  * gnome-shell: code execution in portal helper (CVE-2024-36472)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9114" id="RHSA-2024:9114" type="rhsa" title="RHSA-2024:9114"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36472" id="CVE-2024-36472" type="cve" title="CVE-2024-36472"/>
      <reference href="https://bugzilla.redhat.com/2283750" id="2283750" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9114.html" id="ALSA-2024:9114" type="self" title="ALSA-2024:9114"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="gnome-shell-extension-systemMonitor" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-systemMonitor-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">038a6ca646514a4289b90d50b3a382c98008e1927ec9c090fc55919696320510</sum>
        </package>
        <package name="gnome-shell-extension-screenshot-window-sizer" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-screenshot-window-sizer-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">23547f205b09d7c05816aacab9322d9a421b3eb025dc903d1af598efcb71ac2d</sum>
        </package>
        <package name="gnome-shell-extension-common" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-common-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">26dd8f424121a86af4520e5277f915e64aad4e6c6f58195c5337a27ef31d275f</sum>
        </package>
        <package name="gnome-shell-extension-workspace-indicator" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-workspace-indicator-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">300fd231adbcc889d30dc539482f4d4e887ca520409f40a83d47aa6b82d19629</sum>
        </package>
        <package name="gnome-shell-extension-updates-dialog" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-updates-dialog-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">308fdc076d131ac0dae9b0bbdb55a609e5a3f6bbd95a5c4cc7ca9d0c224ccb1e</sum>
        </package>
        <package name="gnome-shell-extension-gesture-inhibitor" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-gesture-inhibitor-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">3891c630c048f1adac55a5c3f77ac09729f4568659d60e3330719e5e76d6af4b</sum>
        </package>
        <package name="gnome-shell-extension-classification-banner" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-classification-banner-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">392e7e70ee0b06c5121e2f18a459bd21983e75ebaf8879445db8417edde9b4a5</sum>
        </package>
        <package name="gnome-shell-extension-desktop-icons" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-desktop-icons-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">4d9118b31b3d2fd09310c6083bb5cf261bd339b18f18d555348dee43ed7d19bd</sum>
        </package>
        <package name="gnome-shell-extension-heads-up-display" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-heads-up-display-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">5b6f86ebd8bd845d3b5229c8800c073ae4779b9f91afed738ce737e2247c2c9f</sum>
        </package>
        <package name="gnome-shell-extension-user-theme" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-user-theme-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">5f882209169ce32ad0146d8b231765dac30c51ad335ca40e5223b03756b71816</sum>
        </package>
        <package name="gnome-shell-extension-custom-menu" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-custom-menu-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">6c51bbaa003c1628786eb06c957dfc2802f084c2cf22e7a78b1e555dd084588e</sum>
        </package>
        <package name="gnome-shell-extension-dash-to-dock" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-dash-to-dock-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">6e8601dd9b24a6b1758ac1e7e1322974e0c0de8946a7654beff4a904f6945c37</sum>
        </package>
        <package name="gnome-shell-extension-window-list" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-window-list-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">750813fb7a7f4bc564a3f6cb98e7c0d870a79fc4bc9270444b92aa13140ddce3</sum>
        </package>
        <package name="gnome-shell-extension-panel-favorites" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-panel-favorites-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">81f3487bda6ef31b3ad8c34ca92cc3c3648f5273ed76961b185b43500ff7042b</sum>
        </package>
        <package name="gnome-shell-extension-windowsNavigator" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-windowsNavigator-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">97af102fd81f14d1bb81ab45ede9c99d3e6cca06670604f6c65509179e2fe1e1</sum>
        </package>
        <package name="gnome-classic-session" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-classic-session-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">9d313e6f328eedadf34848606dc7382333b92de818fba895caf0fef0c6406cbe</sum>
        </package>
        <package name="gnome-shell-extension-apps-menu" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-apps-menu-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">a956dc78a5d002213472f231f98e7f1ae75a55e90f37113de7b94272898f847c</sum>
        </package>
        <package name="gnome-shell-extension-places-menu" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-places-menu-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">abcdbbcb2236a7dcf558d56c4fb5d702d9f646c44d3e52a060b7041c297d67bc</sum>
        </package>
        <package name="gnome-shell-extension-top-icons" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-top-icons-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">c5160b0e8b8becda49a40b70dc09f8408ea2c5f03276d68ad7785355f9cc0806</sum>
        </package>
        <package name="gnome-shell" version="40.10" release="21.el9" epoch="0" arch="s390x" src="gnome-shell-40.10-21.el9.src.rpm">
          <filename>gnome-shell-40.10-21.el9.s390x.rpm</filename>
          <sum type="sha256">c93246ebec55f1e8163863911564325933bc6e1dcf3cf1a51f465a9ec5f57175</sum>
        </package>
        <package name="gnome-shell-extension-launch-new-instance" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-launch-new-instance-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">d13c7f4747c58c18c9c94d68de9fbd4ca25057ed656832afeb73eaf58a8fda9e</sum>
        </package>
        <package name="gnome-shell-extension-drive-menu" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-drive-menu-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">d6675c78a285a915f4fc8d4b340d07a49c35f77681d0964297bc08c6ae1d909e</sum>
        </package>
        <package name="gnome-shell-extension-native-window-placement" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-native-window-placement-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">dce4645603853b8c2f33d7a34c7d4e508c4a835dd0e240632e32e81c7555b9d1</sum>
        </package>
        <package name="gnome-shell-extension-dash-to-panel" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-dash-to-panel-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">e5049e349f79964c6a93942e2425e77423ad8382689de047bea09986b155d00d</sum>
        </package>
        <package name="gnome-shell-extension-auto-move-windows" version="40.7" release="19.el9" epoch="0" arch="noarch" src="gnome-shell-extensions-40.7-19.el9.src.rpm">
          <filename>gnome-shell-extension-auto-move-windows-40.7-19.el9.noarch.rpm</filename>
          <sum type="sha256">fdacd41b4fed9e3551df97aff1142f8a2cb2f94fc0d6e2eb153a393fca332377</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9115</id>
    <title>Moderate: grafana security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-19 06:30:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
  * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
  * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
  * go-retryable[http:](http:) url might write sensitive information to log file (CVE-2024-6104)
  * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9115" id="RHSA-2024:9115" type="rhsa" title="RHSA-2024:9115"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24788" id="CVE-2024-24788" type="cve" title="CVE-2024-24788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24789" id="CVE-2024-24789" type="cve" title="CVE-2024-24789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24790" id="CVE-2024-24790" type="cve" title="CVE-2024-24790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24791" id="CVE-2024-24791" type="cve" title="CVE-2024-24791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6104" id="CVE-2024-6104" type="cve" title="CVE-2024-6104"/>
      <reference href="https://bugzilla.redhat.com/2279814" id="2279814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292668" id="2292668" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292787" id="2292787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294000" id="2294000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295310" id="2295310" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9115.html" id="ALSA-2024:9115" type="self" title="ALSA-2024:9115"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="grafana" version="10.2.6" release="4.el9" epoch="0" arch="s390x" src="grafana-10.2.6-4.el9.src.rpm">
          <filename>grafana-10.2.6-4.el9.s390x.rpm</filename>
          <sum type="sha256">3a0df0aeec9eb7c13cefaa6c518a1f5bbb2f16fe58c74359eafcdae80f740260</sum>
        </package>
        <package name="grafana-selinux" version="10.2.6" release="4.el9" epoch="0" arch="s390x" src="grafana-10.2.6-4.el9.src.rpm">
          <filename>grafana-selinux-10.2.6-4.el9.s390x.rpm</filename>
          <sum type="sha256">a3993476d7a2d1aca83bb0657ae730f0cc6f94542f42aed291057b91496170c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9122</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:50:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
  * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
  * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9122" id="RHSA-2024:9122" type="rhsa" title="RHSA-2024:9122"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31080" id="CVE-2024-31080" type="cve" title="CVE-2024-31080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31081" id="CVE-2024-31081" type="cve" title="CVE-2024-31081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31083" id="CVE-2024-31083" type="cve" title="CVE-2024-31083"/>
      <reference href="https://bugzilla.redhat.com/2271997" id="2271997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271998" id="2271998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272000" id="2272000" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9122.html" id="ALSA-2024:9122" type="self" title="ALSA-2024:9122"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="26.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el9.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-26.el9.s390x.rpm</filename>
          <sum type="sha256">163650150edb7b2a900c21d7499082679e80326ee94de8b5c9a57738a48507ce</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="26.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el9.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-26.el9.s390x.rpm</filename>
          <sum type="sha256">2114e31234243b36d603324411ec6295093017604a0565a7207890c1c823fbe4</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="26.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el9.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-26.el9.s390x.rpm</filename>
          <sum type="sha256">4ff758c65e5291a4d270d278e7f0339fe3d05756b0319c66f0f85edd3839b97c</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="26.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el9.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-26.el9.s390x.rpm</filename>
          <sum type="sha256">ca7c764e950521145bc3f07e75fc3a2854ed4dbec3ff7dd842812b5eca3d353a</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="26.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el9.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-26.el9.s390x.rpm</filename>
          <sum type="sha256">da31cc5469301d9a7ef34d68f49428cbaed9c35330c562a0b98980ea234ee330</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="26.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el9.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-26.el9.s390x.rpm</filename>
          <sum type="sha256">ef2340369dd1bb7b2560014882ba0bf96e5d6ec5684b773657f66d20e5549ee6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9128</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:56:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.  

Security Fix(es):  

  * libvirt: Crash of virtinterfaced via virConnectListInterfaces() (CVE-2024-8235)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9128" id="RHSA-2024:9128" type="rhsa" title="RHSA-2024:9128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8235" id="CVE-2024-8235" type="cve" title="CVE-2024-8235"/>
      <reference href="https://bugzilla.redhat.com/2308680" id="2308680" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9128.html" id="ALSA-2024:9128" type="self" title="ALSA-2024:9128"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libvirt-daemon-driver-storage-core" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">08cd3e525891731e0d9ed62344c0f7aa1390e641ec11fb3433277f31caf0f4c2</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-interface-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">0c9280adcf1046a38f338f2c4028fd01723f67e28df84d9a631b33238cfc8fbe</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">0ffba1f12af97d4cf780fc6e32e08591b0d0eb00d90e6e82170e62e757e07685</sum>
        </package>
        <package name="libvirt-daemon-log" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-log-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">157395cf5efb7966ec77d77e56ad7ade804e1834893ecc44e67d96efba9d586e</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">25dd8c85bf5706806f3b23714e4ad8a8631d4cf8af87a2d2feef9f047b5b75eb</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-qemu-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">27ba42fa0c1d650de8af06ccfb768eb6081d7fa2751861a133dcf975f81328d6</sum>
        </package>
        <package name="libvirt-daemon-lock" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-lock-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">2c66ae0571302ea42763d0a8ffeb36ca09d3bf043fa4f9d526e57e0813743c88</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">2d8b9af53115526dd2e9f6081a99c72e55b9a069271be2a2281b90229e73b071</sum>
        </package>
        <package name="libvirt-nss" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-nss-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">2d9c49133bfaa1a4eecced9e52f7ddde5a3f9a5397991b4b80ec1d3a0e345cd3</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">32ba4d8a0d82d6ce0738e99b4ffb0823284dd0415a7abdfed0d90ea6d3c0134f</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-config-network-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">429ab07f350a5c04bd0fd70f001db09cc8dce25e7761abf695b02e442cdbaf62</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-network-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">55dd80e5a3f2a17c61ceecc4075cc5fcbd5823c8fa6874ac8efc73b4053fa08e</sum>
        </package>
        <package name="libvirt-daemon-plugin-lockd" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-lockd-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">591f53740c4fcc1ea2cb7adb1cf24327e481baea9d86825a2bc4a94a87256c71</sum>
        </package>
        <package name="libvirt-daemon-common" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-common-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">5e3107c167d53616f1cf92c1d6d13750420230e332c57878b7ca4966f80d5ba6</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">5f3f1186125a8ff1f97903b57ba780c8543580543c348c62d6f7de3e2c654c28</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">6635a8597bbb4bfa0c06ac06f83382c3f2d413d2546e2354058e2f223ae7db21</sum>
        </package>
        <package name="libvirt-client" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-client-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">6edf33eff44a9ea4e019c968015b6f72ac64fce3064f55fa3caffd190091dc79</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-kvm-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">826d400151cab96d691fe43199f95d1578153326c5abb31b731b7a06e4cf3f43</sum>
        </package>
        <package name="libvirt-client-qemu" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-client-qemu-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">842c24a207c4981a65cf9fa94dc391df667525be946a470b7ed8785a1de0c753</sum>
        </package>
        <package name="libvirt-libs" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-libs-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">87a61d8e7ad3819762f98aa1078ee2f96ee52090ef96a73caa47cb1e07a7f615</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">8fa144fbb2b7326875be359db775ddf50feb8a25deb7785df29b45c71a9eb7a9</sum>
        </package>
        <package name="libvirt" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">926d1271711489ae31c09ab3c650a53b8ea5d36483fafce4ba8a29cd1201f2d4</sum>
        </package>
        <package name="libvirt-daemon-proxy" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-proxy-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">9aae553ba0df62b5a16bfcd0c3821df2ca7d906e3c8cbff1bd0411343e6bffcb</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">a601206fa84dc6e09e5088b3fb26b20fe0a949fc45116b32f55bfb18b8d54f3a</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-secret-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">c8c33a89412e4f111dad086edaf49f53d055dc7b714d3290eb555f87aea2628f</sum>
        </package>
        <package name="libvirt-ssh-proxy" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-ssh-proxy-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">cf30000c368a5fd34343f6ff9f7b652602ddd3036ef1462a8898089dd8e3ae30</sum>
        </package>
        <package name="libvirt-daemon" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">e3cba3e4a9c14085e15b2a0115a8fc11b0c4811cc6cbae62bfecbcd5a9ac23a0</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">e7e3a56ecc6cc7479d21ab3548565814b54740b891cec50231b2397cb7402471</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">f06086b2709ae89d41577824abc7dcb0693a43002d21dd1bcd262295c532126f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9135</id>
    <title>Moderate: toolbox security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>toolbox security update</summary>
    <description>Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI.  

Security Fix(es):  

  * golang: net/[http:](http:) golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
  * golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785)
  * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
  * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9135" id="RHSA-2024:9135" type="rhsa" title="RHSA-2024:9135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45290" id="CVE-2023-45290" type="cve" title="CVE-2023-45290"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24785" id="CVE-2024-24785" type="cve" title="CVE-2024-24785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24788" id="CVE-2024-24788" type="cve" title="CVE-2024-24788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24791" id="CVE-2024-24791" type="cve" title="CVE-2024-24791"/>
      <reference href="https://bugzilla.redhat.com/2268017" id="2268017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268022" id="2268022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279814" id="2279814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295310" id="2295310" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9135.html" id="ALSA-2024:9135" type="self" title="ALSA-2024:9135"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="toolbox" version="0.0.99.5" release="5.el9" epoch="0" arch="s390x" src="toolbox-0.0.99.5-5.el9.src.rpm">
          <filename>toolbox-0.0.99.5-5.el9.s390x.rpm</filename>
          <sum type="sha256">04c8b37f9c1d69ce08c1f2885dccf33cc8b912077533b44a50582de9649f0f28</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="5.el9" epoch="0" arch="s390x" src="toolbox-0.0.99.5-5.el9.src.rpm">
          <filename>toolbox-tests-0.0.99.5-5.el9.s390x.rpm</filename>
          <sum type="sha256">1c20fd10cd6d96e44139018861f5a10539c0d56c7296c7ea798a8501578318cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9136</id>
    <title>Moderate: qemu-kvm security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:54:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qemu-kvm security update</summary>
    <description>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.  

Security Fix(es):  

  * QEMU: SR-IOV: improper validation of NumVFs leads to buffer overflow (CVE-2024-26327)
  * QEMU: virtio: DMA reentrancy issue leads to double free vulnerability (CVE-2024-3446)
  * QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure (CVE-2024-7409)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9136" id="RHSA-2024:9136" type="rhsa" title="RHSA-2024:9136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26327" id="CVE-2024-26327" type="cve" title="CVE-2024-26327"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3446" id="CVE-2024-3446" type="cve" title="CVE-2024-3446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7409" id="CVE-2024-7409" type="cve" title="CVE-2024-7409"/>
      <reference href="https://bugzilla.redhat.com/2264844" id="2264844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274211" id="2274211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302487" id="2302487" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9136.html" id="ALSA-2024:9136" type="self" title="ALSA-2024:9136"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="qemu-kvm-audio-pa" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-kvm-audio-pa-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">346afaddb71b88ad73b47956d1d8c7a4713130c164f60aefb8e9ce8f0c7f95f8</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-kvm-block-curl-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">356f898df9fd0ea27f33dda63c1c4161ad7153edf863b03920fa0aef974ea496</sum>
        </package>
        <package name="qemu-kvm-core" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-kvm-core-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">406330240a9d12342fa260cac302fcc1d15a29ac9edd3c9b9a8d5f44ab444790</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">42c3ca6724d753fb65e1ecf9a6a29237d922575956e35abf452ed46f15326fe9</sum>
        </package>
        <package name="qemu-kvm-block-blkio" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-kvm-block-blkio-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">58d1159b25803c589336b0189b867171636431acf289fad79c39cb2cea820966</sum>
        </package>
        <package name="qemu-img" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-img-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">63ac6663562a534bdde7a0665ebe818270825a0ad8901fdf3bfc2afa77f20a80</sum>
        </package>
        <package name="qemu-guest-agent" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-guest-agent-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">63f7ed3b65d863caa55f86b6f559be7c89fcebad2c6692e1135e80b0fe9ffbb9</sum>
        </package>
        <package name="qemu-kvm" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-kvm-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">65e985d0dafcaa80742e1fa157ac2f608bfde482677ba2d2d88771277bc61cad</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-kvm-block-rbd-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">775355bc683512d795d0de7823a9592b53a0819d38864c464da121b177c58253</sum>
        </package>
        <package name="qemu-kvm-tools" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-kvm-tools-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">9b9cfc003bff8abf6e6ac2f33faca361ed39509784327c6c3e2b3d9e14e6bf49</sum>
        </package>
        <package name="qemu-kvm-device-usb-host" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-kvm-device-usb-host-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">9dda50bdf1f7c0b5d08666fbbed6f3c423d19a88ca72f6d439f40e3b857f34c1</sum>
        </package>
        <package name="qemu-pr-helper" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-pr-helper-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">a6764ca2713c55084edcf58560c8eeb6d727a8f586229813b57cee0f9fda02c8</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu-ccw" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-kvm-device-display-virtio-gpu-ccw-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">a88aba92433d2e0c16fb044ab6b690b739d8c4746443cc76709bea0da93bd58d</sum>
        </package>
        <package name="qemu-kvm-docs" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-kvm-docs-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">d5170b11d92a58accc16fac3b31ccbeec244beab4b152790014c00c3df7852bb</sum>
        </package>
        <package name="qemu-kvm-common" version="9.0.0" release="10.el9_5" epoch="17" arch="s390x" src="qemu-kvm-9.0.0-10.el9_5.src.rpm">
          <filename>qemu-kvm-common-9.0.0-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">f463faf799924b2d7ff1c4a8865909b4a1d723317d392e7449fc1805d7d6847a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9144</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-19 06:23:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkit: visiting a malicious website may lead to address bar spoofing (CVE-2023-42843)
  * webkit: heap use-after-free may lead to arbitrary code execution (CVE-2023-42950)
  * webkit: processing malicious web content may lead to a denial of service (CVE-2023-42956)
  * chromium-browser: Use after free in ANGLE (CVE-2024-4558)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9144" id="RHSA-2024:9144" type="rhsa" title="RHSA-2024:9144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42843" id="CVE-2023-42843" type="cve" title="CVE-2023-42843"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42950" id="CVE-2023-42950" type="cve" title="CVE-2023-42950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42956" id="CVE-2023-42956" type="cve" title="CVE-2023-42956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4558" id="CVE-2024-4558" type="cve" title="CVE-2024-4558"/>
      <reference href="https://bugzilla.redhat.com/2271717" id="2271717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271718" id="2271718" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271719" id="2271719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279689" id="2279689" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9144.html" id="ALSA-2024:9144" type="self" title="ALSA-2024:9144"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="webkit2gtk3-jsc" version="2.44.3" release="2.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.44.3-2.el9.src.rpm">
          <filename>webkit2gtk3-jsc-2.44.3-2.el9.s390x.rpm</filename>
          <sum type="sha256">5891a6a24ad76557b894b6b3418d5f7a6e1a0ccc968f79ea4c937f407bfefd76</sum>
        </package>
        <package name="webkit2gtk3" version="2.44.3" release="2.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.44.3-2.el9.src.rpm">
          <filename>webkit2gtk3-2.44.3-2.el9.s390x.rpm</filename>
          <sum type="sha256">ad6ea617ab4190b8a6b638ab2b529283e881aab745bbcbc13fd5bf9029d1ba9c</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.44.3" release="2.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.44.3-2.el9.src.rpm">
          <filename>webkit2gtk3-devel-2.44.3-2.el9.s390x.rpm</filename>
          <sum type="sha256">b8d89b1743b0e4a7cc52b8db21fb2eb92943ada0b6cdc1cac7d6c4e66f97ad62</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.44.3" release="2.el9" epoch="0" arch="s390x" src="webkit2gtk3-2.44.3-2.el9.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.44.3-2.el9.s390x.rpm</filename>
          <sum type="sha256">ef4ff01ad239c10ef7c83ede114780deb9168374386ec8a373203eff05b38220</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9150</id>
    <title>Moderate: python-jinja2 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:48:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-jinja2 security update</summary>
    <description>The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment.   

Security Fix(es):  

  * jinja2: accepts keys containing non-attribute characters (CVE-2024-34064)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9150" id="RHSA-2024:9150" type="rhsa" title="RHSA-2024:9150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34064" id="CVE-2024-34064" type="cve" title="CVE-2024-34064"/>
      <reference href="https://bugzilla.redhat.com/2279476" id="2279476" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9150.html" id="ALSA-2024:9150" type="self" title="ALSA-2024:9150"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3-jinja2" version="2.11.3" release="6.el9" epoch="0" arch="noarch" src="python-jinja2-2.11.3-6.el9.src.rpm">
          <filename>python3-jinja2-2.11.3-6.el9.noarch.rpm</filename>
          <sum type="sha256">c2e94cdf42485c89ff688bf4214002f4935732183fbb072404e58cb8899c30c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9158</id>
    <title>Moderate: lldpd security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>lldpd security update</summary>
    <description>LLDP is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer notifications to adjacent network devices.  

Security Fix(es):  

  * lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827)
  * lldpd: out-of-bounds read when decoding SONMP packets (CVE-2021-43612)
  * lldpd: CDP PDU Packet cdp.c out-of-bounds read (CVE-2023-41910)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9158" id="RHSA-2024:9158" type="rhsa" title="RHSA-2024:9158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-27827" id="CVE-2020-27827" type="cve" title="CVE-2020-27827"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-43612" id="CVE-2021-43612" type="cve" title="CVE-2021-43612"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41910" id="CVE-2023-41910" type="cve" title="CVE-2023-41910"/>
      <reference href="https://bugzilla.redhat.com/1921438" id="1921438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2040388" id="2040388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237411" id="2237411" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9158.html" id="ALSA-2024:9158" type="self" title="ALSA-2024:9158"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="lldpd-devel" version="1.0.18" release="4.el9" epoch="0" arch="s390x" src="lldpd-1.0.18-4.el9.src.rpm">
          <filename>lldpd-devel-1.0.18-4.el9.s390x.rpm</filename>
          <sum type="sha256">50c3b99c54e9594d89f6413361de3b3a37296b57d302409a0054806122536a8e</sum>
        </package>
        <package name="lldpd" version="1.0.18" release="4.el9" epoch="0" arch="s390x" src="lldpd-1.0.18-4.el9.src.rpm">
          <filename>lldpd-1.0.18-4.el9.s390x.rpm</filename>
          <sum type="sha256">5f4746c404763b7b5a076590bd8e7d98250e2cb7d1b31ddef29da1fb3504baf1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9167</id>
    <title>Moderate: poppler security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:49:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: pdfinfo: crash in broken documents when using -dests parameter (CVE-2024-6239)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9167" id="RHSA-2024:9167" type="rhsa" title="RHSA-2024:9167"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6239" id="CVE-2024-6239" type="cve" title="CVE-2024-6239"/>
      <reference href="https://bugzilla.redhat.com/2293594" id="2293594" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9167.html" id="ALSA-2024:9167" type="self" title="ALSA-2024:9167"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="poppler-qt5" version="21.01.0" release="21.el9" epoch="0" arch="s390x" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-qt5-21.01.0-21.el9.s390x.rpm</filename>
          <sum type="sha256">51af0d00423888d1ecd2f36cec671ec72d9bb38415ef832f37a502fb60db031f</sum>
        </package>
        <package name="poppler-utils" version="21.01.0" release="21.el9" epoch="0" arch="s390x" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-utils-21.01.0-21.el9.s390x.rpm</filename>
          <sum type="sha256">c6356ad730641c4e6e809c373135ef88cc5c6e8c27a33ccd3318046f9fc16bfa</sum>
        </package>
        <package name="poppler" version="21.01.0" release="21.el9" epoch="0" arch="s390x" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-21.01.0-21.el9.s390x.rpm</filename>
          <sum type="sha256">deedef7a3841ee46598dc2094469c44c3129eb7caec4495f2f3b8fb732b4c76d</sum>
        </package>
        <package name="poppler-glib" version="21.01.0" release="21.el9" epoch="0" arch="s390x" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-glib-21.01.0-21.el9.s390x.rpm</filename>
          <sum type="sha256">ee88f8eb959e469c146073240dc7d477337b8569b4f34526a8bee899fd2d1dba</sum>
        </package>
        <package name="poppler-cpp" version="21.01.0" release="21.el9" epoch="0" arch="s390x" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-cpp-21.01.0-21.el9.s390x.rpm</filename>
          <sum type="sha256">fc06bcf2a313589a1ae8ff93d78c7ca340a1f520deaec2596351a3c46d931496</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9180</id>
    <title>Moderate: mod_auth_openidc security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mod_auth_openidc security update</summary>
    <description>The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.   

Security Fix(es):  

  * mod_auth_openidc: DoS when using `OIDCSessionType client-cookie` and manipulating cookies (CVE-2024-24814)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9180" id="RHSA-2024:9180" type="rhsa" title="RHSA-2024:9180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24814" id="CVE-2024-24814" type="cve" title="CVE-2024-24814"/>
      <reference href="https://bugzilla.redhat.com/2264092" id="2264092" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9180.html" id="ALSA-2024:9180" type="self" title="ALSA-2024:9180"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="mod_auth_openidc" version="2.4.10" release="1.el9" epoch="0" arch="s390x" src="mod_auth_openidc-2.4.10-1.el9.src.rpm">
          <filename>mod_auth_openidc-2.4.10-1.el9.s390x.rpm</filename>
          <sum type="sha256">003822eec00ac733af1364601b9ff7d9397aa8fb0026c31f15ad2728d0b9fd40</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9181</id>
    <title>Moderate: jose security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>jose security update</summary>
    <description>Jose is a C-language implementation of the Javascript Object Signing and Encryption standards. The jose package is a dependency of the clevis and tang packages, together providing Network Bound Disk Encryption (NBDE) in AlmaLinux.  

Security Fix(es):  

  * jose: resource exhaustion (CVE-2024-28176)
  * jose: Denial of service due to uncontrolled CPU consumption (CVE-2023-50967)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9181" id="RHSA-2024:9181" type="rhsa" title="RHSA-2024:9181"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50967" id="CVE-2023-50967" type="cve" title="CVE-2023-50967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28176" id="CVE-2024-28176" type="cve" title="CVE-2024-28176"/>
      <reference href="https://bugzilla.redhat.com/2268820" id="2268820" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270538" id="2270538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9181.html" id="ALSA-2024:9181" type="self" title="ALSA-2024:9181"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="jose" version="14" release="1.el9" epoch="0" arch="s390x" src="jose-14-1.el9.src.rpm">
          <filename>jose-14-1.el9.s390x.rpm</filename>
          <sum type="sha256">2624d16b26c256349c3b213d31b1391e945be0d437c947af8bd6a403a6938a4c</sum>
        </package>
        <package name="libjose" version="14" release="1.el9" epoch="0" arch="s390x" src="jose-14-1.el9.src.rpm">
          <filename>libjose-14-1.el9.s390x.rpm</filename>
          <sum type="sha256">6185f276c825313355f9cf57fb0f3e1f927024ad64eb4102b1a66aa0dc00a7b1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9184</id>
    <title>Moderate: gtk3 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:48:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gtk3 security update</summary>
    <description>The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3.  

Security Fix(es):  

  * gtk3: gtk2: Library injection from CWD (CVE-2024-6655)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9184" id="RHSA-2024:9184" type="rhsa" title="RHSA-2024:9184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6655" id="CVE-2024-6655" type="cve" title="CVE-2024-6655"/>
      <reference href="https://bugzilla.redhat.com/2297098" id="2297098" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9184.html" id="ALSA-2024:9184" type="self" title="ALSA-2024:9184"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="gtk3-immodule-xim" version="3.24.31" release="5.el9" epoch="0" arch="s390x" src="gtk3-3.24.31-5.el9.src.rpm">
          <filename>gtk3-immodule-xim-3.24.31-5.el9.s390x.rpm</filename>
          <sum type="sha256">04aaef855936c697aa55d467eec99bce3090169ad44d38f98093167d897640c8</sum>
        </package>
        <package name="gtk-update-icon-cache" version="3.24.31" release="5.el9" epoch="0" arch="s390x" src="gtk3-3.24.31-5.el9.src.rpm">
          <filename>gtk-update-icon-cache-3.24.31-5.el9.s390x.rpm</filename>
          <sum type="sha256">3516580a90d0f0ce3183c0b230dc4423c9c81c56d70d92dbca11b4f62e2dcd23</sum>
        </package>
        <package name="gtk3-devel" version="3.24.31" release="5.el9" epoch="0" arch="s390x" src="gtk3-3.24.31-5.el9.src.rpm">
          <filename>gtk3-devel-3.24.31-5.el9.s390x.rpm</filename>
          <sum type="sha256">4df65ed4828c8fc9cb7e7f66ab598c50ef7dd004e7cc687f24b4b10f3e7c9ed6</sum>
        </package>
        <package name="gtk3" version="3.24.31" release="5.el9" epoch="0" arch="s390x" src="gtk3-3.24.31-5.el9.src.rpm">
          <filename>gtk3-3.24.31-5.el9.s390x.rpm</filename>
          <sum type="sha256">e0cde5d6331a0b61d22dba512dc660f648df516c70c9f568b157ffddfa08ceed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9185</id>
    <title>Moderate: iperf3 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>iperf3 security update</summary>
    <description>Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.  

Security Fix(es):  

  * iperf3: possible denial of service (CVE-2023-7250,ESNET-SECADV-2023-0002)
  * iperf3: vulnerable to marvin attack if the authentication option is used (CVE-2024-26306)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9185" id="RHSA-2024:9185" type="rhsa" title="RHSA-2024:9185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-7250" id="CVE-2023-7250" type="cve" title="CVE-2023-7250"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26306" id="CVE-2024-26306" type="cve" title="CVE-2024-26306"/>
      <reference href="https://bugzilla.redhat.com/2244707" id="2244707" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270270" id="2270270" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9185.html" id="ALSA-2024:9185" type="self" title="ALSA-2024:9185"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="iperf3" version="3.9" release="13.el9" epoch="0" arch="s390x" src="iperf3-3.9-13.el9.src.rpm">
          <filename>iperf3-3.9-13.el9.s390x.rpm</filename>
          <sum type="sha256">72c23ad94e9975b4aaed0371df13f5a520eb569238f3010cea540fde889bebee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9187</id>
    <title>Low: bcc security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:51:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>bcc security update</summary>
    <description>BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool.  

Security Fix(es):  

  * bcc: unprivileged users can force loading of compromised linux headers (CVE-2024-2314)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9187" id="RHSA-2024:9187" type="rhsa" title="RHSA-2024:9187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2314" id="CVE-2024-2314" type="cve" title="CVE-2024-2314"/>
      <reference href="https://bugzilla.redhat.com/2269019" id="2269019" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9187.html" id="ALSA-2024:9187" type="self" title="ALSA-2024:9187"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="bcc" version="0.30.0" release="6.el9" epoch="0" arch="s390x" src="bcc-0.30.0-6.el9.src.rpm">
          <filename>bcc-0.30.0-6.el9.s390x.rpm</filename>
          <sum type="sha256">c2c6c6ef1af2168390ee1d0d06658abde0cc98cd9ff53d40cde7f1d395521330</sum>
        </package>
        <package name="libbpf-tools" version="0.30.0" release="6.el9" epoch="0" arch="s390x" src="bcc-0.30.0-6.el9.src.rpm">
          <filename>libbpf-tools-0.30.0-6.el9.s390x.rpm</filename>
          <sum type="sha256">e3df4e35b29f03b09d73418ee7854c8824704564b205db19e4b607b120fd1390</sum>
        </package>
        <package name="python3-bcc" version="0.30.0" release="6.el9" epoch="0" arch="noarch" src="bcc-0.30.0-6.el9.src.rpm">
          <filename>python3-bcc-0.30.0-6.el9.noarch.rpm</filename>
          <sum type="sha256">ea87f60b957329202b9687a56a8eaa09ae0ad1c01b6aa1a6f8c42dcad0eb6d62</sum>
        </package>
        <package name="bcc-tools" version="0.30.0" release="6.el9" epoch="0" arch="s390x" src="bcc-0.30.0-6.el9.src.rpm">
          <filename>bcc-tools-0.30.0-6.el9.s390x.rpm</filename>
          <sum type="sha256">f5da41a634ff168abc84b5f5732e71a40414083738b72dd18a3290307491b334</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9188</id>
    <title>Low: bpftrace security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>bpftrace security update</summary>
    <description>BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in recent Linux kernels (4.x). BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing capabilities: kernel dynamic tracing (kprobes), user-level dynamic tracing (uprobes), and tracepoints. The BPFtrace language is inspired by awk and C, and predecessor tracers such as DTrace and SystemTap  

Security Fix(es):  

  * bpftrace: unprivileged users can force loading of compromised linux headers (CVE-2024-2313)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9188" id="RHSA-2024:9188" type="rhsa" title="RHSA-2024:9188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2313" id="CVE-2024-2313" type="cve" title="CVE-2024-2313"/>
      <reference href="https://bugzilla.redhat.com/2269014" id="2269014" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9188.html" id="ALSA-2024:9188" type="self" title="ALSA-2024:9188"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="bpftrace" version="0.21.1" release="1.el9" epoch="0" arch="s390x" src="bpftrace-0.21.1-1.el9.src.rpm">
          <filename>bpftrace-0.21.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">87f993ada4230e368b739cab9b3190546397325941d333e29aaf7f423f494a64</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9190</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 18:13:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.  

Security Fix(es):  

  * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)
  * python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)
  * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9190" id="RHSA-2024:9190" type="rhsa" title="RHSA-2024:9190"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9190.html" id="ALSA-2024:9190" type="self" title="ALSA-2024:9190"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.12-libs" version="3.12.5" release="2.el9" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9.src.rpm">
          <filename>python3.12-libs-3.12.5-2.el9.s390x.rpm</filename>
          <sum type="sha256">4ea2782e54f4e84e4c01a0401505f21e9866c85bcef41d1c593e64814c828923</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.5" release="2.el9" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9.src.rpm">
          <filename>python3.12-tkinter-3.12.5-2.el9.s390x.rpm</filename>
          <sum type="sha256">88c2a615ddaa4d022f55244998d2d506a779a4604145ce5ff99f01e86ed47585</sum>
        </package>
        <package name="python3.12-devel" version="3.12.5" release="2.el9" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9.src.rpm">
          <filename>python3.12-devel-3.12.5-2.el9.s390x.rpm</filename>
          <sum type="sha256">8927167d79049375e8645e1f06e68a2bd2c7f09e4dd2a36c5f60119e398dd7c8</sum>
        </package>
        <package name="python3.12" version="3.12.5" release="2.el9" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9.src.rpm">
          <filename>python3.12-3.12.5-2.el9.s390x.rpm</filename>
          <sum type="sha256">ce5ee3423dfbf1ddaeacb6da57e10f7aae8df1b885c70877735b81b13f334f27</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9192</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 18:11:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)
  * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9192" id="RHSA-2024:9192" type="rhsa" title="RHSA-2024:9192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9192.html" id="ALSA-2024:9192" type="self" title="ALSA-2024:9192"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.11-tkinter" version="3.11.9" release="7.el9" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9.src.rpm">
          <filename>python3.11-tkinter-3.11.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">0b88168cee0f3b1ce2d698ef969783df5207e23c6601bc902c43ebe01d51bea7</sum>
        </package>
        <package name="python3.11-devel" version="3.11.9" release="7.el9" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9.src.rpm">
          <filename>python3.11-devel-3.11.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">85c55002bcbdf08da5587cc3660e7c90b06e50bc11ade87f59ec60e57a5eb92b</sum>
        </package>
        <package name="python3.11-libs" version="3.11.9" release="7.el9" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9.src.rpm">
          <filename>python3.11-libs-3.11.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">8e0acecc0e5501314d765715f1c55cd2ca43e55d6193dd326a7959e473ef9294</sum>
        </package>
        <package name="python3.11" version="3.11.9" release="7.el9" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9.src.rpm">
          <filename>python3.11-3.11.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">fa1e98914af1b29af05e4dc3642644145ddef8e6b9d1061758ec803dc5e17e92</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9193</id>
    <title>Moderate: python3.12-PyMySQL security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:52:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12-PyMySQL security update</summary>
    <description>This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython.  

Security Fix(es):  

  * python-pymysql: SQL injection if used with untrusted JSON input (CVE-2024-36039)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9193" id="RHSA-2024:9193" type="rhsa" title="RHSA-2024:9193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36039" id="CVE-2024-36039" type="cve" title="CVE-2024-36039"/>
      <reference href="https://bugzilla.redhat.com/2282821" id="2282821" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9193.html" id="ALSA-2024:9193" type="self" title="ALSA-2024:9193"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.12-PyMySQL+rsa" version="1.1.0" release="3.el9" epoch="0" arch="noarch" src="python3.12-PyMySQL-1.1.0-3.el9.src.rpm">
          <filename>python3.12-PyMySQL+rsa-1.1.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">665de27ef3f4760443b3dea2bc9d92b783ae9d3e58aa7f7e915ff7bd024e1b71</sum>
        </package>
        <package name="python3.12-PyMySQL" version="1.1.0" release="3.el9" epoch="0" arch="noarch" src="python3.12-PyMySQL-1.1.0-3.el9.src.rpm">
          <filename>python3.12-PyMySQL-1.1.0-3.el9.noarch.rpm</filename>
          <sum type="sha256">ca24e6b68867f6338171b2ec1d569c507a998ffad99a5a9eef972f5e72376e83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9194</id>
    <title>Moderate: python3.11-PyMySQL security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:52:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-PyMySQL security update</summary>
    <description>This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython.  

Security Fix(es):  

  * python-pymysql: SQL injection if used with untrusted JSON input (CVE-2024-36039)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9194" id="RHSA-2024:9194" type="rhsa" title="RHSA-2024:9194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36039" id="CVE-2024-36039" type="cve" title="CVE-2024-36039"/>
      <reference href="https://bugzilla.redhat.com/2282821" id="2282821" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9194.html" id="ALSA-2024:9194" type="self" title="ALSA-2024:9194"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.11-PyMySQL" version="1.0.2" release="2.el9" epoch="0" arch="noarch" src="python3.11-PyMySQL-1.0.2-2.el9.src.rpm">
          <filename>python3.11-PyMySQL-1.0.2-2.el9.noarch.rpm</filename>
          <sum type="sha256">2cff937c79794b89d5a4f880c85da6a6d8fb285441e4f198435f73dee61714a5</sum>
        </package>
        <package name="python3.11-PyMySQL+rsa" version="1.0.2" release="2.el9" epoch="0" arch="noarch" src="python3.11-PyMySQL-1.0.2-2.el9.src.rpm">
          <filename>python3.11-PyMySQL+rsa-1.0.2-2.el9.noarch.rpm</filename>
          <sum type="sha256">9e2948cd6000d9f0b106ef5a3da0e49117f62d629b5e72b80bcc01f1e3a827ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9195</id>
    <title>Moderate: cyrus-imapd security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:48:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cyrus-imapd security update</summary>
    <description>The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support.  

Security Fix(es):  

  * cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command (CVE-2024-34055)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9195" id="RHSA-2024:9195" type="rhsa" title="RHSA-2024:9195"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34055" id="CVE-2024-34055" type="cve" title="CVE-2024-34055"/>
      <reference href="https://bugzilla.redhat.com/2290510" id="2290510" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9195.html" id="ALSA-2024:9195" type="self" title="ALSA-2024:9195"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="cyrus-imapd" version="3.4.8" release="1.el9" epoch="0" arch="s390x" src="cyrus-imapd-3.4.8-1.el9.src.rpm">
          <filename>cyrus-imapd-3.4.8-1.el9.s390x.rpm</filename>
          <sum type="sha256">7eac2d9a5b0fa8e5f830623605cca06393bb25c0f46f92654abbe7529a4717e5</sum>
        </package>
        <package name="cyrus-imapd-utils" version="3.4.8" release="1.el9" epoch="0" arch="s390x" src="cyrus-imapd-3.4.8-1.el9.src.rpm">
          <filename>cyrus-imapd-utils-3.4.8-1.el9.s390x.rpm</filename>
          <sum type="sha256">9ef0ad43e81252d8548a3b3d4bdec9519802fe30b80ce80fe30b16d6aa66b90a</sum>
        </package>
        <package name="perl-Cyrus" version="3.4.8" release="1.el9" epoch="0" arch="s390x" src="cyrus-imapd-3.4.8-1.el9.src.rpm">
          <filename>perl-Cyrus-3.4.8-1.el9.s390x.rpm</filename>
          <sum type="sha256">a15cc779053293e839907ff2c9133cd1ab2dd515b77257f3888e2776f567b6a8</sum>
        </package>
        <package name="cyrus-imapd-libs" version="3.4.8" release="1.el9" epoch="0" arch="s390x" src="cyrus-imapd-3.4.8-1.el9.src.rpm">
          <filename>cyrus-imapd-libs-3.4.8-1.el9.s390x.rpm</filename>
          <sum type="sha256">b9d0d96f3edfb9f8510cc76dbc4af1eb45f66d4dbde2e5248dfd4a3087e94d83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9200</id>
    <title>Moderate: runc security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>runc security update</summary>
    <description>The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.  

Security Fix(es):  

  * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9200" id="RHSA-2024:9200" type="rhsa" title="RHSA-2024:9200"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24788" id="CVE-2024-24788" type="cve" title="CVE-2024-24788"/>
      <reference href="https://bugzilla.redhat.com/2279814" id="2279814" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9200.html" id="ALSA-2024:9200" type="self" title="ALSA-2024:9200"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="runc" version="1.1.13" release="4.el9" epoch="4" arch="s390x" src="runc-1.1.13-4.el9.src.rpm">
          <filename>runc-1.1.13-4.el9.s390x.rpm</filename>
          <sum type="sha256">bc3839b84f189045fd693301669451138afada7effc70076eaee3be2166dbcfd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9243</id>
    <title>Moderate: postfix security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:52:51"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postfix security update</summary>
    <description>The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS.  

Security Fix(es):  

  * postfix: SMTP smuggling vulnerability (CVE-2023-51764)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9243" id="RHSA-2024:9243" type="rhsa" title="RHSA-2024:9243"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51764" id="CVE-2023-51764" type="cve" title="CVE-2023-51764"/>
      <reference href="https://bugzilla.redhat.com/2255563" id="2255563" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9243.html" id="ALSA-2024:9243" type="self" title="ALSA-2024:9243"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="postfix-perl-scripts" version="3.5.25" release="1.el9" epoch="2" arch="s390x" src="postfix-3.5.25-1.el9.src.rpm">
          <filename>postfix-perl-scripts-3.5.25-1.el9.s390x.rpm</filename>
          <sum type="sha256">36c887c41dc881ab738cceb086e14a04d69c3ee0e02ca1585a9e3ab8bb1a35ce</sum>
        </package>
        <package name="postfix-pgsql" version="3.5.25" release="1.el9" epoch="2" arch="s390x" src="postfix-3.5.25-1.el9.src.rpm">
          <filename>postfix-pgsql-3.5.25-1.el9.s390x.rpm</filename>
          <sum type="sha256">3bf0e19a541e6136cf182c9d70716d36003744155f71d67bf86da26fbde4869c</sum>
        </package>
        <package name="postfix-cdb" version="3.5.25" release="1.el9" epoch="2" arch="s390x" src="postfix-3.5.25-1.el9.src.rpm">
          <filename>postfix-cdb-3.5.25-1.el9.s390x.rpm</filename>
          <sum type="sha256">585b847c3832ab4f8b5c93a7bc34f88be03db458179afae6e415098a30a61ada</sum>
        </package>
        <package name="postfix-sqlite" version="3.5.25" release="1.el9" epoch="2" arch="s390x" src="postfix-3.5.25-1.el9.src.rpm">
          <filename>postfix-sqlite-3.5.25-1.el9.s390x.rpm</filename>
          <sum type="sha256">5d0b4ff2845b913f9e84c240e84a25564ebc25e4f964dff30ee6a835c1c87c89</sum>
        </package>
        <package name="postfix-lmdb" version="3.5.25" release="1.el9" epoch="2" arch="s390x" src="postfix-3.5.25-1.el9.src.rpm">
          <filename>postfix-lmdb-3.5.25-1.el9.s390x.rpm</filename>
          <sum type="sha256">62d3588229061e02b5a1a48f138af9992ed2cf70cc26c09a5b31eaca76e958fa</sum>
        </package>
        <package name="postfix-ldap" version="3.5.25" release="1.el9" epoch="2" arch="s390x" src="postfix-3.5.25-1.el9.src.rpm">
          <filename>postfix-ldap-3.5.25-1.el9.s390x.rpm</filename>
          <sum type="sha256">6f37bae29747eaef6e58451fa3b67e93c29bdadae4d181ea86a2b87f5502d851</sum>
        </package>
        <package name="postfix-pcre" version="3.5.25" release="1.el9" epoch="2" arch="s390x" src="postfix-3.5.25-1.el9.src.rpm">
          <filename>postfix-pcre-3.5.25-1.el9.s390x.rpm</filename>
          <sum type="sha256">b60f12d19c4952c30b3e49d39924bf246c9ae91c249ace4280e437daa880ca2b</sum>
        </package>
        <package name="postfix" version="3.5.25" release="1.el9" epoch="2" arch="s390x" src="postfix-3.5.25-1.el9.src.rpm">
          <filename>postfix-3.5.25-1.el9.s390x.rpm</filename>
          <sum type="sha256">c12ee6e4a811fa9ef91057c962f0238b01556dd30fb138625780ee7b8a1055f7</sum>
        </package>
        <package name="postfix-mysql" version="3.5.25" release="1.el9" epoch="2" arch="s390x" src="postfix-3.5.25-1.el9.src.rpm">
          <filename>postfix-mysql-3.5.25-1.el9.s390x.rpm</filename>
          <sum type="sha256">e529caa41bcf0d3056db789249649e4bb001caf2ad3e022496a9022bbb12187d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9277</id>
    <title>Moderate: oci-seccomp-bpf-hook security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>oci-seccomp-bpf-hook security update</summary>
    <description>OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes.  

Security Fix(es):  

  * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9277" id="RHSA-2024:9277" type="rhsa" title="RHSA-2024:9277"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24788" id="CVE-2024-24788" type="cve" title="CVE-2024-24788"/>
      <reference href="https://bugzilla.redhat.com/2279814" id="2279814" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9277.html" id="ALSA-2024:9277" type="self" title="ALSA-2024:9277"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="2.el9" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-2.el9.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-2.el9.s390x.rpm</filename>
          <sum type="sha256">4dd67dde7ae8b1ee29b2095a8e860a1fba8771f0a16da21fe536f14503837039</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9281</id>
    <title>Moderate: python-jwcrypto security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:48:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-jwcrypto security update</summary>
    <description>The python-jwcrypto package provides Python implementations of the JSON Web Key (JWK), JSON Web Signature (JWS), JSON Web Encryption (JWE), and JSON Web Token (JWT) JOSE (JSON Object Signing and Encryption) standards.  

Security Fix(es):  

  * JWCrypto: denail of service Via specifically crafted JWE (CVE-2023-6681)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9281" id="RHSA-2024:9281" type="rhsa" title="RHSA-2024:9281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6681" id="CVE-2023-6681" type="cve" title="CVE-2023-6681"/>
      <reference href="https://bugzilla.redhat.com/2260843" id="2260843" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9281.html" id="ALSA-2024:9281" type="self" title="ALSA-2024:9281"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3-jwcrypto" version="1.5.6" release="2.el9" epoch="0" arch="noarch" src="python-jwcrypto-1.5.6-2.el9.src.rpm">
          <filename>python3-jwcrypto-1.5.6-2.el9.noarch.rpm</filename>
          <sum type="sha256">f23f6bea4cb6abd0e3b01dc52f05da93bc9884a575cf57e6cee873c153e90de6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9306</id>
    <title>Moderate: httpd security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:55:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>httpd security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  

Security Fix(es):  

  * httpd: HTTP response splitting (CVE-2023-38709)
  * httpd: HTTP Response Splitting in multiple modules (CVE-2024-24795)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9306" id="RHSA-2024:9306" type="rhsa" title="RHSA-2024:9306"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38709" id="CVE-2023-38709" type="cve" title="CVE-2023-38709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24795" id="CVE-2024-24795" type="cve" title="CVE-2024-24795"/>
      <reference href="https://bugzilla.redhat.com/2273491" id="2273491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273499" id="2273499" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9306.html" id="ALSA-2024:9306" type="self" title="ALSA-2024:9306"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="httpd-filesystem" version="2.4.62" release="1.el9" epoch="0" arch="noarch" src="httpd-2.4.62-1.el9.src.rpm">
          <filename>httpd-filesystem-2.4.62-1.el9.noarch.rpm</filename>
          <sum type="sha256">14b18c5f70ad9bd24012ee959564c824985ebe6d0e5abb47ced6455fa438441e</sum>
        </package>
        <package name="httpd-tools" version="2.4.62" release="1.el9" epoch="0" arch="s390x" src="httpd-2.4.62-1.el9.src.rpm">
          <filename>httpd-tools-2.4.62-1.el9.s390x.rpm</filename>
          <sum type="sha256">2c3f4bc5bc6a88cfd801189cd86625146fc4c223ec206772c853a9ef5ee3df3b</sum>
        </package>
        <package name="mod_ssl" version="2.4.62" release="1.el9" epoch="1" arch="s390x" src="httpd-2.4.62-1.el9.src.rpm">
          <filename>mod_ssl-2.4.62-1.el9.s390x.rpm</filename>
          <sum type="sha256">5e31ab4169e307a0d84f30a755792abb6eb7572270d0823ae9b16df62f009fd3</sum>
        </package>
        <package name="mod_session" version="2.4.62" release="1.el9" epoch="0" arch="s390x" src="httpd-2.4.62-1.el9.src.rpm">
          <filename>mod_session-2.4.62-1.el9.s390x.rpm</filename>
          <sum type="sha256">702665e138b10afaf2da48db46c3c1d3c3476201ff6c700ca793fb138236a8cd</sum>
        </package>
        <package name="httpd-devel" version="2.4.62" release="1.el9" epoch="0" arch="s390x" src="httpd-2.4.62-1.el9.src.rpm">
          <filename>httpd-devel-2.4.62-1.el9.s390x.rpm</filename>
          <sum type="sha256">b0dc4af494e99f2af7fef1e1627fcaa2a33051ae3c98510a4f4526ccd8fa4bc5</sum>
        </package>
        <package name="httpd-core" version="2.4.62" release="1.el9" epoch="0" arch="s390x" src="httpd-2.4.62-1.el9.src.rpm">
          <filename>httpd-core-2.4.62-1.el9.s390x.rpm</filename>
          <sum type="sha256">c88c3b8e4007682ae7cd3e49c6e1a77019a4f52845db9e6a84182b2c23e4a641</sum>
        </package>
        <package name="httpd-manual" version="2.4.62" release="1.el9" epoch="0" arch="noarch" src="httpd-2.4.62-1.el9.src.rpm">
          <filename>httpd-manual-2.4.62-1.el9.noarch.rpm</filename>
          <sum type="sha256">c8c388c7362b7ad90badd642815c9082f038f080d85d1564d1d4dd206949e51f</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.62" release="1.el9" epoch="1" arch="s390x" src="httpd-2.4.62-1.el9.src.rpm">
          <filename>mod_proxy_html-2.4.62-1.el9.s390x.rpm</filename>
          <sum type="sha256">ce0985654b00e5487e0bece93b6d707a04b3b583002f5d85c452327d184eb51b</sum>
        </package>
        <package name="httpd" version="2.4.62" release="1.el9" epoch="0" arch="s390x" src="httpd-2.4.62-1.el9.src.rpm">
          <filename>httpd-2.4.62-1.el9.s390x.rpm</filename>
          <sum type="sha256">d380924b4e07df6b598ba05e1ce3758ce7764dcccaedbc9097922ea82aeb8754</sum>
        </package>
        <package name="mod_ldap" version="2.4.62" release="1.el9" epoch="0" arch="s390x" src="httpd-2.4.62-1.el9.src.rpm">
          <filename>mod_ldap-2.4.62-1.el9.s390x.rpm</filename>
          <sum type="sha256">edcf47163cda4cdc985892d848c04be3a6e6130cf459ff3894d041ef312a6c83</sum>
        </package>
        <package name="mod_lua" version="2.4.62" release="1.el9" epoch="0" arch="s390x" src="httpd-2.4.62-1.el9.src.rpm">
          <filename>mod_lua-2.4.62-1.el9.s390x.rpm</filename>
          <sum type="sha256">f49bd5f72e0f023735327ddedfdcf9c189d46d85aaaf423f3c6eb276c72fbe7b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9317</id>
    <title>Low: NetworkManager security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:53:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>NetworkManager security update</summary>
    <description>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.  

Security Fix(es):  

  * NetworkManager: Denial of Service (CVE-2024-6501)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9317" id="RHSA-2024:9317" type="rhsa" title="RHSA-2024:9317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6501" id="CVE-2024-6501" type="cve" title="CVE-2024-6501"/>
      <reference href="https://bugzilla.redhat.com/2295734" id="2295734" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9317.html" id="ALSA-2024:9317" type="self" title="ALSA-2024:9317"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="NetworkManager-ovs" version="1.48.10" release="2.el9_5.alma.1" epoch="1" arch="s390x" src="NetworkManager-1.48.10-2.el9_5.alma.1.src.rpm">
          <filename>NetworkManager-ovs-1.48.10-2.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">1b64b4bbff90664627a41ec8f767ba1eb12e9bd94a285f8e41598ef984cfe70b</sum>
        </package>
        <package name="NetworkManager-config-connectivity-redhat" version="1.48.10" release="2.el9_5.alma.1" epoch="1" arch="noarch" src="NetworkManager-1.48.10-2.el9_5.alma.1.src.rpm">
          <filename>NetworkManager-config-connectivity-redhat-1.48.10-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">46bec8e9f6a3ac1c043fd041a8a39e69f4ce82cdba85ee88a70756e667bf397b</sum>
        </package>
        <package name="NetworkManager-ppp" version="1.48.10" release="2.el9_5.alma.1" epoch="1" arch="s390x" src="NetworkManager-1.48.10-2.el9_5.alma.1.src.rpm">
          <filename>NetworkManager-ppp-1.48.10-2.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">4eeefc42760d982ed262c48d6c26f64d7a262c2817e6aeca387329f581d55d01</sum>
        </package>
        <package name="NetworkManager-dispatcher-routing-rules" version="1.48.10" release="2.el9_5.alma.1" epoch="1" arch="noarch" src="NetworkManager-1.48.10-2.el9_5.alma.1.src.rpm">
          <filename>NetworkManager-dispatcher-routing-rules-1.48.10-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">6cf0bbb7768f67d58daf7ce6de56051bf60c09e3df67b4b5f89dbb3f9409095b</sum>
        </package>
        <package name="NetworkManager-cloud-setup" version="1.48.10" release="2.el9_5.alma.1" epoch="1" arch="s390x" src="NetworkManager-1.48.10-2.el9_5.alma.1.src.rpm">
          <filename>NetworkManager-cloud-setup-1.48.10-2.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">f732badc9987b48926d0e5ccce8201f8ea8835793f8ebd7cf4cadaa6f3e76ff0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9325</id>
    <title>Low: cockpit security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:52:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>cockpit security update</summary>
    <description>Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.  

Security Fix(es):  

  * cockpit: Authenticated user can kill any process when enabling pam_env's user_readenv option (CVE-2024-6126)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9325" id="RHSA-2024:9325" type="rhsa" title="RHSA-2024:9325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6126" id="CVE-2024-6126" type="cve" title="CVE-2024-6126"/>
      <reference href="https://bugzilla.redhat.com/2292897" id="2292897" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9325.html" id="ALSA-2024:9325" type="self" title="ALSA-2024:9325"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="cockpit-pcp" version="323.1" release="1.el9_5" epoch="0" arch="s390x" src="cockpit-323.1-1.el9_5.src.rpm">
          <filename>cockpit-pcp-323.1-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">208f299af2bea8524c58a2442bb402235c12751504e3a2c94085d24ad8fb61ca</sum>
        </package>
        <package name="cockpit-storaged" version="323.1" release="1.el9_5" epoch="0" arch="noarch" src="cockpit-323.1-1.el9_5.src.rpm">
          <filename>cockpit-storaged-323.1-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">5c0b31aa290dae63c6d54434ed4c52453aad980f8cd50858b037b655c8065bd5</sum>
        </package>
        <package name="cockpit-packagekit" version="323.1" release="1.el9_5" epoch="0" arch="noarch" src="cockpit-323.1-1.el9_5.src.rpm">
          <filename>cockpit-packagekit-323.1-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">f11f8d5faa1930670c93db8d29bfe7043deab6aa3678c51c44aae49deb2c9f05</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9331</id>
    <title>Moderate: krb5 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 14:12:51"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).  

Security Fix(es):  

  * krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c (CVE-2024-26458)
  * krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c (CVE-2024-26461)
  * krb5: Memory leak at /krb5/src/kdc/ndr.c (CVE-2024-26462)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9331" id="RHSA-2024:9331" type="rhsa" title="RHSA-2024:9331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26458" id="CVE-2024-26458" type="cve" title="CVE-2024-26458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26461" id="CVE-2024-26461" type="cve" title="CVE-2024-26461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26462" id="CVE-2024-26462" type="cve" title="CVE-2024-26462"/>
      <reference href="https://bugzilla.redhat.com/2266731" id="2266731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266740" id="2266740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266742" id="2266742" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9331.html" id="ALSA-2024:9331" type="self" title="ALSA-2024:9331"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="krb5-devel" version="1.21.1" release="3.el9" epoch="0" arch="s390x" src="krb5-1.21.1-3.el9.src.rpm">
          <filename>krb5-devel-1.21.1-3.el9.s390x.rpm</filename>
          <sum type="sha256">65f5c92c9da7dcda68c397de0c9ee77d3ff71472ae7486476f57f4466ad1b713</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9333</id>
    <title>Low: openssl security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-20 06:02:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: Unbounded memory growth with session handling in TLSv1.3 (CVE-2024-2511)
  * openssl: Excessive time spent checking DSA keys and parameters (CVE-2024-4603)
  * openssl: Use After Free with SSL_free_buffers (CVE-2024-4741)
  * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9333" id="RHSA-2024:9333" type="rhsa" title="RHSA-2024:9333"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2511" id="CVE-2024-2511" type="cve" title="CVE-2024-2511"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4603" id="CVE-2024-4603" type="cve" title="CVE-2024-4603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4741" id="CVE-2024-4741" type="cve" title="CVE-2024-4741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5535" id="CVE-2024-5535" type="cve" title="CVE-2024-5535"/>
      <reference href="https://bugzilla.redhat.com/2274020" id="2274020" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281029" id="2281029" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283757" id="2283757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294581" id="2294581" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9333.html" id="ALSA-2024:9333" type="self" title="ALSA-2024:9333"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="openssl-devel" version="3.2.2" release="6.el9_5" epoch="1" arch="s390x" src="openssl-3.2.2-6.el9_5.src.rpm">
          <filename>openssl-devel-3.2.2-6.el9_5.s390x.rpm</filename>
          <sum type="sha256">2b201baf5a6d06efb00bd1723d17ca4a97abe5ca123a1724cef1854b84c980e8</sum>
        </package>
        <package name="openssl-perl" version="3.2.2" release="6.el9_5" epoch="1" arch="s390x" src="openssl-3.2.2-6.el9_5.src.rpm">
          <filename>openssl-perl-3.2.2-6.el9_5.s390x.rpm</filename>
          <sum type="sha256">7efe1ba69e120bda1c7e2f69e9910d4414c567e0665fb5237d3dfa5ccd0ca395</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9371</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 14:10:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9371" id="RHSA-2024:9371" type="rhsa" title="RHSA-2024:9371"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9371.html" id="ALSA-2024:9371" type="self" title="ALSA-2024:9371"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python-unversioned-command" version="3.9.19" release="8.el9" epoch="0" arch="noarch" src="python3.9-3.9.19-8.el9.src.rpm">
          <filename>python-unversioned-command-3.9.19-8.el9.noarch.rpm</filename>
          <sum type="sha256">745ac7db1cf590dec59dcf2a3ed0847a481934748a8a3cb51d45b23c03cf2f66</sum>
        </package>
        <package name="python3-tkinter" version="3.9.19" release="8.el9" epoch="0" arch="s390x" src="python3.9-3.9.19-8.el9.src.rpm">
          <filename>python3-tkinter-3.9.19-8.el9.s390x.rpm</filename>
          <sum type="sha256">adb611b058308802422c891beab45d9370d96a91bff45afe65d0e7406d8a3f0b</sum>
        </package>
        <package name="python3-devel" version="3.9.19" release="8.el9" epoch="0" arch="s390x" src="python3.9-3.9.19-8.el9.src.rpm">
          <filename>python3-devel-3.9.19-8.el9.s390x.rpm</filename>
          <sum type="sha256">b0e5db25b436d959f560652f20cb15cd3444fe0fb464c12751784e9022a43192</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9404</id>
    <title>Moderate: libgcrypt security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libgcrypt security update</summary>
    <description>The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.  

Security Fix(es):  

  * libgcrypt: vulnerable to Marvin Attack (CVE-2024-2236)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9404" id="RHSA-2024:9404" type="rhsa" title="RHSA-2024:9404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2236" id="CVE-2024-2236" type="cve" title="CVE-2024-2236"/>
      <reference href="https://bugzilla.redhat.com/2245218" id="2245218" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9404.html" id="ALSA-2024:9404" type="self" title="ALSA-2024:9404"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libgcrypt-devel" version="1.10.0" release="11.el9" epoch="0" arch="s390x" src="libgcrypt-1.10.0-11.el9.src.rpm">
          <filename>libgcrypt-devel-1.10.0-11.el9.s390x.rpm</filename>
          <sum type="sha256">6e1c64aeb6090508c98515b6909c68438043dc169652bf9379f8dc477238026c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9405</id>
    <title>Low: vim security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:48:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: heap-based buffer overflow vulnerability (CVE-2021-3903)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9405" id="RHSA-2024:9405" type="rhsa" title="RHSA-2024:9405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3903" id="CVE-2021-3903" type="cve" title="CVE-2021-3903"/>
      <reference href="https://bugzilla.redhat.com/2018558" id="2018558" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9405.html" id="ALSA-2024:9405" type="self" title="ALSA-2024:9405"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="vim-enhanced" version="8.2.2637" release="21.el9" epoch="2" arch="s390x" src="vim-8.2.2637-21.el9.src.rpm">
          <filename>vim-enhanced-8.2.2637-21.el9.s390x.rpm</filename>
          <sum type="sha256">199420188769bedf3baf5bf01e7a73a3f21245b52e124a071224631febde7d72</sum>
        </package>
        <package name="vim-X11" version="8.2.2637" release="21.el9" epoch="2" arch="s390x" src="vim-8.2.2637-21.el9.src.rpm">
          <filename>vim-X11-8.2.2637-21.el9.s390x.rpm</filename>
          <sum type="sha256">80006a1345f2b143a08a481cdbe1795a1068e660e2786bda267bf8449cc20cf7</sum>
        </package>
        <package name="vim-common" version="8.2.2637" release="21.el9" epoch="2" arch="s390x" src="vim-8.2.2637-21.el9.src.rpm">
          <filename>vim-common-8.2.2637-21.el9.s390x.rpm</filename>
          <sum type="sha256">ae0937e0ff37df1b7f8617e44a19f3cd2c3ebc7d417eabc729c0fe9b2ee8f4a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9413</id>
    <title>Moderate: bluez security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bluez security update</summary>
    <description>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   

Security Fix(es):  

  * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)
  * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)
  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596)
  * bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594)
  * bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592)
  * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)
  * bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580)
  * bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431)
  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230)
  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9413" id="RHSA-2024:9413" type="rhsa" title="RHSA-2024:9413"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27349" id="CVE-2023-27349" type="cve" title="CVE-2023-27349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44431" id="CVE-2023-44431" type="cve" title="CVE-2023-44431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45866" id="CVE-2023-45866" type="cve" title="CVE-2023-45866"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50229" id="CVE-2023-50229" type="cve" title="CVE-2023-50229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50230" id="CVE-2023-50230" type="cve" title="CVE-2023-50230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51580" id="CVE-2023-51580" type="cve" title="CVE-2023-51580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51589" id="CVE-2023-51589" type="cve" title="CVE-2023-51589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51592" id="CVE-2023-51592" type="cve" title="CVE-2023-51592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51594" id="CVE-2023-51594" type="cve" title="CVE-2023-51594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51596" id="CVE-2023-51596" type="cve" title="CVE-2023-51596"/>
      <reference href="https://bugzilla.redhat.com/2253391" id="2253391" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278787" id="2278787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278945" id="2278945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278955" id="2278955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278962" id="2278962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278965" id="2278965" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278967" id="2278967" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278969" id="2278969" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278972" id="2278972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278974" id="2278974" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9413.html" id="ALSA-2024:9413" type="self" title="ALSA-2024:9413"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="bluez-cups" version="5.72" release="2.el9" epoch="0" arch="s390x" src="bluez-5.72-2.el9.src.rpm">
          <filename>bluez-cups-5.72-2.el9.s390x.rpm</filename>
          <sum type="sha256">04019ef1918796570ce4b2d33a4de9f0c1137115bc12f68633fffe02d29ccf13</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9424</id>
    <title>Low: tpm2-tools security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>tpm2-tools security update</summary>
    <description>The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module (TPM) 2.0 devices from user space.  

Security Fix(es):  

  * tpm2-tools: arbitrary quote data may go undetected by tpm2_checkquote (CVE-2024-29038)
  * tpm2-tools: pcr selection value is not compared with the attest (CVE-2024-29039)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9424" id="RHSA-2024:9424" type="rhsa" title="RHSA-2024:9424"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-29038" id="CVE-2024-29038" type="cve" title="CVE-2024-29038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-29039" id="CVE-2024-29039" type="cve" title="CVE-2024-29039"/>
      <reference href="https://bugzilla.redhat.com/2278071" id="2278071" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278075" id="2278075" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9424.html" id="ALSA-2024:9424" type="self" title="ALSA-2024:9424"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="tpm2-tools" version="5.2" release="4.el9" epoch="0" arch="s390x" src="tpm2-tools-5.2-4.el9.src.rpm">
          <filename>tpm2-tools-5.2-4.el9.s390x.rpm</filename>
          <sum type="sha256">e0cdc78f76cba3ef269818c6b6292c691219f4950f57bbadba82fbb4d077ef04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9449</id>
    <title>Important: bubblewrap and flatpak security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:51:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bubblewrap and flatpak security update</summary>
    <description>Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.  

Security Fix(es):  

  * flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9449" id="RHSA-2024:9449" type="rhsa" title="RHSA-2024:9449"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42472" id="CVE-2024-42472" type="cve" title="CVE-2024-42472"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9449.html" id="ALSA-2024:9449" type="self" title="ALSA-2024:9449"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="flatpak-libs" version="1.12.9" release="3.el9_5" epoch="0" arch="s390x" src="flatpak-1.12.9-3.el9_5.src.rpm">
          <filename>flatpak-libs-1.12.9-3.el9_5.s390x.rpm</filename>
          <sum type="sha256">3afcbcff041d52f66273037a400eb9af43c579a14a9fd80b4fc51c96a948b258</sum>
        </package>
        <package name="flatpak-session-helper" version="1.12.9" release="3.el9_5" epoch="0" arch="s390x" src="flatpak-1.12.9-3.el9_5.src.rpm">
          <filename>flatpak-session-helper-1.12.9-3.el9_5.s390x.rpm</filename>
          <sum type="sha256">669288996a627a266b1a797a503ad64de7f766376c8181e64b451ade97e108aa</sum>
        </package>
        <package name="flatpak" version="1.12.9" release="3.el9_5" epoch="0" arch="s390x" src="flatpak-1.12.9-3.el9_5.src.rpm">
          <filename>flatpak-1.12.9-3.el9_5.s390x.rpm</filename>
          <sum type="sha256">a75586628cbdca427a24837ebbd2f8161ef94a02fd1736176eed3a54f70bf204</sum>
        </package>
        <package name="flatpak-selinux" version="1.12.9" release="3.el9_5" epoch="0" arch="noarch" src="flatpak-1.12.9-3.el9_5.src.rpm">
          <filename>flatpak-selinux-1.12.9-3.el9_5.noarch.rpm</filename>
          <sum type="sha256">d9f29fcb044c065b28d63428e0b95b09bce1f9a812c2363d25add0dfca286f4a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9450</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:49:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9450" id="RHSA-2024:9450" type="rhsa" title="RHSA-2024:9450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9450.html" id="ALSA-2024:9450" type="self" title="ALSA-2024:9450"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.11-devel" version="3.11.9" release="7.el9_5.1" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.1.src.rpm">
          <filename>python3.11-devel-3.11.9-7.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">3b266d4911af22c9c5bb66dd33862f771c96e8d815f72cb963da5ef6c94652a3</sum>
        </package>
        <package name="python3.11-libs" version="3.11.9" release="7.el9_5.1" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.1.src.rpm">
          <filename>python3.11-libs-3.11.9-7.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">50b06c209ef8dbe954022310c0b3c1f523179e732439968892dbe760aa659ccf</sum>
        </package>
        <package name="python3.11" version="3.11.9" release="7.el9_5.1" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.1.src.rpm">
          <filename>python3.11-3.11.9-7.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">a7370f89280652709e31ff2e7c6d98131c3221b9c76901a2b6a004e120b15d5c</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.9" release="7.el9_5.1" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.1.src.rpm">
          <filename>python3.11-tkinter-3.11.9-7.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">eda0d0eeb7cb852783bee2ba69811c67eba7f87a3cc3cd4afbdfc3dd7618ab72</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9451</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:49:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9451" id="RHSA-2024:9451" type="rhsa" title="RHSA-2024:9451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9451.html" id="ALSA-2024:9451" type="self" title="ALSA-2024:9451"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.12-devel" version="3.12.5" release="2.el9_5.1" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.1.src.rpm">
          <filename>python3.12-devel-3.12.5-2.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">36d6269b8be3d07fede135e4ffa66954f98218940e712bba4089bf783feae2f4</sum>
        </package>
        <package name="python3.12" version="3.12.5" release="2.el9_5.1" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.1.src.rpm">
          <filename>python3.12-3.12.5-2.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">4dc7c34dcad0f59bd176f7eb80cab25f28e4dca48b8a6dfc95660168138afa20</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.5" release="2.el9_5.1" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.1.src.rpm">
          <filename>python3.12-tkinter-3.12.5-2.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">7231b5816e5d1614d87fba307cfd0a79891fe56795db214df363b19fcd650c67</sum>
        </package>
        <package name="python3.12-libs" version="3.12.5" release="2.el9_5.1" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.1.src.rpm">
          <filename>python3.12-libs-3.12.5-2.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">edde44d4e7b2d13c97c793326187d49e60ae176c86866b2696b1c9f5292d8a14</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9452</id>
    <title>Moderate: pcp security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 14:06:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>pcp security update</summary>
    <description>Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.  

Security Fix(es):  

  * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)
  * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9452" id="RHSA-2024:9452" type="rhsa" title="RHSA-2024:9452"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45769" id="CVE-2024-45769" type="cve" title="CVE-2024-45769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45770" id="CVE-2024-45770" type="cve" title="CVE-2024-45770"/>
      <reference href="https://bugzilla.redhat.com/2310451" id="2310451" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310452" id="2310452" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9452.html" id="ALSA-2024:9452" type="self" title="ALSA-2024:9452"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="pcp-pmda-mongodb" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-mongodb-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">05cd6477d2e8f2f70023ad9b042149d215cea9cb71cbb3439dfc5d59f46485ca</sum>
        </package>
        <package name="pcp-pmda-statsd" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-statsd-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">05e09f133dd263e52036187c604bcec7cc1f51ad62d8e6e771a1561f432f3407</sum>
        </package>
        <package name="pcp-pmda-logger" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-logger-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">06b661a768ca8aa0836bb9f5bcad5e52f64a136f4f1d94f6ede222f655aa4e49</sum>
        </package>
        <package name="pcp-pmda-named" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-named-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">0a163a451396a3f90ed6efc6d325634d125eb527c0235ae8b92c322163c60340</sum>
        </package>
        <package name="pcp-export-pcp2openmetrics" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-export-pcp2openmetrics-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">0da727c886cabe90335822b3b21e820447d0e6d8aaa03733f4b2a91870169f38</sum>
        </package>
        <package name="pcp-pmda-bind2" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-bind2-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">0e91926be51bc0fa955ba05fff6ff15afa849de1817a0d7d4155964abb7f6e1b</sum>
        </package>
        <package name="pcp-pmda-hacluster" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-hacluster-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">11b437595a5480bd9e2483b13fba5c87693c8a81e07fa1a8f7ad5fe20a8b4f60</sum>
        </package>
        <package name="pcp-pmda-libvirt" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-libvirt-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">12a0d0ce82315da9bf2df4a8291e6e3c6822199c9e7abb7a48c998ed54c8a33d</sum>
        </package>
        <package name="pcp-pmda-cifs" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-cifs-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">143e926611850cf6555cc3b02979608eff8e81b7ee46de39f6a169f264f529db</sum>
        </package>
        <package name="pcp-export-pcp2elasticsearch" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-export-pcp2elasticsearch-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">150bf52108fa715351c0395749e4b51b6b289068817ffdcbb13e8ce9c10ccbe2</sum>
        </package>
        <package name="pcp-pmda-slurm" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-slurm-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">1a4c85b601b3aa0f7d103e8e148de6fb61f43eb1aada96d01dca8989c76107d3</sum>
        </package>
        <package name="pcp-pmda-mic" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-mic-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">1b8ef540183c56d558fb9c7aa4ed6916c1a2ca571f97748ac48fe776602811dd</sum>
        </package>
        <package name="pcp-pmda-cisco" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-cisco-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">1c1e12f3eda519e86c08137aa2f4f48928b862d014f5044b3b3a477bae74165c</sum>
        </package>
        <package name="pcp-selinux" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-selinux-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">23d9ee5a47d85843a4faf2f29494c48c51e9e81657511a5ced67566a01d88db1</sum>
        </package>
        <package name="pcp-export-pcp2zabbix" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-export-pcp2zabbix-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">265ad1732283fc7d399ec9c7fb4ba635d9184c63fd2ce72659e738f20a6ad02c</sum>
        </package>
        <package name="pcp-pmda-redis" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-redis-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">2798a70c85a9f1020e1505188a9748e893bf5423233ac234e5e1284c2f58f91a</sum>
        </package>
        <package name="pcp-pmda-zimbra" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-zimbra-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">27cf22544dd7a755ccad705125b4b7932ef1f1f5448b8171a257129ee979510d</sum>
        </package>
        <package name="pcp-libs-devel" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-libs-devel-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">2997be4a22cf7552741e264489962b281c6a975edf6443ee7c2c5aa6de570f5e</sum>
        </package>
        <package name="pcp-pmda-pdns" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-pdns-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">2bd6699388487d091af65e1ba5375b3ee94fdc5301ac27d60491756dc634e274</sum>
        </package>
        <package name="pcp-pmda-samba" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-samba-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">2c967396e3f1acf4955136c8276fbdbf03f74291d48ea88ced63a8669af0f21c</sum>
        </package>
        <package name="pcp-import-sar2pcp" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-import-sar2pcp-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">301b54eace6f8b627b87393d6e05bcc1dfc9f6b81dda42dfce0a111e8836fcc4</sum>
        </package>
        <package name="pcp-pmda-nvidia-gpu" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-nvidia-gpu-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">31061047832db314eb257e9edf93cd8add2bba671f263c4198ecef29f412ce47</sum>
        </package>
        <package name="pcp-pmda-snmp" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-snmp-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">33327409edca7de34936e8423160eaa475b2901583ab4e75345eb61d9e4441b2</sum>
        </package>
        <package name="pcp-pmda-dm" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-dm-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">338d87c69f920d2ebd6a1a74a4ba0e3b9f6185b9a15f5560f0ebfb943d708021</sum>
        </package>
        <package name="pcp-pmda-nfsclient" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-nfsclient-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">346815a1f898d1de6d258b97ef9431a4c37d8d7c9b06df9b9d0033e7486507b0</sum>
        </package>
        <package name="pcp-doc" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="noarch" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-doc-6.2.2-7.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">35410b2bdcd4dd180b8e9c06f7a3e257d5f102e12a9dd3c54ab0f3bba44373ea</sum>
        </package>
        <package name="pcp-pmda-postgresql" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-postgresql-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">402b4abda5592910234ce54386eb2d52f6c2797844e4673cfd7f93ec4779dc2b</sum>
        </package>
        <package name="pcp-pmda-lustre" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-lustre-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">40b6e222fee0b2e8a85c14d4f4f39320dc705a9550a2bf4b883f9bf464757570</sum>
        </package>
        <package name="pcp-pmda-weblog" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-weblog-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">40c7f0b01cd02bfefc8cd564e801fc02df5236a3376f6cb0d0a0dd0a0528272c</sum>
        </package>
        <package name="pcp-pmda-netfilter" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-netfilter-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">41704b7c3846564353de59e57b581af26fb68984064f70ec24115ae90ce1226f</sum>
        </package>
        <package name="pcp-testsuite" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-testsuite-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">428dda8389441e3ee9dd294abf8ba66e4a904e3d00dea1424a20713e3029960d</sum>
        </package>
        <package name="pcp-pmda-netcheck" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-netcheck-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">429c030b4d752a06790a6afe8c82bee9f7a67ea73fc29e4462e43855f0c6a419</sum>
        </package>
        <package name="pcp-pmda-activemq" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-activemq-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">48de0e975cbfde5420a6c6a7c92facd6a5b3d869d9c07f276b873cf8584fe583</sum>
        </package>
        <package name="pcp-pmda-rsyslog" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-rsyslog-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">4afa1f8073044aa8b7b461a7f6069bf44a9cf2f294323d87b8e05f85b3799258</sum>
        </package>
        <package name="pcp-pmda-mailq" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-mailq-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">4bdeee9fda733346f4d3d494b816e8404ec75852957289562c5e8ad7e4baf1db</sum>
        </package>
        <package name="pcp-pmda-gfs2" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-gfs2-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">4e1c27f733128ccccb163586ea2fad57fab66b3a1e7cdd733f32c3ac36ca0fd4</sum>
        </package>
        <package name="pcp-export-zabbix-agent" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-export-zabbix-agent-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">516884e8e3e30201c8d3d614589782cc8b0491d3507e0c69cf632f5e044e653f</sum>
        </package>
        <package name="pcp-pmda-unbound" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-unbound-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">54c7900319acb704898c93a9ecedae66be861b21449968ae4d668c7b9f21d8e6</sum>
        </package>
        <package name="perl-PCP-MMV" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>perl-PCP-MMV-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">566873e62b257a57e65a14c691155abf153fcb420bb6bf802242f53a220087b5</sum>
        </package>
        <package name="pcp-pmda-ds389" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-ds389-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">5a96652a2edd5ad87279780f7e7a4b243c20c9dc03fe6c9aab314432a1020991</sum>
        </package>
        <package name="pcp-pmda-bonding" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-bonding-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">5aabee9e7aea2c2f552e316f00442dcda5ef9ca3317c720c36da1ad57a50b7ef</sum>
        </package>
        <package name="pcp-pmda-bcc" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-bcc-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">5b1fe5d988ef44381bbadd3cca5ea57a258ce9f6689040a6371e80b47d8e2e37</sum>
        </package>
        <package name="pcp-devel" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-devel-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">5fd336cc36413c345ed5c26e209ee8e45cf358091b530d3a13e8f81d46c3b99b</sum>
        </package>
        <package name="pcp-pmda-smart" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-smart-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">60633bb60872ab1c6b8b1d7bb8bba8c21ccc47dd130d1876beb6e5efb5290f0e</sum>
        </package>
        <package name="pcp-import-iostat2pcp" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-import-iostat2pcp-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">6187e773eb0f1953127e210a0387cfe28283c0fd6348c14bcf51ffe159198b47</sum>
        </package>
        <package name="pcp-pmda-ds389log" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-ds389log-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">63509f38d091233b1924d90ce066a7877c4c35bbcf879a5eee17d47a03b8c120</sum>
        </package>
        <package name="perl-PCP-LogSummary" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>perl-PCP-LogSummary-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">663817d64dc69ae2472a36a4a577993bb3ae510a4624c0d0243da5aa7d324216</sum>
        </package>
        <package name="pcp-pmda-openmetrics" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-openmetrics-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">69b5f4b8ac9f0cd3aefe8a374f6e74d2493384d0136b481640688afca363923d</sum>
        </package>
        <package name="pcp-pmda-haproxy" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-haproxy-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">6fdfeb0cb5cfdf11685e506892eb80b72de703390a45c878e7471886baba8e6c</sum>
        </package>
        <package name="pcp-pmda-gluster" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-gluster-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">749aa849a483fcd12edcc98f4b95c2eccfb64b52dd0c2f4f59ed59abaedf9c80</sum>
        </package>
        <package name="pcp-conf" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-conf-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">7522c84772490ce4df05130301e20eb6c9f1aee1017d8e19e26b88dee77bb2f8</sum>
        </package>
        <package name="pcp-pmda-bash" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-bash-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">75236ad843c0f419ca3b182b5e405a284189d4fdecb98af9f308e8a5aafbf1bc</sum>
        </package>
        <package name="pcp-pmda-apache" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-apache-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">7670a9acd7c453cf8b6d10344011d51b1bc81f3fa3458b0d40e6e4ca73c4d2a8</sum>
        </package>
        <package name="pcp-pmda-farm" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-farm-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">7a31c755820d476cb759a30fa4d1b4dac070aa0759fa9613f6dad3eb6fff4433</sum>
        </package>
        <package name="pcp-pmda-sendmail" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-sendmail-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">7adfd01e40e3e97e4c6b19264488d14a44bb91b10c08ce485e54524da0e330db</sum>
        </package>
        <package name="pcp-export-pcp2xml" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-export-pcp2xml-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">7d7237804e5eb540ceb3f016b71b4323e8b260eaaddc3d943e64b0fae941e058</sum>
        </package>
        <package name="pcp-import-collectl2pcp" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-import-collectl2pcp-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">806e406035c70778dda41a80e83f4b669e333e73cbbfa3291792e5361b027e64</sum>
        </package>
        <package name="pcp-pmda-lio" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-lio-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">83ad6453d642be28f77700c9cd2cb317000f277725a93f910e47cd100a920155</sum>
        </package>
        <package name="pcp-export-pcp2json" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-export-pcp2json-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">8608524df8080aed5d17b4699266d7e73a640729759185750d25591495a320cb</sum>
        </package>
        <package name="pcp-libs" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-libs-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">896b09f21576790b1246450d397efb557eb1880c6dbdb1eaea38168762817f94</sum>
        </package>
        <package name="pcp-pmda-gpfs" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-gpfs-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">8ad20628971597bc873358d34c9bde1e38f05d103f33c18bdfdc43ef2020d693</sum>
        </package>
        <package name="pcp-pmda-uwsgi" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-uwsgi-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">91d0e064a25242a0cb259bcb79de846766cf325d40092ec35f524953d59d566c</sum>
        </package>
        <package name="pcp-pmda-bpf" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-bpf-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">9444d62b962b1a237b3060dbc05068d014f5405daf14de68ca57af59ace48a3c</sum>
        </package>
        <package name="pcp-pmda-lustrecomm" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-lustrecomm-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">94665e0992b1bbefd6ddd5a65977b089b67e61e7ff7653bf9c7f088b24a733f0</sum>
        </package>
        <package name="pcp-pmda-lmsensors" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-lmsensors-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">95ce55e6340917c961fa9ee0712f5086bd603bfd7a008dbf222e3484aa245dcf</sum>
        </package>
        <package name="pcp-pmda-sockets" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-sockets-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">999312fb16bc1d85c789dff52d001e1b800114167cb28b4e3315a1017898dd31</sum>
        </package>
        <package name="pcp-export-pcp2graphite" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-export-pcp2graphite-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">9a207090d020c3e79e795b6d2839e4cbd8b12adc3cb751fe2f3703c41bad1469</sum>
        </package>
        <package name="pcp-geolocate" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-geolocate-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">9dd0ef7bd5ac8a1f11c710d1d1a5ff93699964066b56a74754d24a00f928389d</sum>
        </package>
        <package name="pcp-pmda-bpftrace" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-bpftrace-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">9f4c60000c551a611e562b9ecbb42a1af860a026a9c0f941644140d0b2846c47</sum>
        </package>
        <package name="pcp-pmda-rabbitmq" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-rabbitmq-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">9f8dce791a2068ac40992b7c9b8d77a67ed99a66300c27f942e7c37290117826</sum>
        </package>
        <package name="pcp-zeroconf" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-zeroconf-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">a0787053e2ddbb183be6dc1141997a2ee553d6826dfa565cfa93f615f9ff3a5e</sum>
        </package>
        <package name="pcp-import-ganglia2pcp" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-import-ganglia2pcp-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">a1163bc05f6413b163bfd8f21829fc3941e3ecab8c5514e68c8ea232543e04dd</sum>
        </package>
        <package name="pcp-pmda-systemd" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-systemd-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">a261cb90adb6f6fa21817fa3da31d3d72639785d734ae8ffae670a00184fdb19</sum>
        </package>
        <package name="perl-PCP-LogImport" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>perl-PCP-LogImport-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">a95e3c47a511cc9847cbf6fa04a2625fc1b74d681a3093cb2e29b7c24600c74a</sum>
        </package>
        <package name="pcp-export-pcp2spark" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-export-pcp2spark-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">aa95052f1ea3bb8bb9fd7fd9f9d13d5c8cbe9e5bae2f237ebd105a93f51dfee0</sum>
        </package>
        <package name="pcp-pmda-podman" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-podman-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">b11deef6bed67b83911071d5f83d5276cd90598e18e1d001f77a70c8dbf674d0</sum>
        </package>
        <package name="pcp-pmda-memcache" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-memcache-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">b33a96e252c785405517038c90d23c43355728f888ad0eee0c7ff3284b56965c</sum>
        </package>
        <package name="pcp-pmda-openvswitch" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-openvswitch-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">b4300ff57c804997edc45851516a7bc356783138dd2d3ac8897cec284f731279</sum>
        </package>
        <package name="pcp-pmda-news" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-news-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">b7e4e2703773ebff98ffaf8242e0ea4afcda07a4b41178eb0800c73ccaa6ea97</sum>
        </package>
        <package name="pcp-pmda-shping" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-shping-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">b9a7eec5cfc7435ad24234abc83072e19edcee186fe740e1a11f93f89a6d4787</sum>
        </package>
        <package name="pcp-pmda-json" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-json-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">bb55ee33530c0636a92f8ccaafdd68fe918d65799defe668a0253c6d9213188b</sum>
        </package>
        <package name="pcp-pmda-postfix" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-postfix-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">bcb80ed6d9ede835018159652963c80fc971a01797a03a01ca961aa555942232</sum>
        </package>
        <package name="pcp-pmda-dbping" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-dbping-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">bfc8cfbd940571f040141e4f7d164f85b8298a841d07928f0e4d019b1cd2454c</sum>
        </package>
        <package name="pcp-pmda-trace" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-trace-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">c253a520d2778aa78280c84ed0ac585c5d76d10f88a041e83cc50456fbebc6f5</sum>
        </package>
        <package name="pcp-pmda-oracle" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-oracle-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">c26ecaef6b63bf9f88b03ef12490a166072d6d257071a519651b249697a1aa85</sum>
        </package>
        <package name="pcp-gui" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-gui-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">c2cfe96b612275fac57d4403991d0f741a4fa132b9d3d50204890969c0d8817d</sum>
        </package>
        <package name="pcp-import-mrtg2pcp" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-import-mrtg2pcp-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">c527c92bc10599db04e7efd2c2ae76039ea1d1f97416dafa4e95660702742708</sum>
        </package>
        <package name="pcp-export-pcp2influxdb" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-export-pcp2influxdb-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">cc2aa53bb3139407b3825dd32b8d3ee33c6006bacedce1b1b4b3e4e0041053c8</sum>
        </package>
        <package name="pcp-pmda-summary" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-summary-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">d8ba74f4277c132d1a014a9349c7d8f7816bef8621949b83895ad3c517eb3d44</sum>
        </package>
        <package name="pcp-pmda-mysql" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-mysql-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">d98b8474572de06e3dcc8777446f77bda3fa866cec736ae89bd03a4860564dd3</sum>
        </package>
        <package name="pcp-pmda-elasticsearch" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-elasticsearch-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">dd4348f62a22e04a2e708a21ba80065ce134eb625cfa9b50961bf1e5d932a7b0</sum>
        </package>
        <package name="pcp-pmda-zswap" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-zswap-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">e1a7f1abac34f5e4cf1b46c438e29b98c2db431467c6b279747b91d52ea4077e</sum>
        </package>
        <package name="pcp-pmda-docker" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-docker-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">e3a6172ac339f5f8b2b72c5d3c4ebae18a5fd6464026cabf164ff0622dcf64e3</sum>
        </package>
        <package name="perl-PCP-PMDA" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>perl-PCP-PMDA-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">e583eeb2bc951e19ac5cca2cfb12791ebddda91a90a454711446744cf4183e76</sum>
        </package>
        <package name="pcp-pmda-nginx" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-nginx-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">e6e31baef1d273e7deb33634c709b24888113b93cb93fe4d00b99ea3095a3445</sum>
        </package>
        <package name="pcp" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">ee9176492a0d7c336c84dc8226795486cd5523ff12190ea53deb8e507da54e32</sum>
        </package>
        <package name="pcp-system-tools" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-system-tools-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">f635da5c304891dc5b4ce8b4be180ad4a6089667b998e09c55b151f28459a5da</sum>
        </package>
        <package name="pcp-pmda-denki" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-denki-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">f88f3eea23a30c0bb5ded7ae95473e1efc14f85b5e4cdf3c38f965ddc6f085ce</sum>
        </package>
        <package name="pcp-pmda-roomtemp" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-roomtemp-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">f9fd5ff7f87e01f9bd6fb420e4dfdda16655a9c98bb4a53d348b820c839531f5</sum>
        </package>
        <package name="pcp-pmda-gpsd" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-gpsd-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">fa13722b1988afa797007fad71240bb8dab8904b861ddba7ec40f4e0dd795826</sum>
        </package>
        <package name="python3-pcp" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>python3-pcp-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">fa19676c8de292e53a11a839252649be39ada4d791f20a2953ef1a44c452ea7c</sum>
        </package>
        <package name="pcp-pmda-mounts" version="6.2.2" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="pcp-6.2.2-7.el9_5.alma.1.src.rpm">
          <filename>pcp-pmda-mounts-6.2.2-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">fc0ccfa4db4459d1d225502ab35adc491848af48e842e3e521c31d2a11ab21df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9454</id>
    <title>Important: podman security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:52:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155)
  * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)
  * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158)
  * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341)
  * Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (CVE-2024-9407)
  * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675)
  * Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2024-9676)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9454" id="RHSA-2024:9454" type="rhsa" title="RHSA-2024:9454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34155" id="CVE-2024-34155" type="cve" title="CVE-2024-34155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34158" id="CVE-2024-34158" type="cve" title="CVE-2024-34158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9341" id="CVE-2024-9341" type="cve" title="CVE-2024-9341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9407" id="CVE-2024-9407" type="cve" title="CVE-2024-9407"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9675" id="CVE-2024-9675" type="cve" title="CVE-2024-9675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9676" id="CVE-2024-9676" type="cve" title="CVE-2024-9676"/>
      <reference href="https://bugzilla.redhat.com/2310527" id="2310527" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310529" id="2310529" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315691" id="2315691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315887" id="2315887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317458" id="2317458" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317467" id="2317467" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9454.html" id="ALSA-2024:9454" type="self" title="ALSA-2024:9454"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="podman-tests" version="5.2.2" release="9.el9_5" epoch="4" arch="s390x" src="podman-5.2.2-9.el9_5.src.rpm">
          <filename>podman-tests-5.2.2-9.el9_5.s390x.rpm</filename>
          <sum type="sha256">0fb578e9c9d3e35aba90b7f23d9e146fceb5f6980ec5416dff450a7d9236b3c6</sum>
        </package>
        <package name="podman-docker" version="5.2.2" release="9.el9_5" epoch="4" arch="noarch" src="podman-5.2.2-9.el9_5.src.rpm">
          <filename>podman-docker-5.2.2-9.el9_5.noarch.rpm</filename>
          <sum type="sha256">3cf500c963e97a37b41255a5f3b5242353a74dfcfb4df4438197b74a571d7958</sum>
        </package>
        <package name="podman" version="5.2.2" release="9.el9_5" epoch="4" arch="s390x" src="podman-5.2.2-9.el9_5.src.rpm">
          <filename>podman-5.2.2-9.el9_5.s390x.rpm</filename>
          <sum type="sha256">9f37cd5b6aa6a3f85b8c2876567f8ed318d5b361ba4fb5c7af98e219e7d7c700</sum>
        </package>
        <package name="podman-remote" version="5.2.2" release="9.el9_5" epoch="4" arch="s390x" src="podman-5.2.2-9.el9_5.src.rpm">
          <filename>podman-remote-5.2.2-9.el9_5.s390x.rpm</filename>
          <sum type="sha256">c97824504691b3879dc9230135392f25dbbea934726c5b06be936851462134bf</sum>
        </package>
        <package name="podman-plugins" version="5.2.2" release="9.el9_5" epoch="4" arch="s390x" src="podman-5.2.2-9.el9_5.src.rpm">
          <filename>podman-plugins-5.2.2-9.el9_5.s390x.rpm</filename>
          <sum type="sha256">e23986b1676ff487c118554b1165cf765c0f5ab2f76cb5b94340da0dede50b7c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9456</id>
    <title>Important: osbuild-composer security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:48:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9456" id="RHSA-2024:9456" type="rhsa" title="RHSA-2024:9456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9456.html" id="ALSA-2024:9456" type="self" title="ALSA-2024:9456"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="osbuild-composer-worker" version="118" release="2.el9_5.alma.1" epoch="0" arch="s390x" src="osbuild-composer-118-2.el9_5.alma.1.src.rpm">
          <filename>osbuild-composer-worker-118-2.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">3e7d2086fae183a0880450a9e7056840f0df7ad791940399669f1fef9a4ad0c9</sum>
        </package>
        <package name="osbuild-composer" version="118" release="2.el9_5.alma.1" epoch="0" arch="s390x" src="osbuild-composer-118-2.el9_5.alma.1.src.rpm">
          <filename>osbuild-composer-118-2.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">9472033c13b7b81090e5b611ec19a6f4b83026098c8e2be5c5532452bf21e75a</sum>
        </package>
        <package name="osbuild-composer-core" version="118" release="2.el9_5.alma.1" epoch="0" arch="s390x" src="osbuild-composer-118-2.el9_5.alma.1.src.rpm">
          <filename>osbuild-composer-core-118-2.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">fee25ecb26c4b61296ba17900f46d34143717df060066565a300350326a4f32e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9457</id>
    <title>Moderate: python3.12-urllib3 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:49:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12-urllib3 security update</summary>
    <description>urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries:   
• Thread safety.  
• Connection pooling.  
• Client-side SSL/TLS verification.  
• File uploads with multipart encoding.  
• Helpers for retrying requests and dealing with HTTP redirects.  
• Support for gzip, deflate, brotli, and zstd encoding.  
• Proxy support for HTTP and SOCKS.  
• 100% test coverage.  

Security Fix(es):  

  * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9457" id="RHSA-2024:9457" type="rhsa" title="RHSA-2024:9457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37891" id="CVE-2024-37891" type="cve" title="CVE-2024-37891"/>
      <reference href="https://bugzilla.redhat.com/2292788" id="2292788" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9457.html" id="ALSA-2024:9457" type="self" title="ALSA-2024:9457"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.12-urllib3" version="1.26.18" release="2.el9_5.1" epoch="0" arch="noarch" src="python3.12-urllib3-1.26.18-2.el9_5.1.src.rpm">
          <filename>python3.12-urllib3-1.26.18-2.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">1683c45e96bf409b94bf40648c7d7beb9fc83b5e352fe6e78f2dd37945d0b01e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9458</id>
    <title>Moderate: python3.11-urllib3 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:49:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-urllib3 security update</summary>
    <description>The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities.  

Security Fix(es):  

  * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9458" id="RHSA-2024:9458" type="rhsa" title="RHSA-2024:9458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37891" id="CVE-2024-37891" type="cve" title="CVE-2024-37891"/>
      <reference href="https://bugzilla.redhat.com/2292788" id="2292788" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9458.html" id="ALSA-2024:9458" type="self" title="ALSA-2024:9458"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3.11-urllib3" version="1.26.12" release="2.el9_5.1" epoch="0" arch="noarch" src="python3.11-urllib3-1.26.12-2.el9_5.1.src.rpm">
          <filename>python3.11-urllib3-1.26.12-2.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">736233d036a75f950e9daa6004cb2365ba9f07d946ac7625f22d8891afc7c36f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9459</id>
    <title>Important: buildah security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.   

Security Fix(es):  

  * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155)
  * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)
  * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158)
  * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341)
  * Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (CVE-2024-9407)
  * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675)
  * Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2024-9676)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9459" id="RHSA-2024:9459" type="rhsa" title="RHSA-2024:9459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34155" id="CVE-2024-34155" type="cve" title="CVE-2024-34155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34158" id="CVE-2024-34158" type="cve" title="CVE-2024-34158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9341" id="CVE-2024-9341" type="cve" title="CVE-2024-9341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9407" id="CVE-2024-9407" type="cve" title="CVE-2024-9407"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9675" id="CVE-2024-9675" type="cve" title="CVE-2024-9675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9676" id="CVE-2024-9676" type="cve" title="CVE-2024-9676"/>
      <reference href="https://bugzilla.redhat.com/2310527" id="2310527" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310529" id="2310529" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315691" id="2315691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315887" id="2315887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317458" id="2317458" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317467" id="2317467" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9459.html" id="ALSA-2024:9459" type="self" title="ALSA-2024:9459"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="buildah" version="1.37.5" release="1.el9_5" epoch="2" arch="s390x" src="buildah-1.37.5-1.el9_5.src.rpm">
          <filename>buildah-1.37.5-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">a014dd0e7136aab5be3c19916de77a949fb976e4443cfba67b492502c6e37c71</sum>
        </package>
        <package name="buildah-tests" version="1.37.5" release="1.el9_5" epoch="2" arch="s390x" src="buildah-1.37.5-1.el9_5.src.rpm">
          <filename>buildah-tests-1.37.5-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">bdd58dcc077d2d7faba14c33d8ce576e3e3119e81be8de9cbaa94e73c9df1cc1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9468</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:51:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9468" id="RHSA-2024:9468" type="rhsa" title="RHSA-2024:9468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9468.html" id="ALSA-2024:9468" type="self" title="ALSA-2024:9468"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="python3-tkinter" version="3.9.19" release="8.el9_5.1" epoch="0" arch="s390x" src="python3.9-3.9.19-8.el9_5.1.src.rpm">
          <filename>python3-tkinter-3.9.19-8.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">7c356f8ea783393e7d3e90bbaeb0b3968aa401d4097736fa4f2742fa1771fe3c</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.19" release="8.el9_5.1" epoch="0" arch="noarch" src="python3.9-3.9.19-8.el9_5.1.src.rpm">
          <filename>python-unversioned-command-3.9.19-8.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">cc0768d17cf6d3430eee61efe98caaea21eeb3d6fd12b0e61ead7d66854acaea</sum>
        </package>
        <package name="python3-devel" version="3.9.19" release="8.el9_5.1" epoch="0" arch="s390x" src="python3.9-3.9.19-8.el9_5.1.src.rpm">
          <filename>python3-devel-3.9.19-8.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">d2411e6dc369060783fa3dc0ebcf48232f339da67269b163b8b0f4049b917b8f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9470</id>
    <title>Low: cups security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:53:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * cups: libppd: remote command injection via attacker controlled data in PPD file ()


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9470" id="RHSA-2024:9470" type="rhsa" title="RHSA-2024:9470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47175" id="CVE-2024-47175" type="cve" title="CVE-2024-47175"/>
      <reference href="https://bugzilla.redhat.com/2314256" id="2314256" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9470.html" id="ALSA-2024:9470" type="self" title="ALSA-2024:9470"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="cups-client" version="2.3.3op2" release="31.el9_5" epoch="1" arch="s390x" src="cups-2.3.3op2-31.el9_5.src.rpm">
          <filename>cups-client-2.3.3op2-31.el9_5.s390x.rpm</filename>
          <sum type="sha256">27b69feb08ca20bcfd7f45ac0587dec8ab99e8ccdec10703d5587048f92dde9d</sum>
        </package>
        <package name="cups-devel" version="2.3.3op2" release="31.el9_5" epoch="1" arch="s390x" src="cups-2.3.3op2-31.el9_5.src.rpm">
          <filename>cups-devel-2.3.3op2-31.el9_5.s390x.rpm</filename>
          <sum type="sha256">2acfacae3cf1716fc9bd02d489773396727dbbeaeb95b840f6f2ed1ca542a99d</sum>
        </package>
        <package name="cups" version="2.3.3op2" release="31.el9_5" epoch="1" arch="s390x" src="cups-2.3.3op2-31.el9_5.src.rpm">
          <filename>cups-2.3.3op2-31.el9_5.s390x.rpm</filename>
          <sum type="sha256">331afc5d61c5a7b605ced90805515c84da8e0f3fb385140fc1d2d8698cd5de46</sum>
        </package>
        <package name="cups-printerapp" version="2.3.3op2" release="31.el9_5" epoch="1" arch="s390x" src="cups-2.3.3op2-31.el9_5.src.rpm">
          <filename>cups-printerapp-2.3.3op2-31.el9_5.s390x.rpm</filename>
          <sum type="sha256">8fbe22b370a43f371631bf26b80407461eb250f6bc3eb3b8d44bb99a97d568c4</sum>
        </package>
        <package name="cups-filesystem" version="2.3.3op2" release="31.el9_5" epoch="1" arch="noarch" src="cups-2.3.3op2-31.el9_5.src.rpm">
          <filename>cups-filesystem-2.3.3op2-31.el9_5.noarch.rpm</filename>
          <sum type="sha256">a7b66edc195788d9dff4276a2d48d507b51a1afbe19511fd41ef9a8f3e0dc470</sum>
        </package>
        <package name="cups-lpd" version="2.3.3op2" release="31.el9_5" epoch="1" arch="s390x" src="cups-2.3.3op2-31.el9_5.src.rpm">
          <filename>cups-lpd-2.3.3op2-31.el9_5.s390x.rpm</filename>
          <sum type="sha256">a8361b043f55a7fac1e93cf93ef91af35350675f31d85e96df5af7cdad1932d9</sum>
        </package>
        <package name="cups-ipptool" version="2.3.3op2" release="31.el9_5" epoch="1" arch="s390x" src="cups-2.3.3op2-31.el9_5.src.rpm">
          <filename>cups-ipptool-2.3.3op2-31.el9_5.s390x.rpm</filename>
          <sum type="sha256">d5259633402b3370cbcb6e93e197a28bfb7dafc8acdfad95f23515ae1f07612f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9472</id>
    <title>Important: grafana-pcp security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.  

Security Fix(es):  

  * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9472" id="RHSA-2024:9472" type="rhsa" title="RHSA-2024:9472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9472.html" id="ALSA-2024:9472" type="self" title="ALSA-2024:9472"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="grafana-pcp" version="5.1.1" release="9.el9_5" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-9.el9_5.src.rpm">
          <filename>grafana-pcp-5.1.1-9.el9_5.s390x.rpm</filename>
          <sum type="sha256">ca2e11da0c4fa812a32055a23a31c545dd2ed39aa7ed07ea258ca1ab76297757</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9473</id>
    <title>Important: grafana security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)
  * dompurify: nesting-based mutation XSS vulnerability (CVE-2024-47875)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9473" id="RHSA-2024:9473" type="rhsa" title="RHSA-2024:9473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47875" id="CVE-2024-47875" type="cve" title="CVE-2024-47875"/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318052" id="2318052" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9473.html" id="ALSA-2024:9473" type="self" title="ALSA-2024:9473"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="grafana" version="10.2.6" release="7.el9_5" epoch="0" arch="s390x" src="grafana-10.2.6-7.el9_5.src.rpm">
          <filename>grafana-10.2.6-7.el9_5.s390x.rpm</filename>
          <sum type="sha256">ba0548bd3dde3ad8c5b1f1b329525947398c069d43a02c3387fb05b0c3f6c26d</sum>
        </package>
        <package name="grafana-selinux" version="10.2.6" release="7.el9_5" epoch="0" arch="s390x" src="grafana-10.2.6-7.el9_5.src.rpm">
          <filename>grafana-selinux-10.2.6-7.el9_5.s390x.rpm</filename>
          <sum type="sha256">ef86fe87d2e11405e02d5eb6af560bb895b519cb72d50712c36489d0d11792f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9474</id>
    <title>Important: krb5 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).  

Security Fix(es):  

  * freeradius: forgery attack (CVE-2024-3596)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9474" id="RHSA-2024:9474" type="rhsa" title="RHSA-2024:9474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3596" id="CVE-2024-3596" type="cve" title="CVE-2024-3596"/>
      <reference href="https://bugzilla.redhat.com/2263240" id="2263240" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9474.html" id="ALSA-2024:9474" type="self" title="ALSA-2024:9474"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="krb5-devel" version="1.21.1" release="4.el9_5" epoch="0" arch="s390x" src="krb5-1.21.1-4.el9_5.src.rpm">
          <filename>krb5-devel-1.21.1-4.el9_5.s390x.rpm</filename>
          <sum type="sha256">b91f6e1fb21c50c05ae9276b5f351b5936c9d0f045fa131ce818da4c8dd2cad3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9541</id>
    <title>Moderate: expat security update</title>
    <issued date="2024-11-13 00:00:00"/>
    <updated date="2024-11-18 11:47:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.  

Security Fix(es):  

  * libexpat: expat: DoS via XML_ResumeParser (CVE-2024-50602)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9541" id="RHSA-2024:9541" type="rhsa" title="RHSA-2024:9541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50602" id="CVE-2024-50602" type="cve" title="CVE-2024-50602"/>
      <reference href="https://bugzilla.redhat.com/2321987" id="2321987" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9541.html" id="ALSA-2024:9541" type="self" title="ALSA-2024:9541"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="expat-devel" version="2.5.0" release="3.el9_5.1" epoch="0" arch="s390x" src="expat-2.5.0-3.el9_5.1.src.rpm">
          <filename>expat-devel-2.5.0-3.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">7ca308228a8d85f9447f3897cca6b0f3b60b060cc27745e0d5390798e229d059</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9543</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2024-11-13 00:00:00"/>
    <updated date="2024-11-19 06:01:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.100 and .NET Runtime 9.0.1.0.  

Security Fix(es):  

  * dotnet: Type confusion vulnerability leads to AV in .NET Core NrbfDecoder component (CVE-2024-43498)
  * dotnet: .NET Core - DoS - (unbounded work factor) in NrbfDecoder component (CVE-2024-43499)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):  

  * dotnet: Type confusion vulnerability leads to AV in .NET Core NrbfDecoder component (CVE-2024-43498)
  * dotnet: .NET Core - DoS - (unbounded work factor) in NrbfDecoder component (CVE-2024-43499)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9543" id="RHSA-2024:9543" type="rhsa" title="RHSA-2024:9543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43498" id="CVE-2024-43498" type="cve" title="CVE-2024-43498"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43499" id="CVE-2024-43499" type="cve" title="CVE-2024-43499"/>
      <reference href="https://bugzilla.redhat.com/2323239" id="2323239" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323240" id="2323240" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9543.html" id="ALSA-2024:9543" type="self" title="ALSA-2024:9543"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="netstandard-targeting-pack-2.1" version="9.0.100" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.100-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">2967c05cd10c15cbf7299f885729656d7f72659fba6616ad39295e798178f8fd</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.0" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">344077b2b88959b47334ba2b902be92e0c1eb057b23956e489d0fa3f5b8a5398</sum>
        </package>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.0" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">4e3396ffb0744c3c8caebf4f88c4d2215da035913fb10c9a5b4f9c8dfe4af91d</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.0" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">76f326e6e1fe75f834cb427f93edf74220dda4ab90066169e3a9fa68230270c3</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.0" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">774647fb41488babe6aff4509dc15e7f5c1d94668ca2241981251a69a618900d</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.100" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.100-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">78fac27ab94ffebd7516bf4856d8e8c8abeeaf5283ee2481f1ca0e9033438c2f</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.0" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">863aae91663eed0d18880c094b6d52d0f9a872b3c12ef69548ff0ad598155f7e</sum>
        </package>
        <package name="dotnet-templates-9.0" version="9.0.100" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>dotnet-templates-9.0-9.0.100-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">89683c28190e3c8e366d6ca5a9963987e657653daccb211da8d73633ba131eb1</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.0" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">8f785b1c18d61de82c80054042fd4a70aae1038ed709719734321b185ab62c8b</sum>
        </package>
        <package name="dotnet-host" version="9.0.0" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>dotnet-host-9.0.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">b5d1ab12902d0e6e1529fe5e741a98cd52cdd8b98b6cc93444817d3bc4ed1e26</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.0" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">c6276ba2e474a33d079434e21fbf4315ec860d9d1a25410a70666847a6fd0402</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.0" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">cf280410ef86cf61dbd28c489e5e98b7926551c6c85c7ed6cf8aa9e51c058808</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.100" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.100-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">fcb52ec66f1d1c86b7c5a1f5d055492f1224736aa235fc33b21407dccef731bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9548</id>
    <title>Important: openexr security update</title>
    <issued date="2024-11-13 00:00:00"/>
    <updated date="2024-11-18 11:47:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openexr security update</summary>
    <description>OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.  

Security Fix(es):  

  * OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9548" id="RHSA-2024:9548" type="rhsa" title="RHSA-2024:9548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5841" id="CVE-2023-5841" type="cve" title="CVE-2023-5841"/>
      <reference href="https://bugzilla.redhat.com/2262397" id="2262397" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9548.html" id="ALSA-2024:9548" type="self" title="ALSA-2024:9548"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="openexr" version="3.1.1" release="2.el9_5.1" epoch="0" arch="s390x" src="openexr-3.1.1-2.el9_5.1.src.rpm">
          <filename>openexr-3.1.1-2.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">4f4da2fa47652389e9892c13e823bc12585c59a80d6e0799c61556c7565cb71c</sum>
        </package>
        <package name="openexr-libs" version="3.1.1" release="2.el9_5.1" epoch="0" arch="s390x" src="openexr-3.1.1-2.el9_5.1.src.rpm">
          <filename>openexr-libs-3.1.1-2.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">e24fc2620a8f8b0764866c46892aa25497670bd8ece522bbdeaf4910200cae3c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9552</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-11-13 00:00:00"/>
    <updated date="2024-11-18 18:10:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680)
  * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464)
  * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461)
  * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458)
  * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467)
  * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465)
  * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466)
  * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463)
  * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462)
  * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9552" id="RHSA-2024:9552" type="rhsa" title="RHSA-2024:9552"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10458" id="CVE-2024-10458" type="cve" title="CVE-2024-10458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10459" id="CVE-2024-10459" type="cve" title="CVE-2024-10459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10460" id="CVE-2024-10460" type="cve" title="CVE-2024-10460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10461" id="CVE-2024-10461" type="cve" title="CVE-2024-10461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10462" id="CVE-2024-10462" type="cve" title="CVE-2024-10462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10463" id="CVE-2024-10463" type="cve" title="CVE-2024-10463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10464" id="CVE-2024-10464" type="cve" title="CVE-2024-10464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10465" id="CVE-2024-10465" type="cve" title="CVE-2024-10465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10466" id="CVE-2024-10466" type="cve" title="CVE-2024-10466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10467" id="CVE-2024-10467" type="cve" title="CVE-2024-10467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9680" id="CVE-2024-9680" type="cve" title="CVE-2024-9680"/>
      <reference href="https://bugzilla.redhat.com/2317442" id="2317442" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322424" id="2322424" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322425" id="2322425" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322428" id="2322428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322429" id="2322429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322433" id="2322433" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322434" id="2322434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322438" id="2322438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322439" id="2322439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322440" id="2322440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322444" id="2322444" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9552.html" id="ALSA-2024:9552" type="self" title="ALSA-2024:9552"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="thunderbird" version="128.4.0" release="1.el9_5.alma.1" epoch="0" arch="s390x" src="thunderbird-128.4.0-1.el9_5.alma.1.src.rpm">
          <filename>thunderbird-128.4.0-1.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">e1430c760e2d4ee57426e8c75271de257cb38951224a1f2695981e740dd1c6ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9553</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2024-11-13 00:00:00"/>
    <updated date="2024-11-18 11:49:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866)
  * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187)
  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44185)
  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44244)
  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2024-44296)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9553" id="RHSA-2024:9553" type="rhsa" title="RHSA-2024:9553"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40866" id="CVE-2024-40866" type="cve" title="CVE-2024-40866"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44185" id="CVE-2024-44185" type="cve" title="CVE-2024-44185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44187" id="CVE-2024-44187" type="cve" title="CVE-2024-44187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44244" id="CVE-2024-44244" type="cve" title="CVE-2024-44244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44296" id="CVE-2024-44296" type="cve" title="CVE-2024-44296"/>
      <reference href="https://bugzilla.redhat.com/2312724" id="2312724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314706" id="2314706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323263" id="2323263" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323278" id="2323278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323289" id="2323289" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9553.html" id="ALSA-2024:9553" type="self" title="ALSA-2024:9553"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="webkit2gtk3-jsc-devel" version="2.46.3" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-1.el9_5.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.46.3-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">1ef356522bbe204043a7696320e9cad8bbaca85f0cb21641001354e1af5c1f9d</sum>
        </package>
        <package name="webkit2gtk3" version="2.46.3" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-1.el9_5.src.rpm">
          <filename>webkit2gtk3-2.46.3-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">2ca48ec751a5741eca322b20f4f13e9133b7e071bdde1f17049735e87ca1e70f</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.46.3" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-1.el9_5.src.rpm">
          <filename>webkit2gtk3-devel-2.46.3-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">b7dbf140c735c4e0d3b832f5df8004a37bc27b641fbe875a6d5823fffd4367ac</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.46.3" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-1.el9_5.src.rpm">
          <filename>webkit2gtk3-jsc-2.46.3-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">c72ee5d7fcfcdc28cf2a8d4721afe4206d2a42107a2e8dfaebc578947bec12cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9554</id>
    <title>Important: firefox security update</title>
    <issued date="2024-11-13 00:00:00"/>
    <updated date="2024-11-18 18:09:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680)
  * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464)
  * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461)
  * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458)
  * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467)
  * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465)
  * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466)
  * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463)
  * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462)
  * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9554" id="RHSA-2024:9554" type="rhsa" title="RHSA-2024:9554"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10458" id="CVE-2024-10458" type="cve" title="CVE-2024-10458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10459" id="CVE-2024-10459" type="cve" title="CVE-2024-10459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10460" id="CVE-2024-10460" type="cve" title="CVE-2024-10460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10461" id="CVE-2024-10461" type="cve" title="CVE-2024-10461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10462" id="CVE-2024-10462" type="cve" title="CVE-2024-10462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10463" id="CVE-2024-10463" type="cve" title="CVE-2024-10463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10464" id="CVE-2024-10464" type="cve" title="CVE-2024-10464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10465" id="CVE-2024-10465" type="cve" title="CVE-2024-10465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10466" id="CVE-2024-10466" type="cve" title="CVE-2024-10466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10467" id="CVE-2024-10467" type="cve" title="CVE-2024-10467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9680" id="CVE-2024-9680" type="cve" title="CVE-2024-9680"/>
      <reference href="https://bugzilla.redhat.com/2317442" id="2317442" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322424" id="2322424" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322425" id="2322425" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322428" id="2322428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322429" id="2322429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322433" id="2322433" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322434" id="2322434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322438" id="2322438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322439" id="2322439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322440" id="2322440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322444" id="2322444" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9554.html" id="ALSA-2024:9554" type="self" title="ALSA-2024:9554"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="firefox-x11" version="128.4.0" release="1.el9_5" epoch="0" arch="s390x" src="firefox-128.4.0-1.el9_5.src.rpm">
          <filename>firefox-x11-128.4.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">5b03eeed1127188e9f97015b57179a904460f0c9c8ebc10404f3ca290255f92d</sum>
        </package>
        <package name="firefox" version="128.4.0" release="1.el9_5" epoch="0" arch="s390x" src="firefox-128.4.0-1.el9_5.src.rpm">
          <filename>firefox-128.4.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">63fb7cdedf0520fe9fe03a153d810a5c326364479db9aca4e30a3afd9b60d174</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9555</id>
    <title>Important: NetworkManager-libreswan security update</title>
    <issued date="2024-11-13 00:00:00"/>
    <updated date="2024-11-20 13:27:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>NetworkManager-libreswan security update</summary>
    <description>This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop  

Security Fix(es):  

  * NetworkManager-libreswan: Local privilege escalation via leftupdown (CVE-2024-9050)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9555" id="RHSA-2024:9555" type="rhsa" title="RHSA-2024:9555"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9050" id="CVE-2024-9050" type="cve" title="CVE-2024-9050"/>
      <reference href="https://bugzilla.redhat.com/2313828" id="2313828" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9555.html" id="ALSA-2024:9555" type="self" title="ALSA-2024:9555"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="NetworkManager-libreswan" version="1.2.22" release="4.el9_5" epoch="0" arch="s390x" src="NetworkManager-libreswan-1.2.22-4.el9_5.src.rpm">
          <filename>NetworkManager-libreswan-1.2.22-4.el9_5.s390x.rpm</filename>
          <sum type="sha256">21ef768f6f3516305bab39ac51d3b67f3d4d829f6ecc116537e707de84d0052f</sum>
        </package>
        <package name="NetworkManager-libreswan-gnome" version="1.2.22" release="4.el9_5" epoch="0" arch="s390x" src="NetworkManager-libreswan-1.2.22-4.el9_5.src.rpm">
          <filename>NetworkManager-libreswan-gnome-1.2.22-4.el9_5.s390x.rpm</filename>
          <sum type="sha256">b47381d7f507fda5bfe3906fe5982681307f8628f894d1818f8d7cd28700c256</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9559</id>
    <title>Important: libsoup security update</title>
    <issued date="2024-11-13 00:00:00"/>
    <updated date="2024-11-18 11:47:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: infinite loop while reading websocket data (CVE-2024-52532)
  * libsoup: HTTP request smuggling via stripping null bytes from the ends of header names (CVE-2024-52530)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9559" id="RHSA-2024:9559" type="rhsa" title="RHSA-2024:9559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52530" id="CVE-2024-52530" type="cve" title="CVE-2024-52530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52532" id="CVE-2024-52532" type="cve" title="CVE-2024-52532"/>
      <reference href="https://bugzilla.redhat.com/2325276" id="2325276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325284" id="2325284" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9559.html" id="ALSA-2024:9559" type="self" title="ALSA-2024:9559"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libsoup-devel" version="2.72.0" release="8.el9_5.2" epoch="0" arch="s390x" src="libsoup-2.72.0-8.el9_5.2.src.rpm">
          <filename>libsoup-devel-2.72.0-8.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">8c3394380ebed9bab04b429191e3285754de9b964844858de2b705bdf7d388c0</sum>
        </package>
        <package name="libsoup" version="2.72.0" release="8.el9_5.2" epoch="0" arch="s390x" src="libsoup-2.72.0-8.el9_5.2.src.rpm">
          <filename>libsoup-2.72.0-8.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">c75d4286538ce6f1251e88c655f1b70399e4d088716aab29beefae8bee70e02a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9605</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-11-14 00:00:00"/>
    <updated date="2024-11-20 15:31:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: nexthop: Initialize all fields in dumped nexthops (CVE-2024-42283)
  * kernel: iommufd: Require drivers to supply the cache_invalidate_user ops (CVE-2024-46824)
  * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9605" id="RHSA-2024:9605" type="rhsa" title="RHSA-2024:9605"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42283" id="CVE-2024-42283" type="cve" title="CVE-2024-42283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46824" id="CVE-2024-46824" type="cve" title="CVE-2024-46824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46858" id="CVE-2024-46858" type="cve" title="CVE-2024-46858"/>
      <reference href="https://bugzilla.redhat.com/2315176" id="2315176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315210" id="2315210" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9605.html" id="ALSA-2024:9605" type="self" title="ALSA-2024:9605"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="rtla" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>rtla-5.14.0-503.14.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">415b69bd95e8958c873ce912176245e4f7ef12d3344458af38e41befdf9ebf23</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-503.14.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">5071dd9c197bcd288ab47b7f6c29a8700d4924d2a2beda913707107e4a4a9a9b</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-devel-5.14.0-503.14.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">5aef45b6c60d43c6d04122b18358447b0569cc077b4774caf781a2e283e39474</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-503.14.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">5c4c68fe10e8e11660b9673284efb9a1036cbe3122d9127360cbaf7e942c73a4</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-headers-5.14.0-503.14.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">5cbc8fba3393e75f3d7773c6b5cd6d3db865c1d987beb4721898413e568828f3</sum>
        </package>
        <package name="rv" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>rv-5.14.0-503.14.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">6db1b8475186aecedbba85cd48f0c244427d45d56c00f3cd8824b81c461ede68</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-devel-matched-5.14.0-503.14.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">734a00b046d8732b8e1e14a7cdee21fef508c254cbf99232aa84044e85d4b0c5</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-doc-5.14.0-503.14.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">78c50ce63615187ec9c871c0f907520dcf8ebe2db10af6ecbec54b81e4d16492</sum>
        </package>
        <package name="perf" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>perf-5.14.0-503.14.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">979f016d7ca79076442c063dd9f3ff5bc85e0d401312b0d50663a2bcfae8f531</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-503.14.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">bf8e0e6ce4b519910b9ae2f2201b02d96fc90a760424bbe5ae423d87d38da32d</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-5.14.0-503.14.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">d83f7c26e404bbdb6b67a2fda6b166c61711e5cd3214a6edc77ff05a49852436</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9625</id>
    <title>Important: squid security update</title>
    <issued date="2024-11-14 00:00:00"/>
    <updated date="2024-11-18 11:47:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.  

Security Fix(es):  

  * squid: Denial of Service processing ESI response content (CVE-2024-45802)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9625" id="RHSA-2024:9625" type="rhsa" title="RHSA-2024:9625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45802" id="CVE-2024-45802" type="cve" title="CVE-2024-45802"/>
      <reference href="https://bugzilla.redhat.com/2322154" id="2322154" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9625.html" id="ALSA-2024:9625" type="self" title="ALSA-2024:9625"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="squid" version="5.5" release="14.el9_5.3" epoch="7" arch="s390x" src="squid-5.5-14.el9_5.3.src.rpm">
          <filename>squid-5.5-14.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">d49caa8c17e2e4a795145106c592e26fea1cff680826e27265bfae2dd8164682</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9827</id>
    <title>Moderate: libvpx security update</title>
    <issued date="2024-11-18 00:00:00"/>
    <updated date="2024-11-18 11:47:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.  

Security Fix(es):  

  * libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9827" id="RHSA-2024:9827" type="rhsa" title="RHSA-2024:9827"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5197" id="CVE-2024-5197" type="cve" title="CVE-2024-5197"/>
      <reference href="https://bugzilla.redhat.com/2291198" id="2291198" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9827.html" id="ALSA-2024:9827" type="self" title="ALSA-2024:9827"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_4_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_4_default</name>
        <package name="libvpx" version="1.9.0" release="8.el9_5" epoch="0" arch="s390x" src="libvpx-1.9.0-8.el9_5.src.rpm">
          <filename>libvpx-1.9.0-8.el9_5.s390x.rpm</filename>
          <sum type="sha256">7a7693fb0da68f2392cf999cbd605bb8a2b991620f763676269cfbe1de38ef48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0059</id>
    <title>Important: kernel security update</title>
    <issued date="2025-01-08 00:00:00"/>
    <updated date="2025-01-13 20:08:27"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: perf/aux: Fix AUX buffer serialization (CVE-2024-46713)
  * kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (CVE-2024-50208)
  * kernel: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CVE-2024-50252)
  * kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0059" id="RHSA-2025:0059" type="rhsa" title="RHSA-2025:0059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46713" id="CVE-2024-46713" type="cve" title="CVE-2024-46713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50208" id="CVE-2024-50208" type="cve" title="CVE-2024-50208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50252" id="CVE-2024-50252" type="cve" title="CVE-2024-50252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53122" id="CVE-2024-53122" type="cve" title="CVE-2024-53122"/>
      <reference href="https://bugzilla.redhat.com/2312221" id="2312221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324611" id="2324611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324898" id="2324898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329932" id="2329932" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0059.html" id="ALSA-2025:0059" type="self" title="ALSA-2025:0059"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="kernel-debug-devel" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-5.14.0-503.21.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">1fc14f80c44f8d727da21d2c310fcc22d432f0d06dbe51bfb74cc0e3e5c8a405</sum>
        </package>
        <package name="perf" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>perf-5.14.0-503.21.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">419b9e3799d1216a82179722c6f82e44898022e10d793722226caa2bb724d7cd</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-headers-5.14.0-503.21.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">7a77ecc972b1201ae045e18402aefb419117d5fd7fda14a90ff1b6b6e5201122</sum>
        </package>
        <package name="rtla" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>rtla-5.14.0-503.21.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">8f443500a0298ad03b9e2b12ebff9fcac3d20948f5a739b39e42b9cd4da4dca3</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-503.21.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">95bc7bb53f9e746508462a3a787688d027f22524284c5094b177885e74724068</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-devel-matched-5.14.0-503.21.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">aa68a685ed19bc1167cfa7679d776b21918384c1e01d8a8c817f080929f624e1</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-503.21.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">ad57b7cba56d4092dc8d1469bf66d8561a886df097a29475e89e616675d023cb</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-503.21.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">b02e762f87040390b0359a1b18ba4f0102dd4924278edc60a0610f07eaf14f32</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-doc-5.14.0-503.21.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">c539e750db6c5cbd72dfda73ca9ae3b584bdf57ab181756f7d2a84d6d0467763</sum>
        </package>
        <package name="rv" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>rv-5.14.0-503.21.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">c85469e07160f43581c695dbbe823d4088775b05f7d2a022e02410a5dcbf9534</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-devel-5.14.0-503.21.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">e6f8fe5d16991b7918bfcbe37326316303e95070d3a35760df625cd9fa28c64f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0080</id>
    <title>Important: firefox security update</title>
    <issued date="2025-01-08 00:00:00"/>
    <updated date="2025-01-10 12:57:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Use-after-free when breaking lines in text (CVE-2025-0238)
  * firefox: Memory corruption when using JavaScript Text Segmentation (CVE-2025-0241)
  * firefox: Alt-Svc ALPN validation failure when redirected (CVE-2025-0239)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 (CVE-2025-0243)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242)
  * firefox: WebChannel APIs susceptible to confused deputy attack (CVE-2025-0237)
  * firefox: Compartment mismatch when parsing JavaScript JSON module (CVE-2025-0240)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0080" id="RHSA-2025:0080" type="rhsa" title="RHSA-2025:0080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0237" id="CVE-2025-0237" type="cve" title="CVE-2025-0237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0238" id="CVE-2025-0238" type="cve" title="CVE-2025-0238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0239" id="CVE-2025-0239" type="cve" title="CVE-2025-0239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0240" id="CVE-2025-0240" type="cve" title="CVE-2025-0240"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0241" id="CVE-2025-0241" type="cve" title="CVE-2025-0241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0242" id="CVE-2025-0242" type="cve" title="CVE-2025-0242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0243" id="CVE-2025-0243" type="cve" title="CVE-2025-0243"/>
      <reference href="https://bugzilla.redhat.com/2336165" id="2336165" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336168" id="2336168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336170" id="2336170" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336175" id="2336175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336181" id="2336181" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336182" id="2336182" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336188" id="2336188" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0080.html" id="ALSA-2025:0080" type="self" title="ALSA-2025:0080"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="firefox" version="128.6.0" release="1.el9_5" epoch="0" arch="s390x" src="firefox-128.6.0-1.el9_5.src.rpm">
          <filename>firefox-128.6.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">6aab6fefaa140460054aa0121f19199c13c63ccc85ed53f39b264e9bf7227499</sum>
        </package>
        <package name="firefox-x11" version="128.6.0" release="1.el9_5" epoch="0" arch="s390x" src="firefox-128.6.0-1.el9_5.src.rpm">
          <filename>firefox-x11-128.6.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">e28537c6d18552ed43b8feeb016b721796c41dd80f7fc9eafaa5f0aaf14e3dcb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0146</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-01-09 00:00:00"/>
    <updated date="2025-01-10 13:20:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * WebKitGTK: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54479)
  * webkit: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54502)
  * webkit: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54505)
  * webkit: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54508)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0146" id="RHSA-2025:0146" type="rhsa" title="RHSA-2025:0146"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54479" id="CVE-2024-54479" type="cve" title="CVE-2024-54479"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54502" id="CVE-2024-54502" type="cve" title="CVE-2024-54502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54505" id="CVE-2024-54505" type="cve" title="CVE-2024-54505"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54508" id="CVE-2024-54508" type="cve" title="CVE-2024-54508"/>
      <reference href="https://bugzilla.redhat.com/2333841" id="2333841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2333843" id="2333843" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2333844" id="2333844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2333845" id="2333845" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0146.html" id="ALSA-2025:0146" type="self" title="ALSA-2025:0146"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="webkit2gtk3-devel" version="2.46.5" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.5-1.el9_5.src.rpm">
          <filename>webkit2gtk3-devel-2.46.5-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">a512e12e4714ace7fd1db51fc24361877300f3db911598efad4f68ee0ff172e0</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.46.5" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.5-1.el9_5.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.46.5-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">d3e5491baf0ad41a4b4c4f275b33c736484e9f7e8b30988719ef0865c7ee2dbd</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.46.5" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.5-1.el9_5.src.rpm">
          <filename>webkit2gtk3-jsc-2.46.5-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">f24577f636a8016f8a835ed795da82a7b3d60ecc9a39f0f56466cc438045a558</sum>
        </package>
        <package name="webkit2gtk3" version="2.46.5" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.5-1.el9_5.src.rpm">
          <filename>webkit2gtk3-2.46.5-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">f5e08f27d27521d29ace632e7ffa51b5ef7e29cfe4338dc0397d63a152f9ff46</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0147</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-01-09 00:00:00"/>
    <updated date="2025-01-10 12:53:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 (CVE-2025-0243)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0147" id="RHSA-2025:0147" type="rhsa" title="RHSA-2025:0147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0242" id="CVE-2025-0242" type="cve" title="CVE-2025-0242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0243" id="CVE-2025-0243" type="cve" title="CVE-2025-0243"/>
      <reference href="https://bugzilla.redhat.com/2336175" id="2336175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336181" id="2336181" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0147.html" id="ALSA-2025:0147" type="self" title="ALSA-2025:0147"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="thunderbird" version="128.6.0" release="3.el9_5.alma.1" epoch="0" arch="s390x" src="thunderbird-128.6.0-3.el9_5.alma.1.src.rpm">
          <filename>thunderbird-128.6.0-3.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">8592394ed87258a88b07f49404ab531288c269807d6a08b4f7e0b10767e01ca0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0161</id>
    <title>Important: iperf3 security update</title>
    <issued date="2025-01-09 00:00:00"/>
    <updated date="2025-01-10 12:52:16"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>iperf3 security update</summary>
    <description>Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.  

Security Fix(es):  

  * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0161" id="RHSA-2025:0161" type="rhsa" title="RHSA-2025:0161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53580" id="CVE-2024-53580" type="cve" title="CVE-2024-53580"/>
      <reference href="https://bugzilla.redhat.com/2333146" id="2333146" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0161.html" id="ALSA-2025:0161" type="self" title="ALSA-2025:0161"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="iperf3" version="3.9" release="13.el9_5.1" epoch="0" arch="s390x" src="iperf3-3.9-13.el9_5.1.src.rpm">
          <filename>iperf3-3.9-13.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">b2f187d0e2cea70b7c2b91ce8624685665383fc2c9782841067e054ac07ef50e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0210</id>
    <title>Important: dpdk security update</title>
    <issued date="2025-01-09 00:00:00"/>
    <updated date="2025-01-10 12:48:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dpdk security update</summary>
    <description>The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.  

Security Fix(es):  

  * dpdk: Denial Of Service from malicious guest on hypervisors using DPDK Vhost library (CVE-2024-11614)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0210" id="RHSA-2025:0210" type="rhsa" title="RHSA-2025:0210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11614" id="CVE-2024-11614" type="cve" title="CVE-2024-11614"/>
      <reference href="https://bugzilla.redhat.com/2327955" id="2327955" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0210.html" id="ALSA-2025:0210" type="self" title="ALSA-2025:0210"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="dpdk-doc" version="23.11" release="2.el9_5" epoch="2" arch="noarch" src="dpdk-23.11-2.el9_5.src.rpm">
          <filename>dpdk-doc-23.11-2.el9_5.noarch.rpm</filename>
          <sum type="sha256">eb0892025d08d1aeab2b137f2cbd9ae5c0ea1702eb2762ed8c2ae92d59177d7f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0308</id>
    <title>Important: fence-agents security update</title>
    <issued date="2025-01-14 00:00:00"/>
    <updated date="2025-01-15 13:11:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * fence-agents: Jinja has a sandbox breakout through indirect reference to format method [almalinux-9.5.z] (CVE-2024-56326)
  * fence-agents: Jinja has a sandbox breakout through malicious filenames [almalinux-9.5.z] (CVE-2024-56201)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0308" id="RHSA-2025:0308" type="rhsa" title="RHSA-2025:0308"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56201" id="CVE-2024-56201" type="cve" title="CVE-2024-56201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56326" id="CVE-2024-56326" type="cve" title="CVE-2024-56326"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0308.html" id="ALSA-2025:0308" type="self" title="ALSA-2025:0308"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="fence-agents-common" version="4.10.0" release="76.el9_5.4.alma.1" epoch="0" arch="noarch" src="fence-agents-4.10.0-76.el9_5.4.alma.1.src.rpm">
          <filename>fence-agents-common-4.10.0-76.el9_5.4.alma.1.noarch.rpm</filename>
          <sum type="sha256">55f869cd3725fd7d4c3e074266e3a5c5f2607df66964b9532e66b966a6d02933</sum>
        </package>
        <package name="fence-agents-ibm-powervs" version="4.10.0" release="76.el9_5.4.alma.1" epoch="0" arch="noarch" src="fence-agents-4.10.0-76.el9_5.4.alma.1.src.rpm">
          <filename>fence-agents-ibm-powervs-4.10.0-76.el9_5.4.alma.1.noarch.rpm</filename>
          <sum type="sha256">69d8b3153192e1d7336a369dcb8317760b1e3f1f4d96b982a91aee420e1698ad</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.10.0" release="76.el9_5.4.alma.1" epoch="0" arch="noarch" src="fence-agents-4.10.0-76.el9_5.4.alma.1.src.rpm">
          <filename>fence-agents-ibm-vpc-4.10.0-76.el9_5.4.alma.1.noarch.rpm</filename>
          <sum type="sha256">979642e28a5f5d597147c9497136ff0c49325cc5bb3069aa5a2b0b489a5f7482</sum>
        </package>
        <package name="fence-agents-virsh" version="4.10.0" release="76.el9_5.4.alma.1" epoch="0" arch="noarch" src="fence-agents-4.10.0-76.el9_5.4.alma.1.src.rpm">
          <filename>fence-agents-virsh-4.10.0-76.el9_5.4.alma.1.noarch.rpm</filename>
          <sum type="sha256">9bdd4de968c776fd7ffd2d658d439af61f8d8e9b34807436cb9e18cfc2ee1cf4</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.10.0" release="76.el9_5.4.alma.1" epoch="0" arch="s390x" src="fence-agents-4.10.0-76.el9_5.4.alma.1.src.rpm">
          <filename>fence-agents-kubevirt-4.10.0-76.el9_5.4.alma.1.s390x.rpm</filename>
          <sum type="sha256">e7f559f96ea6ecefa44a0ef500d478de711212b7881cc230829382c30e973f2d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0312</id>
    <title>Important: raptor2 security update</title>
    <issued date="2025-01-14 00:00:00"/>
    <updated date="2025-01-15 13:10:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>raptor2 security update</summary>
    <description>Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples.   

Security Fix(es):  

  * raptor: integer underflow when normalizing a URI with the turtle parser (CVE-2024-57823)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0312" id="RHSA-2025:0312" type="rhsa" title="RHSA-2025:0312"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57823" id="CVE-2024-57823" type="cve" title="CVE-2024-57823"/>
      <reference href="https://bugzilla.redhat.com/2336921" id="2336921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0312.html" id="ALSA-2025:0312" type="self" title="ALSA-2025:0312"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="raptor2" version="2.0.15" release="32.el9_5" epoch="0" arch="s390x" src="raptor2-2.0.15-32.el9_5.src.rpm">
          <filename>raptor2-2.0.15-32.el9_5.s390x.rpm</filename>
          <sum type="sha256">0aaa81b81e25f871d2674621318fb4941de5638b2040eb927602239947abdb3f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0324</id>
    <title>Important: rsync security update</title>
    <issued date="2025-01-15 00:00:00"/>
    <updated date="2025-01-15 13:06:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>rsync security update</summary>
    <description>The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.  

Security Fix(es):  

  * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0324" id="RHSA-2025:0324" type="rhsa" title="RHSA-2025:0324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12085" id="CVE-2024-12085" type="cve" title="CVE-2024-12085"/>
      <reference href="https://bugzilla.redhat.com/2330539" id="2330539" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0324.html" id="ALSA-2025:0324" type="self" title="ALSA-2025:0324"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="rsync-daemon" version="3.2.3" release="20.el9_5.1" epoch="0" arch="noarch" src="rsync-3.2.3-20.el9_5.1.src.rpm">
          <filename>rsync-daemon-3.2.3-20.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">fa7977516dd6fb920d0b41a04102678ad6fc8e3a9d3cd960a143328a67dff746</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0334</id>
    <title>Moderate: ipa security update</title>
    <issued date="2025-01-15 00:00:00"/>
    <updated date="2025-01-17 21:18:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.  

Security Fix(es):  

  * freeipa: Administrative user data leaked through systemd journal (CVE-2024-11029)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0334" id="RHSA-2025:0334" type="rhsa" title="RHSA-2025:0334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11029" id="CVE-2024-11029" type="cve" title="CVE-2024-11029"/>
      <reference href="https://bugzilla.redhat.com/2325557" id="2325557" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0334.html" id="ALSA-2025:0334" type="self" title="ALSA-2025:0334"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="ipa-server-dns" version="4.12.2" release="1.el9_5.3" epoch="0" arch="noarch" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>ipa-server-dns-4.12.2-1.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">1bccf32a24ee4e2787ffd28eb9167aefd8d578c7c34c567fbf7da594f3a0d273</sum>
        </package>
        <package name="python3-ipaserver" version="4.12.2" release="1.el9_5.3" epoch="0" arch="noarch" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>python3-ipaserver-4.12.2-1.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">27df772df6ea381a088bf6aeb4b01e4c59ad6d25ebf40eef473d214d0bcb6726</sum>
        </package>
        <package name="ipa-server" version="4.12.2" release="1.el9_5.3" epoch="0" arch="s390x" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>ipa-server-4.12.2-1.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">2dc93b3a11b6c4410ddc6cd1bf3ce06c87455db05dfaa7a01e103347ecdca497</sum>
        </package>
        <package name="python3-ipalib" version="4.12.2" release="1.el9_5.3" epoch="0" arch="noarch" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>python3-ipalib-4.12.2-1.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">31caed3d45a1835a859cd329139d46cb6d57435c2fb1fcb03a7c89a7a93b9858</sum>
        </package>
        <package name="ipa-selinux" version="4.12.2" release="1.el9_5.3" epoch="0" arch="noarch" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>ipa-selinux-4.12.2-1.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">5587c0a368fbef7db1486151de4eb81aa69b4b6212b9f10718d9d72428b05ceb</sum>
        </package>
        <package name="ipa-client" version="4.12.2" release="1.el9_5.3" epoch="0" arch="s390x" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>ipa-client-4.12.2-1.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">64bbb50fe04540eba34f9c7dcab6e6950ee92c77dc21d2005850b324e9acdbdb</sum>
        </package>
        <package name="ipa-common" version="4.12.2" release="1.el9_5.3" epoch="0" arch="noarch" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>ipa-common-4.12.2-1.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">709622fc964eb74b03436a28c3cf0331b985cbe8289d4c3988ab3c9019181161</sum>
        </package>
        <package name="ipa-server-common" version="4.12.2" release="1.el9_5.3" epoch="0" arch="noarch" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>ipa-server-common-4.12.2-1.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">775114f61e02a5ab43c46478cd9120f635814b99a930de57e4005179f8da3b06</sum>
        </package>
        <package name="ipa-selinux-nfast" version="4.12.2" release="1.el9_5.3" epoch="0" arch="noarch" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>ipa-selinux-nfast-4.12.2-1.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">7a691b13c945753633baba0df8e57a0cc903e8c6e87fbff7283f4302533fa48c</sum>
        </package>
        <package name="ipa-client-common" version="4.12.2" release="1.el9_5.3" epoch="0" arch="noarch" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>ipa-client-common-4.12.2-1.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">7cda0ebc397d23097db8edded2de102b8aa0939e4e0a704e29be813736222166</sum>
        </package>
        <package name="python3-ipaclient" version="4.12.2" release="1.el9_5.3" epoch="0" arch="noarch" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>python3-ipaclient-4.12.2-1.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">8e4e5a3b7093d943035afa26a83a3f157858b24ac79be92b42e0cf06c8dd7049</sum>
        </package>
        <package name="ipa-client-epn" version="4.12.2" release="1.el9_5.3" epoch="0" arch="s390x" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>ipa-client-epn-4.12.2-1.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">a7270923755afbcea64d4c87b786c34d4a5e211cb52d8fbaaefa1456b004f1a3</sum>
        </package>
        <package name="ipa-selinux-luna" version="4.12.2" release="1.el9_5.3" epoch="0" arch="noarch" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>ipa-selinux-luna-4.12.2-1.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">a81175f6b1ce8e510292f1ff146ecbdc32013c89153f47d0d9e4528658a3b7aa</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.12.2" release="1.el9_5.3" epoch="0" arch="s390x" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>ipa-server-trust-ad-4.12.2-1.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">acc5df01f05e46c43ef5c9a5e595d9c60e0772d102caaa28f16f3079479b7bc0</sum>
        </package>
        <package name="ipa-client-samba" version="4.12.2" release="1.el9_5.3" epoch="0" arch="s390x" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>ipa-client-samba-4.12.2-1.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">aeb5c740216cd644c1ae06668e5dc1aa51e5a928e6e9ddd9fa0c6dab72402d43</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0377</id>
    <title>Moderate: Security and bug fixes for NetworkManager</title>
    <issued date="2025-01-16 00:00:00"/>
    <updated date="2025-01-17 21:14:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>Security and bug fixes for NetworkManager</summary>
    <description>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.  

Security and bug fix(es):  

  * Routes in table different to main are not deleted on reapply [almalinux-9.5.z] (JIRA:AlmaLinux-73013)
  * Route to VPN server not stored in routing table that is specified by ipv4.route-table [almalinux-9.5.z] (JIRA:AlmaLinux-73166)
  * VPN connections do not support ipv4.routing-rules settings [almalinux-9.5.z] (JIRA:AlmaLinux-73167)
  * CVE-2024-3661 NetworkManager: DHCP routing options can manipulate interface-based VPN traffic [almalinux-9.5.z] (JIRA:AlmaLinux-64726)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0377" id="RHSA-2025:0377" type="rhsa" title="RHSA-2025:0377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3661" id="CVE-2024-3661" type="cve" title="CVE-2024-3661"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0377.html" id="ALSA-2025:0377" type="self" title="ALSA-2025:0377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="NetworkManager-ppp" version="1.48.10" release="5.el9_5" epoch="1" arch="s390x" src="NetworkManager-1.48.10-5.el9_5.src.rpm">
          <filename>NetworkManager-ppp-1.48.10-5.el9_5.s390x.rpm</filename>
          <sum type="sha256">49ea0c14b20dda32090cb70550f7efdfda108b61d92c468da6357ed7e1cf655f</sum>
        </package>
        <package name="NetworkManager-config-connectivity-redhat" version="1.48.10" release="5.el9_5" epoch="1" arch="noarch" src="NetworkManager-1.48.10-5.el9_5.src.rpm">
          <filename>NetworkManager-config-connectivity-redhat-1.48.10-5.el9_5.noarch.rpm</filename>
          <sum type="sha256">6e63c112ece5fa58a595b67bafb290d2b87302e2c366e4ac2a9b00e0ba9e6dd4</sum>
        </package>
        <package name="NetworkManager-cloud-setup" version="1.48.10" release="5.el9_5" epoch="1" arch="s390x" src="NetworkManager-1.48.10-5.el9_5.src.rpm">
          <filename>NetworkManager-cloud-setup-1.48.10-5.el9_5.s390x.rpm</filename>
          <sum type="sha256">a48a5919cac7c398aeee779d59812df463be0886fbafce29e34fd00efc5c5e18</sum>
        </package>
        <package name="NetworkManager-ovs" version="1.48.10" release="5.el9_5" epoch="1" arch="s390x" src="NetworkManager-1.48.10-5.el9_5.src.rpm">
          <filename>NetworkManager-ovs-1.48.10-5.el9_5.s390x.rpm</filename>
          <sum type="sha256">cad8b1a761c91663cdaea01b855814b8390fe2e6f890fa6d97ea68fefb41e314</sum>
        </package>
        <package name="NetworkManager-dispatcher-routing-rules" version="1.48.10" release="5.el9_5" epoch="1" arch="noarch" src="NetworkManager-1.48.10-5.el9_5.src.rpm">
          <filename>NetworkManager-dispatcher-routing-rules-1.48.10-5.el9_5.noarch.rpm</filename>
          <sum type="sha256">ef852f8942e70d6500ff1a7c938b943c2c89f20b74b1a2341ced64f0ac0af73f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0422</id>
    <title>Moderate: java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-23 11:15:27"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance array handling (CVE-2025-21502)


Bug Fix(es):  

  * The AlmaLinux OpenJDK packages rely on the copy-jdk-configs package to transfer configuration files to a new updated JDK. With this update, the JDK has been updated to use the latest version of copy-jdk-configs, which has been used for some years on later AlmaLinux versions (AlmaLinux-73867, AlmaLinux-73871, AlmaLinux-73872).


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0422" id="RHSA-2025:0422" type="rhsa" title="RHSA-2025:0422"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21502" id="CVE-2025-21502" type="cve" title="CVE-2025-21502"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0422.html" id="ALSA-2025:0422" type="self" title="ALSA-2025:0422"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="java-17-openjdk-static-libs" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">40f9f5c0c452c9366b17e3923ac71894d19f058f426e08c048fd727b5053dcdb</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">436eb66eac56ddf5dbdcb5cae759a745236b797c3fc333ce8736ab688181e553</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">539d66c39d7b5435d7cef16546b8e0335b9ea7e76b063ceca30aa82044320170</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">54407f7d54fe002dfc4956a0f6167200bffc84418ca6665ec78aed56ffdd214e</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">5dc321712ea20dcb6f9faefdb4ba74255a547a0ba3d8288d7210691239971617</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">6ef3da16fd1262aaa31dcda500a786465c3428e92f246644fa43f164da99e028</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">741f91ff578c8ffc72cf37147f944602928684dc12f8871d881fbb7ca193b12c</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">7ddfbbd959085d8f84c9c93c45f262729667f6c116245458846cc36008d00b74</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">8c734f8467c441528f16669a4ea8a7c2b8628b9f66de0dc2d2b3ce9c22a633a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0426</id>
    <title>Moderate: java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-23 14:58:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance array handling (CVE-2025-21502)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0426" id="RHSA-2025:0426" type="rhsa" title="RHSA-2025:0426"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21502" id="CVE-2025-21502" type="cve" title="CVE-2025-21502"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0426.html" id="ALSA-2025:0426" type="self" title="ALSA-2025:0426"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="java-21-openjdk-headless" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">2be1dccce816bcdf43c64167881c33dcd1811d92ea562d563b8aa98cd969a587</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">41da9253e8c6db100d4dcd5455b63f05861dc3e15d59881154a39cfc8d22869c</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">4ab70a156b6898ee95173f099cc8eff72147045c93e0942950ea7afcbb98289f</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">602dffa86bb42ccb5bb5b99bc371860b9161f321cb912d4da22b1eeed3db4eb3</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">70dae547f560278af48d6be5adbc6f8b3f1ff8871e916d199102fd6d9ce1acbb</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">9bf1fb792d56a311b3d7809fd910877677f5ddc4d454bcba053a33a7340284f5</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a310daf045352787fd416b3ad77fc12107826e71edfb335b6c043b42dd8e02d3</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d578aaee7921acb0e1c60f9d02a06ec47818ca436c8c4caccb0f93af04702151</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e87a1e1bb55a7b2086c92c1c064cf5edff450e697b3843cca2908e112078a3fe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0578</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-25 20:33:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: tcp/dccp: Don&amp;#39;t use timer_pending() in reqsk_queue_unlink(). (CVE-2024-50154)
  * kernel: arm64/sve: Discard stale CPU state when handling SVE traps (CVE-2024-50275)
  * kernel: i40e: fix race condition by adding filter's intermediate sync state (CVE-2024-53088)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0578" id="RHSA-2025:0578" type="rhsa" title="RHSA-2025:0578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50154" id="CVE-2024-50154" type="cve" title="CVE-2024-50154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50275" id="CVE-2024-50275" type="cve" title="CVE-2024-50275"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53088" id="CVE-2024-53088" type="cve" title="CVE-2024-53088"/>
      <reference href="https://bugzilla.redhat.com/2324313" id="2324313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327198" id="2327198" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327328" id="2327328" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0578.html" id="ALSA-2025:0578" type="self" title="ALSA-2025:0578"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="kernel-headers" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-headers-5.14.0-503.22.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">317287c1139a17d89978786f9af9b41442141d2f0c3b4a553f607c506c0f7a33</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-doc-5.14.0-503.22.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">72d58663689b22e51a687cf535db90e40296a9b08001ac98e9c2de25f4f005c3</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-503.22.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">871b42fc37f87ca757f1c512248b2d6ad928959cd6a59fcaa238c166218ccf1a</sum>
        </package>
        <package name="rtla" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>rtla-5.14.0-503.22.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">a114fe1764d9c43fcf27a453cc9726edfd373ee8d0d3b4d1fc70c24ee61d60af</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-503.22.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">a5b063354fdb25a4a4ae64d0268182a20840559e779db4e58dbdb4576439e0e3</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-devel-matched-5.14.0-503.22.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">ac4099972d8beb7f898f44476fbc9f94308cb64eb83edcee2785a253f95328c5</sum>
        </package>
        <package name="rv" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>rv-5.14.0-503.22.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">ccb06aa2878babe6e57e67ddf2ede4d20d65d73e3d2ae46ad026163d129ffa9f</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-5.14.0-503.22.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">d8f2f0d8be572a95be12775ae49b382b0ee4d44ce0da13b519524f15154e4829</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-devel-5.14.0-503.22.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">e65b0078a61cf052ee860aa9c12ad5ff4d4ea7b8ee35886674828fcb6de51cef</sum>
        </package>
        <package name="perf" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>perf-5.14.0-503.22.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">e84b39eedf2608b38b6f188a1b64989eaa81908e639b754492b158dcc95a9735</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-503.22.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">f010d81ff053429b5a204d05e0439e9314603418fd4ea62eaa4ffa3301324443</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0667</id>
    <title>Important: python-jinja2 security update</title>
    <issued date="2025-01-23 00:00:00"/>
    <updated date="2025-01-24 10:11:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-jinja2 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * jinja2: Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0667" id="RHSA-2025:0667" type="rhsa" title="RHSA-2025:0667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56326" id="CVE-2024-56326" type="cve" title="CVE-2024-56326"/>
      <reference href="https://bugzilla.redhat.com/2333856" id="2333856" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0667.html" id="ALSA-2025:0667" type="self" title="ALSA-2025:0667"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="python3-jinja2" version="2.11.3" release="7.el9_5" epoch="0" arch="noarch" src="python-jinja2-2.11.3-7.el9_5.src.rpm">
          <filename>python3-jinja2-2.11.3-7.el9_5.noarch.rpm</filename>
          <sum type="sha256">b37b28e722e1a428ce39b57bf09f41fe44038131bc485aa035e29d46da13d10c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0673</id>
    <title>Important: git-lfs security update</title>
    <issued date="2025-01-23 00:00:00"/>
    <updated date="2025-01-24 10:09:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs (CVE-2024-53263)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0673" id="RHSA-2025:0673" type="rhsa" title="RHSA-2025:0673"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53263" id="CVE-2024-53263" type="cve" title="CVE-2024-53263"/>
      <reference href="https://bugzilla.redhat.com/2338002" id="2338002" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0673.html" id="ALSA-2025:0673" type="self" title="ALSA-2025:0673"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="git-lfs" version="3.4.1" release="4.el9_5" epoch="0" arch="s390x" src="git-lfs-3.4.1-4.el9_5.src.rpm">
          <filename>git-lfs-3.4.1-4.el9_5.s390x.rpm</filename>
          <sum type="sha256">c622a750909e25dc8534945fbc8004f7cefe5a3a05e51988d0d9efc88996536a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0692</id>
    <title>Important: redis:7 security update</title>
    <issued date="2025-01-27 00:00:00"/>
    <updated date="2025-01-29 10:47:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis:7 security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)
  * redis: Redis allows denial-of-service due to malformed ACL selectors (CVE-2024-51741)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0692" id="RHSA-2025:0692" type="rhsa" title="RHSA-2025:0692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46981" id="CVE-2024-46981" type="cve" title="CVE-2024-46981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-51741" id="CVE-2024-51741" type="cve" title="CVE-2024-51741"/>
      <reference href="https://bugzilla.redhat.com/2336004" id="2336004" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336007" id="2336007" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0692.html" id="ALSA-2025:0692" type="self" title="ALSA-2025:0692"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="redis" stream="7" version="9050020250127065635" context="8cf767d6" arch="s390x"/>
        <package name="redis-devel" version="7.2.7" release="1.module_el9.5.0+134+2e645600" epoch="0" arch="s390x" src="redis-7.2.7-1.module_el9.5.0+134+2e645600.src.rpm">
          <filename>redis-devel-7.2.7-1.module_el9.5.0+134+2e645600.s390x.rpm</filename>
          <sum type="sha256">c7ed486965df1215a397a78991007448f5c5a67b49ac483c151c3bff9ad64668</sum>
        </package>
        <package name="redis-doc" version="7.2.7" release="1.module_el9.5.0+134+2e645600" epoch="0" arch="noarch" src="redis-7.2.7-1.module_el9.5.0+134+2e645600.src.rpm">
          <filename>redis-doc-7.2.7-1.module_el9.5.0+134+2e645600.noarch.rpm</filename>
          <sum type="sha256">dd018d1e2402c528d76eb3d758ae78dcb70dff64ee95736a6dbeba53008d990e</sum>
        </package>
        <package name="redis" version="7.2.7" release="1.module_el9.5.0+134+2e645600" epoch="0" arch="s390x" src="redis-7.2.7-1.module_el9.5.0+134+2e645600.src.rpm">
          <filename>redis-7.2.7-1.module_el9.5.0+134+2e645600.s390x.rpm</filename>
          <sum type="sha256">e5ad09c76694b7dd8bc78c8b0eb4c59f72067cfa89f8ea21d4aa1f037b90b2a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0693</id>
    <title>Important: redis security update</title>
    <issued date="2025-01-27 00:00:00"/>
    <updated date="2025-01-29 11:16:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: heap overflow in the lua cjson and cmsgpack libraries (CVE-2022-24834)
  * redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145)
  * redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449)
  * redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228)
  * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0693" id="RHSA-2025:0693" type="rhsa" title="RHSA-2025:0693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24834" id="CVE-2022-24834" type="cve" title="CVE-2022-24834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45145" id="CVE-2023-45145" type="cve" title="CVE-2023-45145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31228" id="CVE-2024-31228" type="cve" title="CVE-2024-31228"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31449" id="CVE-2024-31449" type="cve" title="CVE-2024-31449"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46981" id="CVE-2024-46981" type="cve" title="CVE-2024-46981"/>
      <reference href="https://bugzilla.redhat.com/2221662" id="2221662" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244940" id="2244940" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317056" id="2317056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317058" id="2317058" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336004" id="2336004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0693.html" id="ALSA-2025:0693" type="self" title="ALSA-2025:0693"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="redis-doc" version="6.2.17" release="1.el9_5" epoch="0" arch="noarch" src="redis-6.2.17-1.el9_5.src.rpm">
          <filename>redis-doc-6.2.17-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">54c3cc22155c670b53674226da0b9dfa7cb677202584e77e691154b3c4c9c697</sum>
        </package>
        <package name="redis-devel" version="6.2.17" release="1.el9_5" epoch="0" arch="s390x" src="redis-6.2.17-1.el9_5.src.rpm">
          <filename>redis-devel-6.2.17-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">82d3e8639efe4036c70e10fc1e4ecbd5fcdd55351eadcbfcd8d0625ea29dc83f</sum>
        </package>
        <package name="redis" version="6.2.17" release="1.el9_5" epoch="0" arch="s390x" src="redis-6.2.17-1.el9_5.src.rpm">
          <filename>redis-6.2.17-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">8961213bb15d278bb5c1d30256c8d3dfe22a4fc2cbdb6fbecd97e93ae676f6e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0791</id>
    <title>Important: libsoup security update</title>
    <issued date="2025-01-29 00:00:00"/>
    <updated date="2025-01-29 19:59:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (CVE-2024-52531)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0791" id="RHSA-2025:0791" type="rhsa" title="RHSA-2025:0791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52531" id="CVE-2024-52531" type="cve" title="CVE-2024-52531"/>
      <reference href="https://bugzilla.redhat.com/2325277" id="2325277" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0791.html" id="ALSA-2025:0791" type="self" title="ALSA-2025:0791"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="libsoup-devel" version="2.72.0" release="8.el9_5.3" epoch="0" arch="s390x" src="libsoup-2.72.0-8.el9_5.3.src.rpm">
          <filename>libsoup-devel-2.72.0-8.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">cfb7a325c4463e1d12955eabb1e18c8c2919371a9c276aa40e368b7e213aba96</sum>
        </package>
        <package name="libsoup" version="2.72.0" release="8.el9_5.3" epoch="0" arch="s390x" src="libsoup-2.72.0-8.el9_5.3.src.rpm">
          <filename>libsoup-2.72.0-8.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">fbf897159cc8ea83048f78653b7f66cfde475519be2192710f926e42b8b97951</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0912</id>
    <title>Moderate: mariadb:10.11 security update</title>
    <issued date="2025-02-04 00:00:00"/>
    <updated date="2025-02-05 09:51:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mariadb:10.11 security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.   

Security Fix(es):  

  * mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) (CVE-2024-21096)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0912" id="RHSA-2025:0912" type="rhsa" title="RHSA-2025:0912"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21096" id="CVE-2024-21096" type="cve" title="CVE-2024-21096"/>
      <reference href="https://bugzilla.redhat.com/2275452" id="2275452" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0912.html" id="ALSA-2025:0912" type="self" title="ALSA-2025:0912"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="mariadb" stream="10.11" version="9050020250204093711" context="8cf767d6" arch="s390x"/>
        <package name="mariadb-oqgraph-engine" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-oqgraph-engine-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">191865772221855b46e07f867f060e6ef09310fedfcacee2863a9103f2e03780</sum>
        </package>
        <package name="mariadb-server-utils" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-server-utils-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">35a2bf2d5716a9725b4fba56fa4185da85a24c2f2c336fb5d440d176ae46dcca</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-embedded-devel-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">53eb083c382453a2f566ae443cecda09819214be29329616bb09a188b6b28ef8</sum>
        </package>
        <package name="mariadb-common" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-common-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">74cad325f542053af483f3b375cbe3de776a949e0ad2643e741aeee1091c6dd3</sum>
        </package>
        <package name="mariadb-backup" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-backup-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">795502695a157c93526352cf71d8fed06ff21516c21f7f0b0258a8f032225b82</sum>
        </package>
        <package name="mariadb-server" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-server-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">84ef0e376cbf9358cda55d14733fbb972d618283a1d22ef7b1f8244470056dd0</sum>
        </package>
        <package name="mariadb-pam" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-pam-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">9cf35b04d85774c0825e8b12e5df3b58bd938cffb0199fbd1a50c888467b8b4c</sum>
        </package>
        <package name="galera" version="26.4.20" release="1.module_el9.5.0+135+c9657a87" epoch="0" arch="s390x" src="galera-26.4.20-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>galera-26.4.20-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">b1736be01bc8575b37793302af46791604d60ec5c5eb0f7a3320a2d92b27eef4</sum>
        </package>
        <package name="mariadb" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">b4669501dc3421e045d85ebea42019e10641b417eb00c24bc9f3a91de6e5130d</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-gssapi-server-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">b869bc4dc03e83a97fcaea13da13de385ea5587e519453dd31e87c4277d3b765</sum>
        </package>
        <package name="mariadb-server-galera" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-server-galera-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">c29d70c8875a6c26a1257ef76eea214b5bb69261f3ce8166c5b823a2780f7e13</sum>
        </package>
        <package name="mariadb-embedded" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-embedded-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">e47e453cc9ef04b7f877db71ce5f7096f55fe92e05e9b2d3a374f157ced103cc</sum>
        </package>
        <package name="mariadb-errmsg" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-errmsg-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">ec5b5a2d463622b709c9811f9a78b09c0a8928f37025e1f349ef02ab1f681d81</sum>
        </package>
        <package name="mariadb-devel" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-devel-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">f638ab6ed7655f83e3000add291302404bc9b9fbc801deb25527998e5d82e42b</sum>
        </package>
        <package name="mariadb-test" version="10.11.10" release="1.module_el9.5.0+135+c9657a87" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>mariadb-test-10.11.10-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">f6d56a1651c42919fbeb21b20fe436f6c3fdb96ffeb4dfd1ae98b060b7047ff5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0914</id>
    <title>Moderate: galera and mariadb security update</title>
    <issued date="2025-02-04 00:00:00"/>
    <updated date="2025-02-05 09:49:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>galera and mariadb security update</summary>
    <description>MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.  

Security Fix(es):  

  * mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22084)
  * mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) (CVE-2024-21096)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0914" id="RHSA-2025:0914" type="rhsa" title="RHSA-2025:0914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22084" id="CVE-2023-22084" type="cve" title="CVE-2023-22084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21096" id="CVE-2024-21096" type="cve" title="CVE-2024-21096"/>
      <reference href="https://bugzilla.redhat.com/2245023" id="2245023" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275452" id="2275452" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0914.html" id="ALSA-2025:0914" type="self" title="ALSA-2025:0914"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="mariadb-backup" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-backup-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">1c8bac26d24149871bd237d5244de2f234964bedc1c60c397098299c2aaf1c58</sum>
        </package>
        <package name="mariadb-server" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-server-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">2ecbd5d9b5e8afc4245fa08b73dbf6f6854d396129d91599841b528f04fe26d3</sum>
        </package>
        <package name="mariadb-pam" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-pam-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">757cbfa300402d529d1c44131a6d06a9091aea80ecdd1c28412ea29ea83c73bc</sum>
        </package>
        <package name="mariadb-server-utils" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-server-utils-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">818115f5b1e16d162bacf49eec75b20bab11804477fecac7ca072016064fb27f</sum>
        </package>
        <package name="mariadb-common" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-common-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">887f53d527a0b84da98f1b6e739e5518472d5ccee99e785074b36af04f7824a9</sum>
        </package>
        <package name="mariadb-server-galera" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-server-galera-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">bf3941b74cfa05d6a3e8f6f7dea770ad11cb38e9935d093911d9c9489c062065</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-gssapi-server-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">bfe019833b2062daba3f08ab2446e11d7e06bb25c0a32e1500eb9a47777c1da7</sum>
        </package>
        <package name="mariadb" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">c27b4f63202156a9190171b91b2fcb1d394c70b1e36624f6d9be7f64d07ab0f8</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-oqgraph-engine-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">d254504e11b2ca3e5692e66acab6f3ebdabd04d881542eeb108d9de45d9d5edf</sum>
        </package>
        <package name="mariadb-errmsg" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-errmsg-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">dfff0b2303341a3c2f3992a2893682353f66a0dd4ca547fcedc6e6b87d55dc8b</sum>
        </package>
        <package name="mariadb-embedded" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-embedded-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">e58a9a4f137b198cebb2fca0867bc0a66c811993181ad60f755515dcba34cf60</sum>
        </package>
        <package name="galera" version="26.4.20" release="1.el9_5" epoch="0" arch="s390x" src="galera-26.4.20-1.el9_5.src.rpm">
          <filename>galera-26.4.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">f752780de8c1e2447b93b22982d39fe26afd151cac0496613e785182ebc11cef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0917</id>
    <title>Moderate: keepalived security update</title>
    <issued date="2025-02-04 00:00:00"/>
    <updated date="2025-02-05 09:48:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>keepalived security update</summary>
    <description>The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability with director failover.  

Security Fix(es):  

  * keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0917" id="RHSA-2025:0917" type="rhsa" title="RHSA-2025:0917"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41184" id="CVE-2024-41184" type="cve" title="CVE-2024-41184"/>
      <reference href="https://bugzilla.redhat.com/2298532" id="2298532" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0917.html" id="ALSA-2025:0917" type="self" title="ALSA-2025:0917"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="keepalived" version="2.2.8" release="4.el9_5" epoch="0" arch="s390x" src="keepalived-2.2.8-4.el9_5.src.rpm">
          <filename>keepalived-2.2.8-4.el9_5.s390x.rpm</filename>
          <sum type="sha256">3978775733cbf7fc862d7c032962b6186100508f2da34b0cdb8ee4004a44da1f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0922</id>
    <title>Important: podman security update</title>
    <issued date="2025-02-04 00:00:00"/>
    <updated date="2025-02-05 09:43:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile (CVE-2024-11218)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0922" id="RHSA-2025:0922" type="rhsa" title="RHSA-2025:0922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11218" id="CVE-2024-11218" type="cve" title="CVE-2024-11218"/>
      <reference href="https://bugzilla.redhat.com/2326231" id="2326231" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0922.html" id="ALSA-2025:0922" type="self" title="ALSA-2025:0922"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="podman-plugins" version="5.2.2" release="13.el9_5" epoch="4" arch="s390x" src="podman-5.2.2-13.el9_5.src.rpm">
          <filename>podman-plugins-5.2.2-13.el9_5.s390x.rpm</filename>
          <sum type="sha256">10b39827a2a55e7df995d2545b9762ccfb8a2c0feecba657b49afaa2c089217b</sum>
        </package>
        <package name="podman-tests" version="5.2.2" release="13.el9_5" epoch="4" arch="s390x" src="podman-5.2.2-13.el9_5.src.rpm">
          <filename>podman-tests-5.2.2-13.el9_5.s390x.rpm</filename>
          <sum type="sha256">52b87df2898f688756f3e3720d2e1e8ba24657482279fa13bc21bc9a87f163bc</sum>
        </package>
        <package name="podman-docker" version="5.2.2" release="13.el9_5" epoch="4" arch="noarch" src="podman-5.2.2-13.el9_5.src.rpm">
          <filename>podman-docker-5.2.2-13.el9_5.noarch.rpm</filename>
          <sum type="sha256">5b8984a1cf0fae4c9dfac351e806e9e7eba479071338040c0c06325b5f8806b2</sum>
        </package>
        <package name="podman-remote" version="5.2.2" release="13.el9_5" epoch="4" arch="s390x" src="podman-5.2.2-13.el9_5.src.rpm">
          <filename>podman-remote-5.2.2-13.el9_5.s390x.rpm</filename>
          <sum type="sha256">98e339d00c0fbcf7977b413d658ab57c5eefc19731d1823246f3faf7de60eb8e</sum>
        </package>
        <package name="podman" version="5.2.2" release="13.el9_5" epoch="4" arch="s390x" src="podman-5.2.2-13.el9_5.src.rpm">
          <filename>podman-5.2.2-13.el9_5.s390x.rpm</filename>
          <sum type="sha256">f2391a028d17cfb532681752bb77a2f23fcb3393c126a358516c5ccf38afa6c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0923</id>
    <title>Important: buildah security update</title>
    <issued date="2025-02-04 00:00:00"/>
    <updated date="2025-02-05 09:36:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.   

Security Fix(es):  

  * podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile (CVE-2024-11218)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0923" id="RHSA-2025:0923" type="rhsa" title="RHSA-2025:0923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11218" id="CVE-2024-11218" type="cve" title="CVE-2024-11218"/>
      <reference href="https://bugzilla.redhat.com/2326231" id="2326231" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0923.html" id="ALSA-2025:0923" type="self" title="ALSA-2025:0923"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="buildah-tests" version="1.37.6" release="1.el9_5" epoch="2" arch="s390x" src="buildah-1.37.6-1.el9_5.src.rpm">
          <filename>buildah-tests-1.37.6-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">3ce5680adef259346398671110de7238e62882f8cf85ee4fc8c3751664a5db54</sum>
        </package>
        <package name="buildah" version="1.37.6" release="1.el9_5" epoch="2" arch="s390x" src="buildah-1.37.6-1.el9_5.src.rpm">
          <filename>buildah-1.37.6-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">81f53acabfb0834da12045268be4fb9b58fea6a34461cfb8ace3739e091e0c3f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0925</id>
    <title>Moderate: bzip2 security update</title>
    <issued date="2025-02-04 00:00:00"/>
    <updated date="2025-02-05 09:34:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bzip2 security update</summary>
    <description>The bzip2 packages contain a freely available, high-quality data compressor. It provides both standalone compression and decompression utilities, as well as a shared library for use with other programs.   

Security Fix(es):  

  * bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). (CVE-2019-12900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0925" id="RHSA-2025:0925" type="rhsa" title="RHSA-2025:0925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-12900" id="CVE-2019-12900" type="cve" title="CVE-2019-12900"/>
      <reference href="https://bugzilla.redhat.com/2332075" id="2332075" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0925.html" id="ALSA-2025:0925" type="self" title="ALSA-2025:0925"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="bzip2-devel" version="1.0.8" release="10.el9_5" epoch="0" arch="s390x" src="bzip2-1.0.8-10.el9_5.src.rpm">
          <filename>bzip2-devel-1.0.8-10.el9_5.s390x.rpm</filename>
          <sum type="sha256">9fceeba9a900639d91c143734d620427c3e6a8be8fde78f30d8ab33bcc35203e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10072</id>
    <title>Important: firefox security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-01 19:40:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)
  * firefox: Use-after-free in FontFaceSet (CVE-2025-6424)
  * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)
  * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10072" id="RHSA-2025:10072" type="rhsa" title="RHSA-2025:10072"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6424" id="CVE-2025-6424" type="cve" title="CVE-2025-6424"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6425" id="CVE-2025-6425" type="cve" title="CVE-2025-6425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6429" id="CVE-2025-6429" type="cve" title="CVE-2025-6429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6430" id="CVE-2025-6430" type="cve" title="CVE-2025-6430"/>
      <reference href="https://bugzilla.redhat.com/2374555" id="2374555" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2374559" id="2374559" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2374561" id="2374561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2374562" id="2374562" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10072.html" id="ALSA-2025:10072" type="self" title="ALSA-2025:10072"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="firefox" version="128.12.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-128.12.0-1.el9_6.alma.1.src.rpm">
          <filename>firefox-128.12.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">392dc605a98545786b14657b0dff48d27c2b239be36da9e848c47ca137090179</sum>
        </package>
        <package name="firefox-x11" version="128.12.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-128.12.0-1.el9_6.alma.1.src.rpm">
          <filename>firefox-x11-128.12.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">5dded53a5b816b07a05c21113e3d456657401c0721c8e9cab2136722335bf881</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10136</id>
    <title>Important: python3.9 security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-02 06:48:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10136" id="RHSA-2025:10136" type="rhsa" title="RHSA-2025:10136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10136.html" id="ALSA-2025:10136" type="self" title="ALSA-2025:10136"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3-devel" version="3.9.21" release="2.el9_6.1" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9_6.1.src.rpm">
          <filename>python3-devel-3.9.21-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">565432d78077b4da72be0187f1f1fbf6d35d24e9e9801e16f7a03b76d3dde65f</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.21" release="2.el9_6.1" epoch="0" arch="noarch" src="python3.9-3.9.21-2.el9_6.1.src.rpm">
          <filename>python-unversioned-command-3.9.21-2.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">769cfb1ddce8092618f63df000696505fa07ed2aa1dd748a4db8cf0be4e009bf</sum>
        </package>
        <package name="python3-tkinter" version="3.9.21" release="2.el9_6.1" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9_6.1.src.rpm">
          <filename>python3-tkinter-3.9.21-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">7c9d788bf9020a515b661c35e6f9a9dea7510506f053868eacde29e9a1f76049</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10148</id>
    <title>Important: python3.11 security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-02 13:55:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10148" id="RHSA-2025:10148" type="rhsa" title="RHSA-2025:10148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10148.html" id="ALSA-2025:10148" type="self" title="ALSA-2025:10148"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3.11" version="3.11.11" release="2.el9_6.1" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.1.src.rpm">
          <filename>python3.11-3.11.11-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">064417e1c0dcb05f319f95cce8a5206c9ff1b53b5c079f3e114460aac096663a</sum>
        </package>
        <package name="python3.11-devel" version="3.11.11" release="2.el9_6.1" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.1.src.rpm">
          <filename>python3.11-devel-3.11.11-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">536c4eeed98a74a58a9d866bc80cc0cad2573fdaa896eed077b7f3415758ca22</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.11" release="2.el9_6.1" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.1.src.rpm">
          <filename>python3.11-tkinter-3.11.11-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">90863a5715233dbe997f43e5c1bace17198ff3884067ca94ab70c447cfed5def</sum>
        </package>
        <package name="python3.11-libs" version="3.11.11" release="2.el9_6.1" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.1.src.rpm">
          <filename>python3.11-libs-3.11.11-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">a4ace617fa65f4aaa5a4bbcf558ad45a44fbe02faddd67ab8f6d5e10bc2c5a5b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10189</id>
    <title>Important: python3.12 security update</title>
    <issued date="2025-07-02 00:00:00"/>
    <updated date="2025-07-02 13:57:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10189" id="RHSA-2025:10189" type="rhsa" title="RHSA-2025:10189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10189.html" id="ALSA-2025:10189" type="self" title="ALSA-2025:10189"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3.12-devel" version="3.12.9" release="1.el9_6.1" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.1.src.rpm">
          <filename>python3.12-devel-3.12.9-1.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">4d261ecdd14c3624ad89c711237ce4fa731778e68939b8549bbf0b10b348c5e9</sum>
        </package>
        <package name="python3.12-libs" version="3.12.9" release="1.el9_6.1" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.1.src.rpm">
          <filename>python3.12-libs-3.12.9-1.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">adf6d0c81a5c74f25cdbffec82d1740b8571b3aa83d250cef1f4498c6c237730</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.9" release="1.el9_6.1" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.1.src.rpm">
          <filename>python3.12-tkinter-3.12.9-1.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">cb669b5ef2b393d63d813b594c2395e50652746a0794c5cb9b0e281804d8fa48</sum>
        </package>
        <package name="python3.12" version="3.12.9" release="1.el9_6.1" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.1.src.rpm">
          <filename>python3.12-3.12.9-1.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">f48090b8c020fa63bc1d8f1e666aeee3727f4bb4a8f19f7ceadc6f24cee342ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10196</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-07-02 00:00:00"/>
    <updated date="2025-07-03 07:55:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10196" id="RHSA-2025:10196" type="rhsa" title="RHSA-2025:10196"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5986" id="CVE-2025-5986" type="cve" title="CVE-2025-5986"/>
      <reference href="https://bugzilla.redhat.com/2372281" id="2372281" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10196.html" id="ALSA-2025:10196" type="self" title="ALSA-2025:10196"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="thunderbird" version="128.12.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="thunderbird-128.12.0-1.el9_6.alma.1.src.rpm">
          <filename>thunderbird-128.12.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">79f1986010950de1108ddfceb6b1a2ca4fe4b5f8c1f67554dd8e430f36cedfc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10353</id>
    <title>Moderate: socat security update</title>
    <issued date="2025-07-07 00:00:00"/>
    <updated date="2025-07-09 08:18:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>socat security update</summary>
    <description>The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets.  

Security Fix(es):  

  * socat: arbitrary file overwrite via predictable /tmp directory (CVE-2024-54661)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10353" id="RHSA-2025:10353" type="rhsa" title="RHSA-2025:10353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54661" id="CVE-2024-54661" type="cve" title="CVE-2024-54661"/>
      <reference href="https://bugzilla.redhat.com/2330297" id="2330297" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10353.html" id="ALSA-2025:10353" type="self" title="ALSA-2025:10353"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="socat" version="1.7.4.1" release="6.el9_6.1" epoch="0" arch="s390x" src="socat-1.7.4.1-6.el9_6.1.src.rpm">
          <filename>socat-1.7.4.1-6.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">ca8a731dff8975dc3eadc783a45f0d2d94be1ae5fdae7ee5194783fff6e6dceb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10379</id>
    <title>Important: kernel security update</title>
    <issued date="2025-07-07 00:00:00"/>
    <updated date="2025-07-10 13:35:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)
  * kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CVE-2025-21887)
  * kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004)
  * kernel: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CVE-2022-49846)
  * kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CVE-2025-37799)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10379" id="RHSA-2025:10379" type="rhsa" title="RHSA-2025:10379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49846" id="CVE-2022-49846" type="cve" title="CVE-2022-49846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21759" id="CVE-2025-21759" type="cve" title="CVE-2025-21759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21887" id="CVE-2025-21887" type="cve" title="CVE-2025-21887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22004" id="CVE-2025-22004" type="cve" title="CVE-2025-22004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37799" id="CVE-2025-37799" type="cve" title="CVE-2025-37799"/>
      <reference href="https://bugzilla.redhat.com/2348596" id="2348596" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2355405" id="2355405" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357142" id="2357142" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363432" id="2363432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363876" id="2363876" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10379.html" id="ALSA-2025:10379" type="self" title="ALSA-2025:10379"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-debug-devel" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.25.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0b7337f00e651aebef5627a322a1697e167fcf9bbdf780e82b83705b35d34905</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.25.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0c23e1e943b6ec3321b61726d022f236bcc6e178d23a3a3956dc37121e919a6f</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.25.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">22d10c7298bb7a2354756865516c200e4eeec15441a6fd566715013e0dbaaf06</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.25.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">355e813d6ceb31e26d92033e46cfb0f85dc3b764bde10d8ab903f3c77eab2b4d</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.25.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">747c849ca1a369eb205c9b4b87702b1b3d58c097939c5cbf70b1fdaea0e8d3e9</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.25.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7c1c9f8d27507ded76360ceb51778dd5b09bdc39560a7172a7e5dda1eff92dae</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.25.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">948761331ec42e6c24b20e16daf8c9acc77c32d94aa3c810c335145bf4ddafcd</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.25.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">b5c5e7f7677a65a0f6b251ed9f83c244171896cb63582dc2bca00fefbc8b97a7</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.25.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">bdd5737f51bf04e18ecafec88d25e630c782078d6466969730c60cc15328c443</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.25.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d86a4196cf01d4e2762768741b23679aa8e656342d2d94a66c57416fd17eb95b</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.25.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e421d5d4968a6695da7468b1565ab55cf3aa335d1eba799b9a1f82e15169ac4d</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.25.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e6bd74d84b79d4f351fa10c46b03ea48dfc9a51c8536dff1c1504dc96ee8e3f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10550</id>
    <title>Important: podman security update</title>
    <issued date="2025-07-08 00:00:00"/>
    <updated date="2025-07-09 08:15:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * podman: podman missing TLS verification (CVE-2025-6032)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10550" id="RHSA-2025:10550" type="rhsa" title="RHSA-2025:10550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6032" id="CVE-2025-6032" type="cve" title="CVE-2025-6032"/>
      <reference href="https://bugzilla.redhat.com/2372501" id="2372501" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10550.html" id="ALSA-2025:10550" type="self" title="ALSA-2025:10550"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="podman-plugins" version="5.4.0" release="12.el9_6" epoch="5" arch="s390x" src="podman-5.4.0-12.el9_6.src.rpm">
          <filename>podman-plugins-5.4.0-12.el9_6.s390x.rpm</filename>
          <sum type="sha256">0371cc7d9531e2784031490a6458f212a8ad7f7c37896c497221ac5a71aaa18a</sum>
        </package>
        <package name="podman-tests" version="5.4.0" release="12.el9_6" epoch="5" arch="s390x" src="podman-5.4.0-12.el9_6.src.rpm">
          <filename>podman-tests-5.4.0-12.el9_6.s390x.rpm</filename>
          <sum type="sha256">22ccde65930884026f170592654d79c9163e20540e7f7e2e28d873cdc564d851</sum>
        </package>
        <package name="podman-remote" version="5.4.0" release="12.el9_6" epoch="5" arch="s390x" src="podman-5.4.0-12.el9_6.src.rpm">
          <filename>podman-remote-5.4.0-12.el9_6.s390x.rpm</filename>
          <sum type="sha256">7e16ad31a2b8ee3255f430cf6a62479b7191f43db1632ed3e255efadf5c89fd9</sum>
        </package>
        <package name="podman" version="5.4.0" release="12.el9_6" epoch="5" arch="s390x" src="podman-5.4.0-12.el9_6.src.rpm">
          <filename>podman-5.4.0-12.el9_6.s390x.rpm</filename>
          <sum type="sha256">9a8566c26f92316a2d778567ba152d57661c94136ebcd029ac06b951fa3f49b0</sum>
        </package>
        <package name="podman-docker" version="5.4.0" release="12.el9_6" epoch="5" arch="noarch" src="podman-5.4.0-12.el9_6.src.rpm">
          <filename>podman-docker-5.4.0-12.el9_6.noarch.rpm</filename>
          <sum type="sha256">e02696db3aab6a7d91efeba519de931041386602af04f62b8cbc0b72adda96f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10631</id>
    <title>Moderate: gnome-remote-desktop security update</title>
    <issued date="2025-07-08 00:00:00"/>
    <updated date="2025-07-10 13:03:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnome-remote-desktop security update</summary>
    <description>GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.  

Security Fix(es):  

  * gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10631" id="RHSA-2025:10631" type="rhsa" title="RHSA-2025:10631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5024" id="CVE-2025-5024" type="cve" title="CVE-2025-5024"/>
      <reference href="https://bugzilla.redhat.com/2367717" id="2367717" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10631.html" id="ALSA-2025:10631" type="self" title="ALSA-2025:10631"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="gnome-remote-desktop" version="40.0" release="11.el9_6" epoch="0" arch="s390x" src="gnome-remote-desktop-40.0-11.el9_6.src.rpm">
          <filename>gnome-remote-desktop-40.0-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">331bc0fbe7f7aac305ac0755e0de846af30fd5be644e346121ae5347f484f6c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1066</id>
    <title>Important: firefox security update</title>
    <issued date="2025-02-05 00:00:00"/>
    <updated date="2025-02-08 19:53:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 (CVE-2025-1017)
  * firefox: thunderbird: Use-after-free in Custom Highlight (CVE-2025-1010)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 (CVE-2025-1016)
  * firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows (CVE-2025-1013)
  * firefox: thunderbird: A bug in WebAssembly code generation could result in a crash (CVE-2025-1011)
  * firefox: thunderbird: Use-after-free in XSLT (CVE-2025-1009)
  * firefox: thunderbird: Certificate length was not properly checked (CVE-2025-1014)
  * firefox: thunderbird: Use-after-free during concurrent delazification (CVE-2025-1012)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1066" id="RHSA-2025:1066" type="rhsa" title="RHSA-2025:1066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1009" id="CVE-2025-1009" type="cve" title="CVE-2025-1009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1010" id="CVE-2025-1010" type="cve" title="CVE-2025-1010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1011" id="CVE-2025-1011" type="cve" title="CVE-2025-1011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1012" id="CVE-2025-1012" type="cve" title="CVE-2025-1012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1013" id="CVE-2025-1013" type="cve" title="CVE-2025-1013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1014" id="CVE-2025-1014" type="cve" title="CVE-2025-1014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1016" id="CVE-2025-1016" type="cve" title="CVE-2025-1016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1017" id="CVE-2025-1017" type="cve" title="CVE-2025-1017"/>
      <reference href="https://bugzilla.redhat.com/2343748" id="2343748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343750" id="2343750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343752" id="2343752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343754" id="2343754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343756" id="2343756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343760" id="2343760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343764" id="2343764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343765" id="2343765" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1066.html" id="ALSA-2025:1066" type="self" title="ALSA-2025:1066"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="firefox-x11" version="128.7.0" release="1.el9_5" epoch="0" arch="s390x" src="firefox-128.7.0-1.el9_5.src.rpm">
          <filename>firefox-x11-128.7.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">0d96e872b1780af49b9374f588b734903ec48d96b4edc2312f11cb944fccfe45</sum>
        </package>
        <package name="firefox" version="128.7.0" release="1.el9_5" epoch="0" arch="s390x" src="firefox-128.7.0-1.el9_5.src.rpm">
          <filename>firefox-128.7.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">68e8ddb1d61413bcbf557ca735190ccf27d82c037004c6807e042bb659053d09</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10676</id>
    <title>Moderate: golang security update</title>
    <issued date="2025-07-09 00:00:00"/>
    <updated date="2025-07-10 22:02:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.  

Security Fix(es):  

  * net/[http:](http:) Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10676" id="RHSA-2025:10676" type="rhsa" title="RHSA-2025:10676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4673" id="CVE-2025-4673" type="cve" title="CVE-2025-4673"/>
      <reference href="https://bugzilla.redhat.com/2373305" id="2373305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10676.html" id="ALSA-2025:10676" type="self" title="ALSA-2025:10676"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="golang-misc" version="1.24.4" release="1.el9_6" epoch="0" arch="noarch" src="golang-1.24.4-1.el9_6.src.rpm">
          <filename>golang-misc-1.24.4-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">39bded93e51b1eab3a048663974373172565d4d24477f46d808c3a05309bb9a6</sum>
        </package>
        <package name="golang" version="1.24.4" release="1.el9_6" epoch="0" arch="s390x" src="golang-1.24.4-1.el9_6.src.rpm">
          <filename>golang-1.24.4-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4504027693cb4c99d7996739d522198e0a361e78e0819606a1ae116f1f502cfe</sum>
        </package>
        <package name="golang-race" version="1.24.4" release="1.el9_6" epoch="0" arch="s390x" src="golang-1.24.4-1.el9_6.src.rpm">
          <filename>golang-race-1.24.4-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8aaaf87f9ac7a1b286f5de2f825ded3fac99d865675e63265ad8d2b0d30a7a38</sum>
        </package>
        <package name="golang-docs" version="1.24.4" release="1.el9_6" epoch="0" arch="noarch" src="golang-1.24.4-1.el9_6.src.rpm">
          <filename>golang-docs-1.24.4-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">a1c1ebd61db1c0dd854eb3d18dde55855fb0be1a8054509a0fb502433e5fc783</sum>
        </package>
        <package name="golang-tests" version="1.24.4" release="1.el9_6" epoch="0" arch="noarch" src="golang-1.24.4-1.el9_6.src.rpm">
          <filename>golang-tests-1.24.4-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">bef4424522b28367f82728a1006a4d0e15dae1f31ee4a55d64eb69398f0354b5</sum>
        </package>
        <package name="golang-bin" version="1.24.4" release="1.el9_6" epoch="0" arch="s390x" src="golang-1.24.4-1.el9_6.src.rpm">
          <filename>golang-bin-1.24.4-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">defeebf456efa6f1845c5a77be487cbd4e80940cfa3a0bad34116ecce2684ec2</sum>
        </package>
        <package name="go-toolset" version="1.24.4" release="1.el9_6" epoch="0" arch="s390x" src="golang-1.24.4-1.el9_6.src.rpm">
          <filename>go-toolset-1.24.4-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">eb307255c4a02404b3ba8b2d68fe5bf1b59ac4843a178b0f18a4dbb21aeb1983</sum>
        </package>
        <package name="golang-src" version="1.24.4" release="1.el9_6" epoch="0" arch="noarch" src="golang-1.24.4-1.el9_6.src.rpm">
          <filename>golang-src-1.24.4-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">ff534786c4c7f9770db6ed0667783c231f44215708f37f8e84d3c4eaf05dad74</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10699</id>
    <title>Important: libxml2 security update</title>
    <issued date="2025-07-09 00:00:00"/>
    <updated date="2025-07-10 12:52:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794)
  * libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796)
  * libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10699" id="RHSA-2025:10699" type="rhsa" title="RHSA-2025:10699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49794" id="CVE-2025-49794" type="cve" title="CVE-2025-49794"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49796" id="CVE-2025-49796" type="cve" title="CVE-2025-49796"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6021" id="CVE-2025-6021" type="cve" title="CVE-2025-6021"/>
      <reference href="https://bugzilla.redhat.com/2372373" id="2372373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372385" id="2372385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372406" id="2372406" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10699.html" id="ALSA-2025:10699" type="self" title="ALSA-2025:10699"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libxml2-devel" version="2.9.13" release="10.el9_6" epoch="0" arch="s390x" src="libxml2-2.9.13-10.el9_6.src.rpm">
          <filename>libxml2-devel-2.9.13-10.el9_6.s390x.rpm</filename>
          <sum type="sha256">96f66528bffd2c802c69ee809a5ffa15e096a8418bf67f1e412a112df0bb801d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10837</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-07-14 00:00:00"/>
    <updated date="2025-07-17 08:21:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10837" id="RHSA-2025:10837" type="rhsa" title="RHSA-2025:10837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21991" id="CVE-2025-21991" type="cve" title="CVE-2025-21991"/>
      <reference href="https://bugzilla.redhat.com/2356917" id="2356917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10837.html" id="ALSA-2025:10837" type="self" title="ALSA-2025:10837"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3-perf" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.26.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0b45fee227744d5238d732311fb4abcad7b14010f83f9d013b567fece2ecb267</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.26.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">1cd51f675f76af7972b2ab02fcdf47e3c0bd338425841b0f850560f53a33d100</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.26.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3e690e79d37d11c40bc4a3db9090c57ce5d71b88fa4d14d367490a551693f4bd</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.26.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4ff3333aeca156516c8c91c2c6abd8bd076b7e3432e53605b0437b0f2294f22a</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.26.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">624275404bd90cae0383456e3ae98de7a8f71bf6c16c1d8be252bb9f5c05f1bf</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.26.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">72f5536aa6546888861afcfea5202a98ec0ccdee9d3a3861be04cacd2fcf3dde</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.26.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">855e793399a1723d15f699d832e2320e080ae78dd49c7120c867c71bfe2f9bda</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.26.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8c499fb1bb4602c1e7a46eb7248cae7c6c64e502ef151f0d153cd8ee56654d82</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.26.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">de464747435a2b62e695cd1d3dfc955e02e1920a62d0aa3b2add780d002d7fb4</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.26.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">df344d57eb25b99ba4186dec0d295aa537c35e8d27cbd6d04f6601341d2539c3</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.26.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e97d39de06fdc9b0822a44654bd8dd036171e993812e8a0ae47dca3384a80160</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.26.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ff520e823dee496be0af3a3512ec4ffd195b9bb81efa38d766c669159997492c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10848</id>
    <title>Important: cloud-init security update</title>
    <issued date="2025-07-14 00:00:00"/>
    <updated date="2025-07-22 13:36:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cloud-init security update</summary>
    <description>The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts.  

Security Fix(es):  

  * cloud-init: Cloud init permissions flaw (CVE-2024-6174)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10848" id="RHSA-2025:10848" type="rhsa" title="RHSA-2025:10848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6174" id="CVE-2024-6174" type="cve" title="CVE-2024-6174"/>
      <reference href="https://bugzilla.redhat.com/2374924" id="2374924" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10848.html" id="ALSA-2025:10848" type="self" title="ALSA-2025:10848"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="cloud-init" version="24.4" release="4.el9_6.3.alma.1" epoch="0" arch="noarch" src="cloud-init-24.4-4.el9_6.3.alma.1.src.rpm">
          <filename>cloud-init-24.4-4.el9_6.3.alma.1.noarch.rpm</filename>
          <sum type="sha256">9d46e891e1c012191d100c9ed99c5e56c9a4c74b0e8bf51cfb2e51597e27a694</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10862</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2025-07-17 00:00:00"/>
    <updated date="2025-07-21 09:41:01"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better Glyph drawing (CVE-2025-30749)
  * JDK: Enhance TLS protocol support (CVE-2025-30754)
  * JDK: Improve scripting supports (CVE-2025-30761)
  * JDK: Better Glyph drawing redux (CVE-2025-50106)


Bug Fix(es):  

  * On certain system configurations where the IPv4 stack was preferred over IPv6 (either due to -Djava.net.preferIPv4Stack=true being specified or no IPv6 interfaces being present), the method java.net.InetAddress.getLocalHost().getHostName() would return the fully qualified hostname instead of the short hostname. This behavior was only ever intended for Solaris systems and it deviated from the method's behavior for IPv6 interfaces. In this release, the method will return the short hostname on all interfaces. (AlmaLinux-102904, AlmaLinux-102905, AlmaLinux-102906, AlmaLinux-102907, AlmaLinux-102908, AlmaLinux-102909, AlmaLinux-102910, AlmaLinux-102911, AlmaLinux-102912)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10862" id="RHSA-2025:10862" type="rhsa" title="RHSA-2025:10862"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30749" id="CVE-2025-30749" type="cve" title="CVE-2025-30749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30754" id="CVE-2025-30754" type="cve" title="CVE-2025-30754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30761" id="CVE-2025-30761" type="cve" title="CVE-2025-30761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50106" id="CVE-2025-50106" type="cve" title="CVE-2025-50106"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10862.html" id="ALSA-2025:10862" type="self" title="ALSA-2025:10862"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.462.b08" release="3.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.462.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.462.b08-3.el9.s390x.rpm</filename>
          <sum type="sha256">16495ac9524dcd818230b452e97db1fee836f4d7cd37283bb66f1415e92c8cec</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.462.b08" release="3.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.462.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.462.b08-3.el9.s390x.rpm</filename>
          <sum type="sha256">3d0301ea5ab2b9afbb1b1d61093826f5ba7c8b5c058a1d7019912eddcb63b1e3</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.462.b08" release="3.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.462.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.462.b08-3.el9.s390x.rpm</filename>
          <sum type="sha256">4c1e9237d204fe88db7a52670979a2d852c761299df5c8b63954448910345da6</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.462.b08" release="3.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.462.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.462.b08-3.el9.noarch.rpm</filename>
          <sum type="sha256">5330baf86f2300516ddf69f4d5436937dbf9b81c14ffd67624fd0dbf9f4dbdcc</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.462.b08" release="3.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.462.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.462.b08-3.el9.s390x.rpm</filename>
          <sum type="sha256">585e084d5b7e0479179a04e02b5e9929951bcdc2dd9e2e7ee3b68708fd1ca037</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.462.b08" release="3.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.462.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.462.b08-3.el9.s390x.rpm</filename>
          <sum type="sha256">5f1890daa60fbc2d91eea5b14b52956544d812ee713663267b9a2f8c937879e2</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.462.b08" release="3.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.462.b08-3.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.462.b08-3.el9.noarch.rpm</filename>
          <sum type="sha256">785c4c8a84cad05fbb69c19031341c5255a0525009775028d1d9c7dc85861f94</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10867</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 12:49:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better Glyph drawing (CVE-2025-30749)
  * JDK: Enhance TLS protocol support (CVE-2025-30754)
  * JDK: Improve HTTP client header handling (CVE-2025-50059)
  * JDK: Better Glyph drawing redux (CVE-2025-50106)


Bug Fix(es):  

  * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102668, AlmaLinux-102669, AlmaLinux-102670, AlmaLinux-102672)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10867" id="RHSA-2025:10867" type="rhsa" title="RHSA-2025:10867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30749" id="CVE-2025-30749" type="cve" title="CVE-2025-30749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30754" id="CVE-2025-30754" type="cve" title="CVE-2025-30754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50059" id="CVE-2025-50059" type="cve" title="CVE-2025-50059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50106" id="CVE-2025-50106" type="cve" title="CVE-2025-50106"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10867.html" id="ALSA-2025:10867" type="self" title="ALSA-2025:10867"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="java-17-openjdk-headless" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">1791ca4182ef7a31789dd2c0c3c09d5710c92d63d97c5bbc8758c9a27f5d081f</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">2732cb7084bb43c1d51ae91c3c3aa708261b1323f854fddbe62e897d5eabc1c9</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">5e68e6ef1d31a2ac2e0e6a0c667329c5629afb7cb9f30fd9f154a2bd27e81ff3</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">77a2dcfdaf8020c01b0190ca7bd8e4a30c1bacaa94c72a806e6c407540108539</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">94dc16cbee9ed9365ca522b6471db3ff09cf5fc9656ca512e92037361ed3e41b</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">9f76a88cff7047aa3a7bdc91825b871ed0c2a35aedda49f3814ba3a7344c73b0</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a1d7c4db9d62bf0f99b9f24d9bdf1e5a80532210a82f9e07a29f73659ebc1747</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b251911166dc74e67a7ebcfeb921344ec1817ace99e1bebaea1d37fc210c9a10</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d90766c869c21cb920bf1f8a630429c4b41b3db1b66add24822a85c6b8ccb564</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10873</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2025-07-16 00:00:00"/>
    <updated date="2025-07-30 13:13:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better Glyph drawing (CVE-2025-30749)
  * JDK: Enhance TLS protocol support (CVE-2025-30754)
  * JDK: Improve HTTP client header handling (CVE-2025-50059)
  * JDK: Better Glyph drawing redux (CVE-2025-50106)


Bug Fix(es):  

  * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102683, AlmaLinux-102684, AlmaLinux-102685)
  * On NUMA systems, the operating system can choose to migrate a task from one NUMA node to another. In the G1 garbage collector, G1AllocRegion objects are associated with NUMA nodes. The G1Allocator code assumes that obtaining the G1AllocRegion object for the current thread is sufficient, but OS scheduling can lead to arbitrary changes in the NUMA-to-thread association. This can cause crashes when the G1AllocRegion being used changes mid-operation. This update resolves this issue by always using the same NUMA node and associated G1AllocRegion object throughout an operation. (AlmaLinux-90307, AlmaLinux-90308, AlmaLinux-90311)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10873" id="RHSA-2025:10873" type="rhsa" title="RHSA-2025:10873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30749" id="CVE-2025-30749" type="cve" title="CVE-2025-30749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30754" id="CVE-2025-30754" type="cve" title="CVE-2025-30754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50059" id="CVE-2025-50059" type="cve" title="CVE-2025-50059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50106" id="CVE-2025-50106" type="cve" title="CVE-2025-50106"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10873.html" id="ALSA-2025:10873" type="self" title="ALSA-2025:10873"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="java-21-openjdk" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">4f1b8c5c0851e1b117fc8e4082c316f4295f26f0c42f1b5a5337f77622d78450</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">6eca19f3eed3f472bf63589dce9bdad071398949e9b1d77c733003fcfc2ccde6</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">7aa77e2683eb506269bd1668fe004ca9ab45d9563a890c2e52504fd386dbaeda</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">96f4fb98cc6ac4c6e5b7077dd689b580baaf55bb72c3b52fcd880a2cadb48e43</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c2bfdda5f2ea1faeac9309f01a37c5669d6c767fcbcd1d7c2f97e9d903b681dd</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c925ca6f68f12ba26c5d5310a49da614b2158b273151d811d0fb177b32e6071e</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d61ac89e421fb8975534c4582db37abe28ddba79041d37ba74ade13e815abd5f</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e1f75a5ebb6686c42085ee617e72eaf2fbffb77a66977146614fd347774451ea</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f336fe85b3f51492a233282751b25e1f36adfe9e6e8d86f9b414f98b300acd78</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11140</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 12:44:37"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)
  * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar (CVE-2025-4373)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11140" id="RHSA-2025:11140" type="rhsa" title="RHSA-2025:11140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52533" id="CVE-2024-52533" type="cve" title="CVE-2024-52533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4373" id="CVE-2025-4373" type="cve" title="CVE-2025-4373"/>
      <reference href="https://bugzilla.redhat.com/2325340" id="2325340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2364265" id="2364265" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11140.html" id="ALSA-2025:11140" type="self" title="ALSA-2025:11140"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="glib2-doc" version="2.68.4" release="16.el9_6.2" epoch="0" arch="noarch" src="glib2-2.68.4-16.el9_6.2.src.rpm">
          <filename>glib2-doc-2.68.4-16.el9_6.2.noarch.rpm</filename>
          <sum type="sha256">310b01475b36a88db15ac012b0c7a14760bc4e0c89395fd289bad27ebcae45a2</sum>
        </package>
        <package name="glib2-devel" version="2.68.4" release="16.el9_6.2" epoch="0" arch="s390x" src="glib2-2.68.4-16.el9_6.2.src.rpm">
          <filename>glib2-devel-2.68.4-16.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">63dc54f7083353224744ffba397d730acd0b0fc94b6440a4785bb6ae26f13757</sum>
        </package>
        <package name="glib2-tests" version="2.68.4" release="16.el9_6.2" epoch="0" arch="s390x" src="glib2-2.68.4-16.el9_6.2.src.rpm">
          <filename>glib2-tests-2.68.4-16.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">8cf47ba36afe3ab2482bedc923d6967d2b29326f68215028eab3fe35be465843</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11335</id>
    <title>Important: tomcat security update</title>
    <issued date="2025-07-16 00:00:00"/>
    <updated date="2025-07-17 08:49:49"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.  

Security Fix(es):  

  * tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)
  * tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11335" id="RHSA-2025:11335" type="rhsa" title="RHSA-2025:11335"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56337" id="CVE-2024-56337" type="cve" title="CVE-2024-56337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31650" id="CVE-2025-31650" type="cve" title="CVE-2025-31650"/>
      <reference href="https://bugzilla.redhat.com/2333521" id="2333521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362783" id="2362783" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11335.html" id="ALSA-2025:11335" type="self" title="ALSA-2025:11335"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="tomcat-webapps" version="9.0.87" release="3.el9_6.1" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.1.src.rpm">
          <filename>tomcat-webapps-9.0.87-3.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">281eef4bd6b16bf6eb470f47c3970df8c4a2836d3028e30a580a65e7ada60137</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.87" release="3.el9_6.1" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.1.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.87-3.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">2f77795bdd90d1fe412da61d5569c0c6f4df28efef4d1a2e1df4d05b88203261</sum>
        </package>
        <package name="tomcat" version="9.0.87" release="3.el9_6.1" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.1.src.rpm">
          <filename>tomcat-9.0.87-3.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">3f28b0bffd962832563895e539c63bd5f74e5b356793560472765017e3fcdc39</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.87" release="3.el9_6.1" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.1.src.rpm">
          <filename>tomcat-docs-webapp-9.0.87-3.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">43a12fc223d779273ea81e84f3222d95e201277edbabd0e096a865b2469e2fb5</sum>
        </package>
        <package name="tomcat-lib" version="9.0.87" release="3.el9_6.1" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.1.src.rpm">
          <filename>tomcat-lib-9.0.87-3.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">76af4613615060c07f2c5cba8447fb39aff4c16a6b29d9f1ed2e7159bbf35b51</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.87" release="3.el9_6.1" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.1.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.87-3.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">76ebae4b3642bcd9d070c0622225bb74d863fb10967e6c30cce72588ef0b8a43</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.87" release="3.el9_6.1" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.1.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.87-3.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">a00f3033de27158d1def3b40024da89c33fbffbecaba33be74116fa2c8639890</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.87" release="3.el9_6.1" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.1.src.rpm">
          <filename>tomcat-admin-webapps-9.0.87-3.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">c54248bc0df878433b36160be3be0e55b285dae90d13ce1a812815b56cc512af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11411</id>
    <title>Important: kernel security update</title>
    <issued date="2025-07-21 00:00:00"/>
    <updated date="2025-07-23 07:42:01"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002)
  * kernel: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CVE-2025-38089)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11411" id="RHSA-2025:11411" type="rhsa" title="RHSA-2025:11411"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58002" id="CVE-2024-58002" type="cve" title="CVE-2024-58002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38089" id="CVE-2025-38089" type="cve" title="CVE-2025-38089"/>
      <reference href="https://bugzilla.redhat.com/2348513" id="2348513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375529" id="2375529" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11411.html" id="ALSA-2025:11411" type="self" title="ALSA-2025:11411"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-devel-matched" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.28.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">10721b1ae633cba3f82ad89e03f1b803632b4002bc3dcc60d945ea29758fb720</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.28.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2250a0dafdbde4c99a783e0ca316da365d34e024bc0f81872899508a9f140d33</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.28.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2f036e07f3d6eda7a2e9d77f31281d6a91812f01ee0d18cd0fb8a12dc273a743</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.28.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">652c3da4e030a12df6cbaa179b5e4414bdbfad760ef03b8339e00f624856ae86</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.28.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8817a0d45eb58635eb1d3716cf380452dabc47b4562ffd71e6d5896df64362fd</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.28.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">888d6f7a7f039d40f9851affd9f3e5cdde2b0a16f233f77f50f574f73a66ff48</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.28.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">935ede4a1aa28a836d26ed678f7222ef1697508b3b2afaeb2e6d4d97060c0ffb</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.28.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">b58903c7edfc03844df37ad954767a2d2b330556855dbe3f07bcb28ef2b74963</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.28.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d515a3d55415ac03ce34a447b251f7ec192fe8a3114a7a5ee7931519d9d68b29</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.28.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e3dfe7951692d6513f57ac4961b29cedd9bdefc3e50e8e66eea4a877418a61aa</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.28.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e480f2d92981f4c92aaf5206b20441fd5e652f8a9d6d20daf75e02499d5ebec6</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.28.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f8534c7baca82363d6aec286a4735dc6ff34da33ea99c0ffd8dbd4fae8ee5954</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11462</id>
    <title>Important: git security update</title>
    <issued date="2025-07-21 00:00:00"/>
    <updated date="2025-07-22 10:34:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git security update</summary>
    <description>Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.  

Security Fix(es):  

  * git: Git does not sanitize URLs when asking for credentials interactively (CVE-2024-50349)
  * git: Newline confusion in credential helpers can lead to credential exfiltration in git (CVE-2024-52006)
  * git: Git arbitrary code execution (CVE-2025-48384)
  * git: Git arbitrary file writes (CVE-2025-48385)
  * gitk: Git file creation flaw (CVE-2025-27613)
  * gitk: git script execution flaw (CVE-2025-27614)
  * git: Git GUI can create and overwrite files for which the user has write permission (CVE-2025-46835)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11462" id="RHSA-2025:11462" type="rhsa" title="RHSA-2025:11462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50349" id="CVE-2024-50349" type="cve" title="CVE-2024-50349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52006" id="CVE-2024-52006" type="cve" title="CVE-2024-52006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27613" id="CVE-2025-27613" type="cve" title="CVE-2025-27613"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27614" id="CVE-2025-27614" type="cve" title="CVE-2025-27614"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46835" id="CVE-2025-46835" type="cve" title="CVE-2025-46835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48384" id="CVE-2025-48384" type="cve" title="CVE-2025-48384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48385" id="CVE-2025-48385" type="cve" title="CVE-2025-48385"/>
      <reference href="https://bugzilla.redhat.com/2337824" id="2337824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337956" id="2337956" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378806" id="2378806" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378808" id="2378808" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379124" id="2379124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379125" id="2379125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379326" id="2379326" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11462.html" id="ALSA-2025:11462" type="self" title="ALSA-2025:11462"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="git-svn" version="2.47.3" release="1.el9_6" epoch="0" arch="noarch" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>git-svn-2.47.3-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">039c7428d046d2a93f8b541a1a012e23190a028df8a2ed48f3974503c2c8ab88</sum>
        </package>
        <package name="git-credential-libsecret" version="2.47.3" release="1.el9_6" epoch="0" arch="s390x" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>git-credential-libsecret-2.47.3-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">062b01f8cce706df09c2f69efd2343151a7765ce33ad192d3edc9d4ce3689540</sum>
        </package>
        <package name="git-core-doc" version="2.47.3" release="1.el9_6" epoch="0" arch="noarch" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>git-core-doc-2.47.3-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">154f29b0e1dfbf2a77b8ba0bad45a4ddfffae7a34ecb2154dc7afe811ffd9194</sum>
        </package>
        <package name="git-email" version="2.47.3" release="1.el9_6" epoch="0" arch="noarch" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>git-email-2.47.3-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">296d6134e3e0fcb08684a5a0c5ff8f37da7dfc3929e97ba7972347b8b75ef7cd</sum>
        </package>
        <package name="git-daemon" version="2.47.3" release="1.el9_6" epoch="0" arch="s390x" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>git-daemon-2.47.3-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">59289fd59c70cbc22024ba4953434da17cf2b40d8ae60194ad7bcd3c8d7acb77</sum>
        </package>
        <package name="git-core" version="2.47.3" release="1.el9_6" epoch="0" arch="s390x" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>git-core-2.47.3-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5cf9ac7f09cf7a97bf7b1d0645aed8de4e4fd244f40f43226e5fdbfa97fd8ee8</sum>
        </package>
        <package name="git" version="2.47.3" release="1.el9_6" epoch="0" arch="s390x" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>git-2.47.3-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5e65de7000c8003ec8fcf4eaa4627c87a070283e12d609888492a9645681a25b</sum>
        </package>
        <package name="perl-Git-SVN" version="2.47.3" release="1.el9_6" epoch="0" arch="noarch" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>perl-Git-SVN-2.47.3-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">6260e2162ff7971a9214ef11ee0604619036b34a824ad49aaa454b02628ea6b3</sum>
        </package>
        <package name="gitweb" version="2.47.3" release="1.el9_6" epoch="0" arch="noarch" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>gitweb-2.47.3-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">643b62eeb3e2ab909065bdcd816b6773f748d4caa8b355a2c6195bfcfb5a0bf8</sum>
        </package>
        <package name="perl-Git" version="2.47.3" release="1.el9_6" epoch="0" arch="noarch" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>perl-Git-2.47.3-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">7bb360063a9bc96c44b1293282e549051313b8095997e106947e61d4368a49b8</sum>
        </package>
        <package name="git-subtree" version="2.47.3" release="1.el9_6" epoch="0" arch="s390x" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>git-subtree-2.47.3-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">9901c330ef8281cfe837e19f5c8ac9fb10f722b66d88a649669e0ba6ee75cd8f</sum>
        </package>
        <package name="git-gui" version="2.47.3" release="1.el9_6" epoch="0" arch="noarch" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>git-gui-2.47.3-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">9e8a0552cee383c9d37569bb221744a12672fa0e534a8477c240027c5ff156ef</sum>
        </package>
        <package name="gitk" version="2.47.3" release="1.el9_6" epoch="0" arch="noarch" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>gitk-2.47.3-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">a4155777242e30a1f4da9e3fc2b2d18887f9ddb5c33b93ece8f3ee16d86245ef</sum>
        </package>
        <package name="git-all" version="2.47.3" release="1.el9_6" epoch="0" arch="noarch" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>git-all-2.47.3-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">a787ed1f399dae43821c2e9196b8c67fc4af6ccf0695a61b278b551b4e8410c6</sum>
        </package>
        <package name="git-instaweb" version="2.47.3" release="1.el9_6" epoch="0" arch="noarch" src="git-2.47.3-1.el9_6.src.rpm">
          <filename>git-instaweb-2.47.3-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">cf55cc547c4de2274cb03a3b3683691f7c0d706ab48904b9ebf507e435a9e099</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11463</id>
    <title>Moderate: fence-agents security update</title>
    <issued date="2025-07-21 00:00:00"/>
    <updated date="2025-07-22 13:34:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11463" id="RHSA-2025:11463" type="rhsa" title="RHSA-2025:11463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11463.html" id="ALSA-2025:11463" type="self" title="ALSA-2025:11463"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="fence-agents-scsi" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-scsi-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">03e70d492f92498d27bbf33eb1257bd26ffff882c1f6d990dc1c4c4feb82ab59</sum>
        </package>
        <package name="fence-agents-bladecenter" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-bladecenter-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">08a4711a27b328e1717555941dfee8a9f93c16edc5e2eac5a52d0b1392f1ec32</sum>
        </package>
        <package name="fence-agents-ilo-mp" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-ilo-mp-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">123ef8fb76983d0378dad7dc1e6ce90251564c121935aaca01c7980fe85770dd</sum>
        </package>
        <package name="fence-agents-lpar" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-lpar-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">18628cafc5ba3d22490a6740d1955aba878c3ddd5ea221d99cf99a815b0aebcb</sum>
        </package>
        <package name="fence-agents-wti" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-wti-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">1887210096e059e32bd64fbc2bb587919c5e2e61c95a2ad47282924a0c93d4bc</sum>
        </package>
        <package name="fence-agents-eps" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-eps-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">19afca3ce09c82e42ea1c57b47ebd549d0f253faf082b3884fa58f6c7db3c6f6</sum>
        </package>
        <package name="fence-agents-rsa" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-rsa-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">231147f351b2037ef9d91f698f696eeae2e7b35fcf365beb7f684b92055dc102</sum>
        </package>
        <package name="fence-agents-kdump" version="4.10.0" release="86.el9_6.7" epoch="0" arch="s390x" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-kdump-4.10.0-86.el9_6.7.s390x.rpm</filename>
          <sum type="sha256">2324e3e083d2bd053866c55fce76b14d5e7aa3b3dd2ad23045c9267ec4c399dc</sum>
        </package>
        <package name="fence-agents-ipmilan" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-ipmilan-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">29c70b96c3d278220914ae7ce0e58acab84bc7d1cb4021295880a7c001be0cd1</sum>
        </package>
        <package name="fence-agents-rsb" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-rsb-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">2d05561e1eaedcda8faf42a7605e825f4d43123809ddb202d0c6e586790f8707</sum>
        </package>
        <package name="fence-agents-mpath" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-mpath-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">2d75c1b4f2f48fb7c1b471185b6bbb576099820302c67634ebbfb486938daa32</sum>
        </package>
        <package name="fence-agents-apc" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-apc-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">3196fea08937ed254ac9da0ea5ded5bf0e02dfc4298729e2129f114ec6943269</sum>
        </package>
        <package name="fence-agents-ilo2" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-ilo2-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">379acf603af424c87da3481f15432ebcf6d00927ffe05db5c552419aa6f5ea8d</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-ibm-vpc-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">3b9d4e191b953b7f955456eff64c73d4ca4a96f1d485e45fbf502b65e6fbfb54</sum>
        </package>
        <package name="fence-agents-ibm-powervs" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-ibm-powervs-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">49b9df90f33a67ac008739c591d9d3c214f54be684825a367aef8cb482995c41</sum>
        </package>
        <package name="fence-agents-ifmib" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-ifmib-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">4ebe57452f93914e3c25bf4fce4884e3bc942f017a4a812c18301f5a47fe0698</sum>
        </package>
        <package name="fence-agents-sbd" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-sbd-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">4ed39cc7b365d6c12ba4a317148cfb2a00656a414318d4751c145d7e3fb10820</sum>
        </package>
        <package name="fence-agents-ilo-ssh" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-ilo-ssh-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">53ca76df5cbaa300da93a833619a3d9928cf217f560c6fe119e2f8828643fa55</sum>
        </package>
        <package name="fence-agents-cisco-ucs" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-cisco-ucs-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">5acecd445f2a7276a6570f1d4a807138cc0485e7b7bfc2fb08e8153f9976d2ec</sum>
        </package>
        <package name="fence-agents-hpblade" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-hpblade-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">5ae822356695218e886c4b5730a2660aca6f6f5fe954b337468bad0aeaba2ca5</sum>
        </package>
        <package name="fence-agents-virsh" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-virsh-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">611196be29f8f9a806989f4d189a96ff303f4e83b85d2ffbe08bb72c08b2d82f</sum>
        </package>
        <package name="fence-agents-eaton-snmp" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-eaton-snmp-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">68b6495143f277dabae7c3826897294b960cab6603c8d87122b823fb846af5c3</sum>
        </package>
        <package name="fence-agents-apc-snmp" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-apc-snmp-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">6d113c7b79b43205f83b395d3df6d59ab1b15f1a177a96add9b3a7a55fdadc55</sum>
        </package>
        <package name="fence-agents-heuristics-ping" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-heuristics-ping-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">715a164bdeb252d009fedec71f5acc499ede803ccd8df1a4be83696f214021eb</sum>
        </package>
        <package name="fence-agents-amt-ws" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-amt-ws-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">726cd03542754b1a1fdaa9f932cc46cac886d72bcb4526cc9b31f5eb35aa2111</sum>
        </package>
        <package name="fence-agents-ilo-moonshot" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-ilo-moonshot-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">7709df4112d280a284be7c3f654ba0e0399a9f889ed01c0ecca128e78b0feae5</sum>
        </package>
        <package name="fence-agents-cisco-mds" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-cisco-mds-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">a466cc0f0114e09549ee5dc8ce49f81d40c44354f0db6acbd115f4faa6e4a388</sum>
        </package>
        <package name="fence-agents-zvm" version="4.10.0" release="86.el9_6.7" epoch="0" arch="s390x" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-zvm-4.10.0-86.el9_6.7.s390x.rpm</filename>
          <sum type="sha256">a68f41654676675e15595908d54e5b98a561b9772b827bf2b635b7e44b0b28f6</sum>
        </package>
        <package name="fence-agents-ibmblade" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-ibmblade-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">a89b35adf0867c1dc63bebdfa8ff43876450b8d42ffd975bad33612f5b306185</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.10.0" release="86.el9_6.7" epoch="0" arch="s390x" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-kubevirt-4.10.0-86.el9_6.7.s390x.rpm</filename>
          <sum type="sha256">abbbf12e2d3f747f2fd90663dadf08d518ac6c5b6eb1cf6d1bf7a9082e480a98</sum>
        </package>
        <package name="fence-agents-all" version="4.10.0" release="86.el9_6.7" epoch="0" arch="s390x" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-all-4.10.0-86.el9_6.7.s390x.rpm</filename>
          <sum type="sha256">ac841715e1b45c519d17f3590c577f26bf43bad6c06b0dc6be4ff7ff92a5bffd</sum>
        </package>
        <package name="fence-agents-ipdu" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-ipdu-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">b3e776650eebcc7a4e2085a5bceee5bf1ce1b192e16776824b2cb5e134b5a955</sum>
        </package>
        <package name="fence-agents-common" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-common-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">b6bee14a91a22593f2db4144a63fcbabb3b51a0b2af1ce02fa0329d1906d32c3</sum>
        </package>
        <package name="fence-agents-emerson" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-emerson-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">c9995a66f5efc573cac153315d67cb93a6f83470bd2d29aa3b1471c5312b6066</sum>
        </package>
        <package name="fence-agents-drac5" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-drac5-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">cc1d1711453a99b2439a5320c73a6df92f73fc8949e5b0ed89beb02be68bdbec</sum>
        </package>
        <package name="fence-agents-redfish" version="4.10.0" release="86.el9_6.7" epoch="0" arch="s390x" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-redfish-4.10.0-86.el9_6.7.s390x.rpm</filename>
          <sum type="sha256">d410a954fc4f4003277b976a6b94d14911abe3036e304016649399ec151d7783</sum>
        </package>
        <package name="fence-agents-intelmodular" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-intelmodular-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">d72b20e22394b016a27caab7d2e3fb1878f72e27a931a2fa7e184e7b152c9a7f</sum>
        </package>
        <package name="fence-agents-brocade" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-brocade-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">e209d1f482a3ee785ff79577efb021d1de3adbe4bf0ba4cb598966c6131fe85c</sum>
        </package>
        <package name="fence-agents-rhevm" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-rhevm-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">e34eec2d3d75c533c9ab40c350f0fa12f67380ad77bcc7eb2e0f2455020845eb</sum>
        </package>
        <package name="fence-agents-vmware-soap" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-vmware-soap-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">f47e04428c8fd0eb8555278754675db062736140e1dca78cf7e04772e6f102ea</sum>
        </package>
        <package name="fence-agents-vmware-rest" version="4.10.0" release="86.el9_6.7" epoch="0" arch="noarch" src="fence-agents-4.10.0-86.el9_6.7.src.rpm">
          <filename>fence-agents-vmware-rest-4.10.0-86.el9_6.7.noarch.rpm</filename>
          <sum type="sha256">ffed8b2e8adc5c0d017b73cd6023d957747cd15853675ef72aca6061af6b4c9d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11748</id>
    <title>Important: firefox security update</title>
    <issued date="2025-07-24 00:00:00"/>
    <updated date="2025-07-30 15:41:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Large branch table could lead to truncated instruction (CVE-2025-8028)
  * firefox: thunderbird: Memory safety bugs (CVE-2025-8035)
  * firefox: thunderbird: Incorrect URL stripping in CSP reports (CVE-2025-8031)
  * firefox: thunderbird: JavaScript engine only wrote partial return value to stack (CVE-2025-8027)
  * firefox: thunderbird: Potential user-assisted code execution in ?Copy as cURL? command (CVE-2025-8030)
  * firefox: Memory safety bugs (CVE-2025-8034)
  * firefox: thunderbird: Incorrect JavaScript state machine for generators (CVE-2025-8033)
  * firefox: thunderbird: XSLT documents could bypass CSP (CVE-2025-8032)
  * firefox: thunderbird: javascript: URLs executed on object and embed tags (CVE-2025-8029)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11748" id="RHSA-2025:11748" type="rhsa" title="RHSA-2025:11748"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8027" id="CVE-2025-8027" type="cve" title="CVE-2025-8027"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8028" id="CVE-2025-8028" type="cve" title="CVE-2025-8028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8029" id="CVE-2025-8029" type="cve" title="CVE-2025-8029"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8030" id="CVE-2025-8030" type="cve" title="CVE-2025-8030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8031" id="CVE-2025-8031" type="cve" title="CVE-2025-8031"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8032" id="CVE-2025-8032" type="cve" title="CVE-2025-8032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8033" id="CVE-2025-8033" type="cve" title="CVE-2025-8033"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8034" id="CVE-2025-8034" type="cve" title="CVE-2025-8034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8035" id="CVE-2025-8035" type="cve" title="CVE-2025-8035"/>
      <reference href="https://bugzilla.redhat.com/2382701" id="2382701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382703" id="2382703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382704" id="2382704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382707" id="2382707" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382710" id="2382710" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382711" id="2382711" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382717" id="2382717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382718" id="2382718" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382720" id="2382720" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11748.html" id="ALSA-2025:11748" type="self" title="ALSA-2025:11748"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="firefox-x11" version="128.13.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-128.13.0-1.el9_6.alma.1.src.rpm">
          <filename>firefox-x11-128.13.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">6b8764a29258323ec69a76d03b8f2c6fbb333917d2b5aaa6f83089275bc7873c</sum>
        </package>
        <package name="firefox" version="128.13.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-128.13.0-1.el9_6.alma.1.src.rpm">
          <filename>firefox-128.13.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">6ba87396a87cdf74039df610c3383f925ac92c47db322249f61e2dc49a54f2c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1184</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-02-10 00:00:00"/>
    <updated date="2025-02-10 15:18:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 (CVE-2025-1017)
  * firefox: thunderbird: Use-after-free in Custom Highlight (CVE-2025-1010)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 (CVE-2025-1016)
  * firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows (CVE-2025-1013)
  * firefox: thunderbird: A bug in WebAssembly code generation could result in a crash (CVE-2025-1011)
  * thunderbird: Unsanitized address book fields (CVE-2025-1015)
  * firefox: thunderbird: Use-after-free in XSLT (CVE-2025-1009)
  * thunderbird: Address of e-mail sender can be spoofed by malicious email (CVE-2025-0510)
  * firefox: thunderbird: Certificate length was not properly checked (CVE-2025-1014)
  * firefox: thunderbird: Use-after-free during concurrent delazification (CVE-2025-1012)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1184" id="RHSA-2025:1184" type="rhsa" title="RHSA-2025:1184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0510" id="CVE-2025-0510" type="cve" title="CVE-2025-0510"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1009" id="CVE-2025-1009" type="cve" title="CVE-2025-1009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1010" id="CVE-2025-1010" type="cve" title="CVE-2025-1010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1011" id="CVE-2025-1011" type="cve" title="CVE-2025-1011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1012" id="CVE-2025-1012" type="cve" title="CVE-2025-1012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1013" id="CVE-2025-1013" type="cve" title="CVE-2025-1013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1014" id="CVE-2025-1014" type="cve" title="CVE-2025-1014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1015" id="CVE-2025-1015" type="cve" title="CVE-2025-1015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1016" id="CVE-2025-1016" type="cve" title="CVE-2025-1016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1017" id="CVE-2025-1017" type="cve" title="CVE-2025-1017"/>
      <reference href="https://bugzilla.redhat.com/2343748" id="2343748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343750" id="2343750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343752" id="2343752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343754" id="2343754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343756" id="2343756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343759" id="2343759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343760" id="2343760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343762" id="2343762" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343764" id="2343764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343765" id="2343765" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1184.html" id="ALSA-2025:1184" type="self" title="ALSA-2025:1184"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="thunderbird" version="128.7.0" release="1.el9_5.alma.1" epoch="0" arch="s390x" src="thunderbird-128.7.0-1.el9_5.alma.1.src.rpm">
          <filename>thunderbird-128.7.0-1.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">c1557d75c993afe170f13769121b79a6d9c757d850ba66053017d8d3aca32dd9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11849</id>
    <title>Important: unbound security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-28 14:51:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: Unbound Cache poisoning (CVE-2025-5994)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11849" id="RHSA-2025:11849" type="rhsa" title="RHSA-2025:11849"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5994" id="CVE-2025-5994" type="cve" title="CVE-2025-5994"/>
      <reference href="https://bugzilla.redhat.com/2380949" id="2380949" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11849.html" id="ALSA-2025:11849" type="self" title="ALSA-2025:11849"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="unbound" version="1.16.2" release="19.el9_6.1" epoch="0" arch="s390x" src="unbound-1.16.2-19.el9_6.1.src.rpm">
          <filename>unbound-1.16.2-19.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">6bb2eb337773e06e7de78109d15ffd7bea4a8becacbde7d484eed38e1c32af57</sum>
        </package>
        <package name="unbound-dracut" version="1.16.2" release="19.el9_6.1" epoch="0" arch="s390x" src="unbound-1.16.2-19.el9_6.1.src.rpm">
          <filename>unbound-dracut-1.16.2-19.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">af706996673b3da3f0202eaa739503988d5e80006af6e23c2c41aadad0833c6c</sum>
        </package>
        <package name="unbound-libs" version="1.16.2" release="19.el9_6.1" epoch="0" arch="s390x" src="unbound-1.16.2-19.el9_6.1.src.rpm">
          <filename>unbound-libs-1.16.2-19.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">bf848d95b4b489d0a95f502f658ca22a22d25efbcb61de937b5a70be82deec09</sum>
        </package>
        <package name="python3-unbound" version="1.16.2" release="19.el9_6.1" epoch="0" arch="s390x" src="unbound-1.16.2-19.el9_6.1.src.rpm">
          <filename>python3-unbound-1.16.2-19.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">d08c843facd4dd95de8f3cff380655fddab4b30cb51f6a798c0c88f0e84b86ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11861</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-31 22:26:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)
  * kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905)
  * kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091)
  * kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121)
  * kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113)
  * kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085)
  * kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)
  * kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958)
  * kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086)
  * kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11861" id="RHSA-2025:11861" type="rhsa" title="RHSA-2025:11861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57980" id="CVE-2024-57980" type="cve" title="CVE-2024-57980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21905" id="CVE-2025-21905" type="cve" title="CVE-2025-21905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22085" id="CVE-2025-22085" type="cve" title="CVE-2025-22085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22091" id="CVE-2025-22091" type="cve" title="CVE-2025-22091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22113" id="CVE-2025-22113" type="cve" title="CVE-2025-22113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22121" id="CVE-2025-22121" type="cve" title="CVE-2025-22121"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37797" id="CVE-2025-37797" type="cve" title="CVE-2025-37797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37958" id="CVE-2025-37958" type="cve" title="CVE-2025-37958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38086" id="CVE-2025-38086" type="cve" title="CVE-2025-38086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38110" id="CVE-2025-38110" type="cve" title="CVE-2025-38110"/>
      <reference href="https://bugzilla.redhat.com/2348599" id="2348599" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356613" id="2356613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360186" id="2360186" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360199" id="2360199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360212" id="2360212" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360219" id="2360219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363672" id="2363672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367572" id="2367572" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375305" id="2375305" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376035" id="2376035" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11861.html" id="ALSA-2025:11861" type="self" title="ALSA-2025:11861"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3-perf" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.30.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0742b70053a9af8478e9b431e67bba97144a03113a6f7c9161226b986358aa80</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.30.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0b0deef72964a4e15c5e290503cb0521b70721033c64d2cb3ba92c5919fa0500</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.30.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">17e5dec3cd623fdb11b885a094c4fb63be4ce0cfb20fe8ffc697920b19cc2d01</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.30.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5250c0f8150d65b4e7a169bcb499171329c3c12d8445e1502601afef2d5d36e9</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.30.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">6e99fc15c0ab4ec6780d0161e75729412226e8a4394d1dad4a1e1850818d751e</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.30.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">9de0149a853b8c1c73ac85378d2d269a8e93cbe5fb334ec35ca08edd291df4d0</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.30.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">9e60ede76a018e4c31d6a3c880d566d0f9e93db990dcd5c020fc0e9e76e039c3</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.30.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">a5dff664f5e93b8d89c791087629044ca46f28380fd903f5365e969f6c07d6f5</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.30.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">b11138b11037c035737b41a3f2217628be17494213397f4894a38bc0b623e74b</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.30.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">b47c625b4fdb452e4cb0ba8c691032b642eeee2b15ac186cc34a786b74af57f1</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.30.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e2417b33aaab0d86017b6eb2575052379a836846901af81e83caed7ac93964c8</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.30.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f64d7a249002145e7d988349a37db3d0427ec03985a7af58ebd5e307a47efd2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11992</id>
    <title>Important: sqlite security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-29 09:25:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.  

Security Fix(es):  

  * sqlite: Integer Truncation in SQLite (CVE-2025-6965)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11992" id="RHSA-2025:11992" type="rhsa" title="RHSA-2025:11992"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6965" id="CVE-2025-6965" type="cve" title="CVE-2025-6965"/>
      <reference href="https://bugzilla.redhat.com/2380149" id="2380149" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11992.html" id="ALSA-2025:11992" type="self" title="ALSA-2025:11992"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="sqlite" version="3.34.1" release="8.el9_6" epoch="0" arch="s390x" src="sqlite-3.34.1-8.el9_6.src.rpm">
          <filename>sqlite-3.34.1-8.el9_6.s390x.rpm</filename>
          <sum type="sha256">a35dd49c8c3046c5fdc1b0bb89962b0c6a560b4d3a0aa39c584fb314296c0aa1</sum>
        </package>
        <package name="sqlite-devel" version="3.34.1" release="8.el9_6" epoch="0" arch="s390x" src="sqlite-3.34.1-8.el9_6.src.rpm">
          <filename>sqlite-devel-3.34.1-8.el9_6.s390x.rpm</filename>
          <sum type="sha256">ff923d47d7e3ea90fa5c986898a8a6bbb6cde752b5015df588141c60ec7fbb28</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12008</id>
    <title>Important: redis:7 security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-29 10:55:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis:7 security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: Redis Stack Buffer Overflow (CVE-2025-27151)
  * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)
  * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12008" id="RHSA-2025:12008" type="rhsa" title="RHSA-2025:12008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27151" id="CVE-2025-27151" type="cve" title="CVE-2025-27151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32023" id="CVE-2025-32023" type="cve" title="CVE-2025-32023"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48367" id="CVE-2025-48367" type="cve" title="CVE-2025-48367"/>
      <reference href="https://bugzilla.redhat.com/2369153" id="2369153" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12008.html" id="ALSA-2025:12008" type="self" title="ALSA-2025:12008"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <module name="redis" stream="7" version="9060020250729092450" context="8cf767d6" arch="s390x"/>
        <package name="redis" version="7.2.10" release="1.module_el9.6.0+173+efaf9205" epoch="0" arch="s390x" src="redis-7.2.10-1.module_el9.6.0+173+efaf9205.src.rpm">
          <filename>redis-7.2.10-1.module_el9.6.0+173+efaf9205.s390x.rpm</filename>
          <sum type="sha256">053c9c45b4718e749f5675759e4c27e811e46b0ff241df4d5b1681dbab95555f</sum>
        </package>
        <package name="redis-devel" version="7.2.10" release="1.module_el9.6.0+173+efaf9205" epoch="0" arch="s390x" src="redis-7.2.10-1.module_el9.6.0+173+efaf9205.src.rpm">
          <filename>redis-devel-7.2.10-1.module_el9.6.0+173+efaf9205.s390x.rpm</filename>
          <sum type="sha256">14820149f8c423f3c82877170e32ccc0bba4ab657b1133873dce2f5a19f288f5</sum>
        </package>
        <package name="redis-doc" version="7.2.10" release="1.module_el9.6.0+173+efaf9205" epoch="0" arch="noarch" src="redis-7.2.10-1.module_el9.6.0+173+efaf9205.src.rpm">
          <filename>redis-doc-7.2.10-1.module_el9.6.0+173+efaf9205.noarch.rpm</filename>
          <sum type="sha256">d9641067b51be2618121118a90f958ee05b5100f3e7b13973432c4ab7160cdb0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12083</id>
    <title>Moderate: icu security update</title>
    <issued date="2025-07-29 00:00:00"/>
    <updated date="2025-07-30 08:16:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>icu security update</summary>
    <description>The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.  

Security Fix(es):  

  * icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12083" id="RHSA-2025:12083" type="rhsa" title="RHSA-2025:12083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5222" id="CVE-2025-5222" type="cve" title="CVE-2025-5222"/>
      <reference href="https://bugzilla.redhat.com/2368600" id="2368600" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12083.html" id="ALSA-2025:12083" type="self" title="ALSA-2025:12083"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libicu-devel" version="67.1" release="10.el9_6" epoch="0" arch="s390x" src="icu-67.1-10.el9_6.src.rpm">
          <filename>libicu-devel-67.1-10.el9_6.s390x.rpm</filename>
          <sum type="sha256">ce34aebbebb834f54d50d6e30fbc2cd7c4971d3da8721778101b1cd680db491f</sum>
        </package>
        <package name="icu" version="67.1" release="10.el9_6" epoch="0" arch="s390x" src="icu-67.1-10.el9_6.src.rpm">
          <filename>icu-67.1-10.el9_6.s390x.rpm</filename>
          <sum type="sha256">d2561d197fb98623480afb9c65818c1477c09d32df922487faf8d9154679d735</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1210</id>
    <title>Moderate: tbb security update</title>
    <issued date="2025-02-10 00:00:00"/>
    <updated date="2025-02-10 16:55:32"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tbb security update</summary>
    <description>Threading Building Blocks (TBB) is a C++ runtime library that abstracts the low-level threading details necessary for optimal multi-core performance.   

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1210" id="RHSA-2025:1210" type="rhsa" title="RHSA-2025:1210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1210.html" id="ALSA-2025:1210" type="self" title="ALSA-2025:1210"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="tbb" version="2020.3" release="8.el9_5.1" epoch="0" arch="s390x" src="tbb-2020.3-8.el9_5.1.src.rpm">
          <filename>tbb-2020.3-8.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">4a6f91bf68ef4ce7c65dafe1647249851b420a65092903c56ba391f37e55d037</sum>
        </package>
        <package name="tbb-doc" version="2020.3" release="8.el9_5.1" epoch="0" arch="s390x" src="tbb-2020.3-8.el9_5.1.src.rpm">
          <filename>tbb-doc-2020.3-8.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">990856224174deff9241a396d8c29b9068cce57dc7c00e70b8114324601a692a</sum>
        </package>
        <package name="python3-tbb" version="2020.3" release="8.el9_5.1" epoch="0" arch="s390x" src="tbb-2020.3-8.el9_5.1.src.rpm">
          <filename>python3-tbb-2020.3-8.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">cf06c92f7b8dadb24a169370f63bedd854becf07eb1884472999c67971f432cb</sum>
        </package>
        <package name="tbb-devel" version="2020.3" release="8.el9_5.1" epoch="0" arch="s390x" src="tbb-2020.3-8.el9_5.1.src.rpm">
          <filename>tbb-devel-2020.3-8.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">d6f826bfa4bd41a169327ca532d49f56812c1ab3a6b9d159b40979b0c280a853</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12100</id>
    <title>Moderate: libtpms security update</title>
    <issued date="2025-07-29 00:00:00"/>
    <updated date="2025-07-30 09:49:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtpms security update</summary>
    <description>The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines.  

Security Fix(es):  

  * libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12100" id="RHSA-2025:12100" type="rhsa" title="RHSA-2025:12100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49133" id="CVE-2025-49133" type="cve" title="CVE-2025-49133"/>
      <reference href="https://bugzilla.redhat.com/2371585" id="2371585" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12100.html" id="ALSA-2025:12100" type="self" title="ALSA-2025:12100"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libtpms" version="0.9.1" release="5.20211126git1ff6fe1f43.el9_6" epoch="0" arch="s390x" src="libtpms-0.9.1-5.20211126git1ff6fe1f43.el9_6.src.rpm">
          <filename>libtpms-0.9.1-5.20211126git1ff6fe1f43.el9_6.s390x.rpm</filename>
          <sum type="sha256">4cbc29178533f0197bcf851dc234a27dadb1d82ddb927054e28141e67ad57f6a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12187</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-07-29 00:00:00"/>
    <updated date="2025-07-30 13:57:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Large branch table could lead to truncated instruction (CVE-2025-8028)
  * firefox: thunderbird: Memory safety bugs (CVE-2025-8035)
  * firefox: thunderbird: Incorrect URL stripping in CSP reports (CVE-2025-8031)
  * firefox: thunderbird: JavaScript engine only wrote partial return value to stack (CVE-2025-8027)
  * firefox: thunderbird: Potential user-assisted code execution in ?Copy as cURL? command (CVE-2025-8030)
  * firefox: Memory safety bugs (CVE-2025-8034)
  * firefox: thunderbird: Incorrect JavaScript state machine for generators (CVE-2025-8033)
  * firefox: thunderbird: XSLT documents could bypass CSP (CVE-2025-8032)
  * firefox: thunderbird: javascript: URLs executed on object and embed tags (CVE-2025-8029)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12187" id="RHSA-2025:12187" type="rhsa" title="RHSA-2025:12187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8027" id="CVE-2025-8027" type="cve" title="CVE-2025-8027"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8028" id="CVE-2025-8028" type="cve" title="CVE-2025-8028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8029" id="CVE-2025-8029" type="cve" title="CVE-2025-8029"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8030" id="CVE-2025-8030" type="cve" title="CVE-2025-8030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8031" id="CVE-2025-8031" type="cve" title="CVE-2025-8031"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8032" id="CVE-2025-8032" type="cve" title="CVE-2025-8032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8033" id="CVE-2025-8033" type="cve" title="CVE-2025-8033"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8034" id="CVE-2025-8034" type="cve" title="CVE-2025-8034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8035" id="CVE-2025-8035" type="cve" title="CVE-2025-8035"/>
      <reference href="https://bugzilla.redhat.com/2382701" id="2382701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382703" id="2382703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382704" id="2382704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382707" id="2382707" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382710" id="2382710" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382711" id="2382711" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382717" id="2382717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382718" id="2382718" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382720" id="2382720" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12187.html" id="ALSA-2025:12187" type="self" title="ALSA-2025:12187"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="thunderbird" version="128.13.0" release="3.el9_6.alma.1" epoch="0" arch="s390x" src="thunderbird-128.13.0-3.el9_6.alma.1.src.rpm">
          <filename>thunderbird-128.13.0-3.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">6c9cc36e4c28a06e2b3255895b4a4e02bbee098bf8c2a706c6d945443c9d36cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12280</id>
    <title>Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update</title>
    <issued date="2025-07-30 00:00:00"/>
    <updated date="2025-08-09 13:24:26"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update</summary>
    <description>Core part of Jackson that defines Streaming API as well as basic shared abstractions.  

Security Fix(es):  

  * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12280" id="RHSA-2025:12280" type="rhsa" title="RHSA-2025:12280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52999" id="CVE-2025-52999" type="cve" title="CVE-2025-52999"/>
      <reference href="https://bugzilla.redhat.com/2374804" id="2374804" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12280.html" id="ALSA-2025:12280" type="self" title="ALSA-2025:12280"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="pki-jackson-annotations" version="2.19.1" release="1.el9_6" epoch="0" arch="noarch" src="jackson-annotations-2.19.1-1.el9_6.src.rpm">
          <filename>pki-jackson-annotations-2.19.1-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">004448294b369b31bb70d2f1e1feb823f92d7f5785b7e2bea5ae9f40f7a2b51b</sum>
        </package>
        <package name="pki-jackson-core" version="2.19.1" release="1.el9_6" epoch="0" arch="noarch" src="jackson-core-2.19.1-1.el9_6.src.rpm">
          <filename>pki-jackson-core-2.19.1-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">243f145c8799fb698a266151b9c7aafe94c83a343cc44f0da497d0028d623cc7</sum>
        </package>
        <package name="pki-jackson-jaxrs-json-provider" version="2.19.1" release="1.el9_6" epoch="0" arch="noarch" src="jackson-jaxrs-providers-2.19.1-1.el9_6.src.rpm">
          <filename>pki-jackson-jaxrs-json-provider-2.19.1-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">464fb4c458c52ac48d297423964b79899f7ed89c6ba69f09d68c34f371406a27</sum>
        </package>
        <package name="pki-jackson-jaxrs-providers" version="2.19.1" release="1.el9_6" epoch="0" arch="noarch" src="jackson-jaxrs-providers-2.19.1-1.el9_6.src.rpm">
          <filename>pki-jackson-jaxrs-providers-2.19.1-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">8806f6149c80621f8eaba5fc00c5d97334c3074990a4d88ef90135644aa1e641</sum>
        </package>
        <package name="pki-jackson-databind" version="2.19.1" release="1.el9_6" epoch="0" arch="noarch" src="jackson-databind-2.19.1-1.el9_6.src.rpm">
          <filename>pki-jackson-databind-2.19.1-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">ac248e7a3dadbddc93574e6d812179b061f20c0a2a7d211248ba14673f685d29</sum>
        </package>
        <package name="pki-jackson-module-jaxb-annotations" version="2.19.1" release="1.el9_6" epoch="0" arch="noarch" src="jackson-modules-base-2.19.1-1.el9_6.src.rpm">
          <filename>pki-jackson-module-jaxb-annotations-2.19.1-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">d6883c249a98e8768aeeafee063b37a5705fdfcc8bfaba3d26ccd42615970b2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12447</id>
    <title>Important: libxml2 security update</title>
    <issued date="2025-07-31 00:00:00"/>
    <updated date="2025-08-01 13:39:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12447" id="RHSA-2025:12447" type="rhsa" title="RHSA-2025:12447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7425" id="CVE-2025-7425" type="cve" title="CVE-2025-7425"/>
      <reference href="https://bugzilla.redhat.com/2379274" id="2379274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12447.html" id="ALSA-2025:12447" type="self" title="ALSA-2025:12447"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libxml2-devel" version="2.9.13" release="11.el9_6" epoch="0" arch="s390x" src="libxml2-2.9.13-11.el9_6.src.rpm">
          <filename>libxml2-devel-2.9.13-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">64f699dc8be76b8d201d91618849c5262c03515568e921b0b24d8b3662be8b2d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12519</id>
    <title>Moderate: python-requests security update</title>
    <issued date="2025-08-04 00:00:00"/>
    <updated date="2025-08-04 12:47:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-requests security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12519" id="RHSA-2025:12519" type="rhsa" title="RHSA-2025:12519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47081" id="CVE-2024-47081" type="cve" title="CVE-2024-47081"/>
      <reference href="https://bugzilla.redhat.com/2371272" id="2371272" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12519.html" id="ALSA-2025:12519" type="self" title="ALSA-2025:12519"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3-requests+socks" version="2.25.1" release="10.el9_6" epoch="0" arch="noarch" src="python-requests-2.25.1-10.el9_6.src.rpm">
          <filename>python3-requests+socks-2.25.1-10.el9_6.noarch.rpm</filename>
          <sum type="sha256">29a6c050749e8e45500e9319c24a916f761b5c952abd8a222671c049d77c92e8</sum>
        </package>
        <package name="python3-requests+security" version="2.25.1" release="10.el9_6" epoch="0" arch="noarch" src="python-requests-2.25.1-10.el9_6.src.rpm">
          <filename>python3-requests+security-2.25.1-10.el9_6.noarch.rpm</filename>
          <sum type="sha256">5ce5843872b15a95ca2b6b6f40658941b22f0db0b36fdef207fbd9f139762d45</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1262</id>
    <title>Important: kernel security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-13 16:31:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1262" id="RHSA-2025:1262" type="rhsa" title="RHSA-2025:1262"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53104" id="CVE-2024-53104" type="cve" title="CVE-2024-53104"/>
      <reference href="https://bugzilla.redhat.com/2329817" id="2329817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1262.html" id="ALSA-2025:1262" type="self" title="ALSA-2025:1262"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-503.23.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">25e340894e49b6bbada1aa031fdaa043f95739a9d74da718010bd97b80127afc</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-devel-matched-5.14.0-503.23.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">4881d6520add662ec983dc86da37852d47d7a6b1ca653e303988c69ea9c7f6f7</sum>
        </package>
        <package name="rv" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>rv-5.14.0-503.23.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">50dba6de1e48fa1f70fa3428990c0a8558ba7ec2cc3c1b2c2da05a263397076d</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-503.23.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">52257ccfb8379c6a9a9484fabe3cfb8f3b60005fb355035cf1209f9aca536b36</sum>
        </package>
        <package name="perf" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>perf-5.14.0-503.23.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">5edfeea191ea86ead070560c2936b1c9596e98bb624fe5a7295b813a3a9f3866</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-devel-5.14.0-503.23.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">957a1a3893b208579141c219e1d795bac6d0f7db3f1ef4fdf6ddb9a88b326e48</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-doc-5.14.0-503.23.2.el9_5.noarch.rpm</filename>
          <sum type="sha256">ad343e2e5557a6d549fc41ab4b55f553a5ce6217f46a75402424afb90812e392</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-503.23.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">b5fce3461b876ee23e28a2eb29715d572c9e328ce7701d3a9969910b6b2748ab</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-headers-5.14.0-503.23.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">d7a9576cb71eee2ce110b819167387291523fee5ac8d0074cba2abefb589df51</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-debug-devel-5.14.0-503.23.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">e3c0806228db5819cf211b5d9852706d3f29456587b8aab61032b0e6f4e85958</sum>
        </package>
        <package name="rtla" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>rtla-5.14.0-503.23.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">ec81bc3eca46165612598a297e961f2c04bfb3a5fc9c1411f8db1227faa43514</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12746</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-04 00:00:00"/>
    <updated date="2025-08-07 11:25:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
  * kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928)
  * kernel: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CVE-2025-21929)
  * kernel: cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962)
  * kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020)
  * kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788)
  * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)
  * kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052)
  * kernel: net/sched: fix use-after-free in taprio_dev_notifier (CVE-2025-38087)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12746" id="RHSA-2025:12746" type="rhsa" title="RHSA-2025:12746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49788" id="CVE-2022-49788" type="cve" title="CVE-2022-49788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21727" id="CVE-2025-21727" type="cve" title="CVE-2025-21727"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21928" id="CVE-2025-21928" type="cve" title="CVE-2025-21928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21929" id="CVE-2025-21929" type="cve" title="CVE-2025-21929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21962" id="CVE-2025-21962" type="cve" title="CVE-2025-21962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22020" id="CVE-2025-22020" type="cve" title="CVE-2025-22020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37890" id="CVE-2025-37890" type="cve" title="CVE-2025-37890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38052" id="CVE-2025-38052" type="cve" title="CVE-2025-38052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38087" id="CVE-2025-38087" type="cve" title="CVE-2025-38087"/>
      <reference href="https://bugzilla.redhat.com/2348516" id="2348516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356592" id="2356592" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356594" id="2356594" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356624" id="2356624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360099" id="2360099" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363378" id="2363378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366848" id="2366848" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373380" id="2373380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375531" id="2375531" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12746.html" id="ALSA-2025:12746" type="self" title="ALSA-2025:12746"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-debug-devel" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.32.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">152789529965e8658cd5e9358cb0c6829209c301e5a43b7918991af78eb026d8</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.32.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">188a599f3b9dcd313c11cc5e7329aa40c9078144c79f3b6a7be334d175bbc647</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.32.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1b5b6385b2b7a5352d7f85535fde5ad591ee2b737b8269da3ab685e556671868</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.32.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">446d51329150743943a089d5657dcc9a011f11f314190c025b7cdb4f53e0fe25</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.32.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">681c2d45dc389f01321ba5cf0cdd022deed3e01df00fbd0bdfdbf65c56b64e34</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.32.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">88d1ad998eec2bf0994181df0f5dbf20b3fbeeb784eb2298a4e66235f8acab3c</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.32.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">937cd0665bb26b839dbc4ad736950a87327fd4c4287735410ef40364e4499802</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.32.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">a3731ea34ecb4c46253b616bc34c0eec6ca064c88012c16301490d423259e88c</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.32.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">be90ffb8467c05cd0d98fc1925b88ed214528fad74c046c7a69eb7197455371a</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.32.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d0548fdb09eae98e4d2b46af07c857f251a5bc678d94fccfd733a1c6e3678e3b</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.32.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e45d6fe44c5fcf06c0a5efb2509dc53a0312704901f68e76f40842edeca66256</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.32.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ef2c4f170e70d04bac1c7ecf7a49906053ba6d0ec781332eabafad3635dc8a60</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12831</id>
    <title>Moderate: opentelemetry-collector security update</title>
    <issued date="2025-08-05 00:00:00"/>
    <updated date="2025-08-07 10:26:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opentelemetry-collector security update</summary>
    <description>Collector with the supported components for a AlmaLinux build of OpenTelemetry  

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12831" id="RHSA-2025:12831" type="rhsa" title="RHSA-2025:12831"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12831.html" id="ALSA-2025:12831" type="self" title="ALSA-2025:12831"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="opentelemetry-collector" version="0.127.0" release="1.el9_6" epoch="0" arch="s390x" src="opentelemetry-collector-0.127.0-1.el9_6.src.rpm">
          <filename>opentelemetry-collector-0.127.0-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5a18773f5bfa612f98378cdacd514db449c0b844960e24e649061eb01f088841</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12834</id>
    <title>Moderate: python3.12-setuptools security update</title>
    <issued date="2025-08-05 00:00:00"/>
    <updated date="2025-08-06 05:36:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12-setuptools security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12834" id="RHSA-2025:12834" type="rhsa" title="RHSA-2025:12834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12834.html" id="ALSA-2025:12834" type="self" title="ALSA-2025:12834"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3.12-setuptools" version="68.2.2" release="5.el9_6" epoch="0" arch="noarch" src="python3.12-setuptools-68.2.2-5.el9_6.src.rpm">
          <filename>python3.12-setuptools-68.2.2-5.el9_6.noarch.rpm</filename>
          <sum type="sha256">a79161142b7cad19b3935433516c3b92ab60a0fa44916bc0de99529e80ff1785</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1300</id>
    <title>Moderate: gcc-toolset-14-gcc security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-13 16:34:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc-toolset-14-gcc security update</summary>
    <description>The gcc-toolset-14-gcc13 package contains the GNU Compiler Collection version 14.  

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1300" id="RHSA-2025:1300" type="rhsa" title="RHSA-2025:1300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1300.html" id="ALSA-2025:1300" type="self" title="ALSA-2025:1300"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="liblsan" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>liblsan-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">17f207a879ef147dbcf3027f42d3e4a1916f16e0548dd4165c87952284cfddd1</sum>
        </package>
        <package name="gcc-toolset-14-gcc-plugin-devel" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-gcc-plugin-devel-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">25f6df62ddabcc7a4f768fcf638ebcce0908dd3504027cfd10f8553ec99a54c1</sum>
        </package>
        <package name="gcc-toolset-14-libgccjit-devel" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-libgccjit-devel-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">282c086716e4b94f4261208b92a9bc17401310def2865a9a36c1fb96f5d9169a</sum>
        </package>
        <package name="gcc-toolset-14-libtsan-devel" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-libtsan-devel-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">451ebb6e599252aea68659feea85a35271408a8a288db3775ecfafc706ca5fa3</sum>
        </package>
        <package name="gcc-toolset-14-libubsan-devel" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-libubsan-devel-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">50fa3bad244c531f23e8189f2268cfe0b579dd9f2001214a960d210641fc144e</sum>
        </package>
        <package name="gcc-toolset-14-libasan-devel" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-libasan-devel-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">527f76fbc781b2c1c5e94fd1eedea781cdfe9c3bee7ffe8e5c3fb4de79a70355</sum>
        </package>
        <package name="gcc-toolset-14-gcc-gfortran" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-gcc-gfortran-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">5461494b5bec2cc300f092fde7b7f712d5158599c74a68a34d95bf18270e3768</sum>
        </package>
        <package name="gcc-toolset-14-libatomic-devel" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-libatomic-devel-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">5c9a060832f74f30000b745bc5d8bc142262ba7b7a463148942ea8d4214a9f3b</sum>
        </package>
        <package name="libtsan2" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>libtsan2-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">7cdd0c73afcbae3ebfa5ba31ecc57079b8a05bc1578dd24cc8aa93b62394d62a</sum>
        </package>
        <package name="libasan8" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>libasan8-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">83c3f50cbefda3f90e9e7232573f726e985b1e0c145e7241b5973c364f829217</sum>
        </package>
        <package name="gcc-toolset-14-liblsan-devel" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-liblsan-devel-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">a06a79fa55ecbf404c1a1c1c0807b89705176aa02ee3e8085d88abe0d1910d3b</sum>
        </package>
        <package name="gcc-toolset-14-gcc" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-gcc-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">a07cc51e2b6a0b69540c7ca757c92f67254405126b0b8634afa88f8c02ab106e</sum>
        </package>
        <package name="gcc-toolset-14-libstdc++-docs" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-libstdc++-docs-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">a0b63e3cdf38229f2bdb4883f62895b24d4da18faaf1e59cc967c9d378aeda13</sum>
        </package>
        <package name="gcc-toolset-14-libstdc++-devel" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-libstdc++-devel-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">b85287afa983178da6e98ec21084a06ddbbe89bc265ee06f0d2b71a71639214e</sum>
        </package>
        <package name="gcc-toolset-14-gcc-plugin-annobin" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-gcc-plugin-annobin-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">c070cc42ff8c554eb87f7327d7b42e131deb63acebbe5cf799e21be35c657c17</sum>
        </package>
        <package name="gcc-toolset-14-libitm-devel" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-libitm-devel-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">c8dc3025c8814ed9d80fbc8b6603211c60b21e406ba79d18e4949cf020b1fd07</sum>
        </package>
        <package name="gcc-toolset-14-libgccjit" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-libgccjit-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">ecc2c25b4e191f8cd30f2609d617f0181eeb911bf182ff038bcdc9751ce1db35</sum>
        </package>
        <package name="gcc-toolset-14-gcc-c++" version="14.2.1" release="1.3.el9_5" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-1.3.el9_5.src.rpm">
          <filename>gcc-toolset-14-gcc-c++-14.2.1-1.3.el9_5.s390x.rpm</filename>
          <sum type="sha256">ee1699c0896222f235e9e3a4d1d2074955a76944306c6d967df539f4e9ef1278</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1309</id>
    <title>Moderate: gcc-toolset-13-gcc security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-13 11:25:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc-toolset-13-gcc security update</summary>
    <description>The gcc-toolset-13-gcc13 package contains the GNU Compiler Collection version 13.  

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1309" id="RHSA-2025:1309" type="rhsa" title="RHSA-2025:1309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1309.html" id="ALSA-2025:1309" type="self" title="ALSA-2025:1309"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="liblsan" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>liblsan-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">00e546cff3f907c4a57ab5b63398760c206709d0eb388eb2b190f523be178c61</sum>
        </package>
        <package name="gcc-toolset-13-libstdc++-docs" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-libstdc++-docs-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">213b4fed54c059d2bf1e990d836977fbf6d5c02f922b0d8401780109eedad322</sum>
        </package>
        <package name="gcc-toolset-13-libgccjit-devel" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-libgccjit-devel-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">30830e1c08fcb64eda89293cff84244711e633af4b449b77a2ef627988cb1fdc</sum>
        </package>
        <package name="gcc-toolset-13-libitm-devel" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-libitm-devel-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">3105c5ce57ea9fbd01eac68d941b7b947768bb0e6b42eb55215cf88ef5bc661f</sum>
        </package>
        <package name="gcc-toolset-13-libgccjit" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-libgccjit-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">4950be66d00e747e2b29090dc7308b6b3e03a10deb8770639dc0deaaaf9ab515</sum>
        </package>
        <package name="gcc-toolset-13-gcc-plugin-annobin" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-gcc-plugin-annobin-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">4d3529586256c8d6b857e3e5ca71a469dcee10ff0e674c691ea0b837aeebf986</sum>
        </package>
        <package name="gcc-toolset-13-libasan-devel" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-libasan-devel-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">60f7024e6841c606df8f9eed73da76bb6297ef81eecd9fccacbc8db0b1a4a89e</sum>
        </package>
        <package name="gcc-toolset-13-liblsan-devel" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-liblsan-devel-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">88028952bddbf5a0a7b69ba2b4368994ba5b9eb97eb867f0bdc4fe285f1a5803</sum>
        </package>
        <package name="gcc-toolset-13-libatomic-devel" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-libatomic-devel-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">8eea4742a784c8c8bf44b620715f2baece6806261ffc71311072b01b313e9664</sum>
        </package>
        <package name="gcc-toolset-13-gcc-gfortran" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-gcc-gfortran-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">99ae018207614680ef2a746423678329b7950b60266d95cf6479653a60da6913</sum>
        </package>
        <package name="gcc-toolset-13-libubsan-devel" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-libubsan-devel-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">a45a6aefd34aa5b2c145a6b884983e7a97b31ca2d957541f271ab95d18fbe6e8</sum>
        </package>
        <package name="gcc-toolset-13-gcc" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-gcc-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">bbaa043cc1dc3a45d3bf71a4b975b5d96376bfbe23750f332f1bfbad05621a65</sum>
        </package>
        <package name="gcc-toolset-13-gcc-plugin-devel" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-gcc-plugin-devel-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">c26159fecf7308ef28300d55f99990f7a36fd779c6d469e6fbe9b8099bf566f4</sum>
        </package>
        <package name="libasan8" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>libasan8-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">c4bd81e076ad638f724bf6372b6fa57109488943b5c86edb335ff40d6478fbe5</sum>
        </package>
        <package name="gcc-toolset-13-libtsan-devel" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-libtsan-devel-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">cb91312ca431b8853598947f3f293325b2ca94c800daac4f3349324c59508930</sum>
        </package>
        <package name="gcc-toolset-13-gcc-c++" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-gcc-c++-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">cf2f552ade3e0164e6b88d42707484eb426f9d4753288bdecc4cb399dd09df9d</sum>
        </package>
        <package name="libtsan2" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>libtsan2-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">e005de35869f5d3211eb07e57354b8e78af9bf32095d5943d6ea942aaa7aa306</sum>
        </package>
        <package name="gcc-toolset-13-libstdc++-devel" version="13.3.1" release="2.2.el9_5" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el9_5.src.rpm">
          <filename>gcc-toolset-13-libstdc++-devel-13.3.1-2.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">f9526bf18f3e95c15abb97361cf9a472023ff19cdb9c28dd424644798e0fb540</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1330</id>
    <title>Important: openssl security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-12 17:22:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1330" id="RHSA-2025:1330" type="rhsa" title="RHSA-2025:1330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12797" id="CVE-2024-12797" type="cve" title="CVE-2024-12797"/>
      <reference href="https://bugzilla.redhat.com/2342757" id="2342757" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1330.html" id="ALSA-2025:1330" type="self" title="ALSA-2025:1330"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="openssl-devel" version="3.2.2" release="6.el9_5.1" epoch="1" arch="s390x" src="openssl-3.2.2-6.el9_5.1.src.rpm">
          <filename>openssl-devel-3.2.2-6.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">3e04c3b680ff806df582cf4e20f3d79ec14faad7a9fb4d59684e4cf6e8cecee6</sum>
        </package>
        <package name="openssl-perl" version="3.2.2" release="6.el9_5.1" epoch="1" arch="s390x" src="openssl-3.2.2-6.el9_5.1.src.rpm">
          <filename>openssl-perl-3.2.2-6.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">dcf2add9a8c0502f4566120c274d81af77df0b636b5a6a18432c0e643157fb48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13428</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2025-08-07 00:00:00"/>
    <updated date="2025-08-07 21:44:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

The libxml2 library is a development toolbox providing the implementation of various XML standards.  

The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)


The libxml2 library is a development toolbox providing the implementation of various XML standards.  

The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

The libxml2 library is a development toolbox providing the implementation of various XML standards.  

The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)
  * libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13428" id="RHSA-2025:13428" type="rhsa" title="RHSA-2025:13428"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32414" id="CVE-2025-32414" type="cve" title="CVE-2025-32414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32415" id="CVE-2025-32415" type="cve" title="CVE-2025-32415"/>
      <reference href="https://bugzilla.redhat.com/2358121" id="2358121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360768" id="2360768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13428.html" id="ALSA-2025:13428" type="self" title="ALSA-2025:13428"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libxml2-devel" version="2.9.13" release="12.el9_6" epoch="0" arch="s390x" src="libxml2-2.9.13-12.el9_6.src.rpm">
          <filename>libxml2-devel-2.9.13-12.el9_6.s390x.rpm</filename>
          <sum type="sha256">72c6e4afb48438b6f4801c9ed88da92b0ca08658fb70db1cf4e0e680bc391ae5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1346</id>
    <title>Moderate: gcc security update</title>
    <issued date="2025-02-12 00:00:00"/>
    <updated date="2025-02-14 07:49:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc security update</summary>
    <description>The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.  

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1346" id="RHSA-2025:1346" type="rhsa" title="RHSA-2025:1346"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1346.html" id="ALSA-2025:1346" type="self" title="ALSA-2025:1346"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="libstdc++-docs" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libstdc++-docs-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">03c0d7f9bc9a64d6438d1f212e58277dd0ee4aa7389d0a02306bcdc4b3fcb721</sum>
        </package>
        <package name="cpp" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>cpp-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">1f1ea37b27ec5778cf49a078a63000542ddcc6673b22f2133a1c6484ac0bc78d</sum>
        </package>
        <package name="libgccjit" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libgccjit-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">225f264fd5ee057e37ebc65c5ffcb1c66c0eb8598e8c7ba39b857d50a0c7e624</sum>
        </package>
        <package name="libstdc++-devel" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libstdc++-devel-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">50bbd076ffae7f9a05e2d3d2ec51872b2b790e864602f997c52f00196033374d</sum>
        </package>
        <package name="libasan" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libasan-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">60260e57b655f115513a2d5b92c9b586aa8e219b293133062e0a4dedde4bc454</sum>
        </package>
        <package name="libubsan" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libubsan-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">63ac7063bf1dc78c54218b322393bedb35bba64a74ab29f8a66a529aca9cb9b0</sum>
        </package>
        <package name="libitm-devel" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libitm-devel-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">6529ee5bd6f3411849f4ccd145ce1580ef2473fe321e9724f06ba86a34d80a87</sum>
        </package>
        <package name="gcc" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>gcc-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">a9b575cc22dee5c71548a8e8b912679a114c37c2e109b363eaacd7ea9a536870</sum>
        </package>
        <package name="libgccjit-devel" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libgccjit-devel-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">cd54a86f98973dc7c550e45916c429f27e5743d4033263bcd82df8d1a6f211bb</sum>
        </package>
        <package name="gcc-gfortran" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>gcc-gfortran-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">d2752003f4fc10d689d7094cb6ed03aced1aa78a63e9d1ea6dedae918e92bfa2</sum>
        </package>
        <package name="libitm" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libitm-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">e10ec8016c9d66d9fa0a08671345fc4a17901833361622b93c1d1e4392c40f23</sum>
        </package>
        <package name="gcc-c++" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>gcc-c++-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">ebc7d91701c95fd42105de5fd5ca1456607f37cf4715641a389f80624e9d9526</sum>
        </package>
        <package name="gcc-plugin-annobin" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>gcc-plugin-annobin-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">ecb06b3df1611a1ee312a871300d696c5e9558251bbbe308e4a19d6ba2df3f55</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1350</id>
    <title>Important: libxml2 security update</title>
    <issued date="2025-02-12 00:00:00"/>
    <updated date="2025-02-13 11:20:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml: use-after-free in xmlXIncludeAddNode (CVE-2022-49043)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1350" id="RHSA-2025:1350" type="rhsa" title="RHSA-2025:1350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49043" id="CVE-2022-49043" type="cve" title="CVE-2022-49043"/>
      <reference href="https://bugzilla.redhat.com/2342118" id="2342118" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1350.html" id="ALSA-2025:1350" type="self" title="ALSA-2025:1350"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="libxml2-devel" version="2.9.13" release="6.el9_5.1" epoch="0" arch="s390x" src="libxml2-2.9.13-6.el9_5.1.src.rpm">
          <filename>libxml2-devel-2.9.13-6.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">a7a6b1c21c0ed0e604514761dd568ef54dfd5958076b82f7087d75811c28d9e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13578</id>
    <title>Moderate: python3.11-setuptools security update</title>
    <issued date="2025-08-11 00:00:00"/>
    <updated date="2025-08-12 14:18:32"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-setuptools security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13578" id="RHSA-2025:13578" type="rhsa" title="RHSA-2025:13578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13578.html" id="ALSA-2025:13578" type="self" title="ALSA-2025:13578"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3.11-setuptools" version="65.5.1" release="4.el9_6" epoch="0" arch="noarch" src="python3.11-setuptools-65.5.1-4.el9_6.src.rpm">
          <filename>python3.11-setuptools-65.5.1-4.el9_6.noarch.rpm</filename>
          <sum type="sha256">3bbd1e54d2528438e395fb2c9d4fbabc0afd8867c15d7444f08cfa0a43addff9</sum>
        </package>
        <package name="python3.11-setuptools-wheel" version="65.5.1" release="4.el9_6" epoch="0" arch="noarch" src="python3.11-setuptools-65.5.1-4.el9_6.src.rpm">
          <filename>python3.11-setuptools-wheel-65.5.1-4.el9_6.noarch.rpm</filename>
          <sum type="sha256">c933e948175b386b2891bfa95f25574e3de4856e2ab60364f5c93a9cd5fa24a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13602</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-08-11 00:00:00"/>
    <updated date="2025-08-15 10:34:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)


The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)
  * kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13602" id="RHSA-2025:13602" type="rhsa" title="RHSA-2025:13602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38079" id="CVE-2025-38079" type="cve" title="CVE-2025-38079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38292" id="CVE-2025-38292" type="cve" title="CVE-2025-38292"/>
      <reference href="https://bugzilla.redhat.com/2373383" id="2373383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379219" id="2379219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13602.html" id="ALSA-2025:13602" type="self" title="ALSA-2025:13602"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-devel" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.33.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">2d906c63f5cc1c421ec77e268c6aaf8a68a1cfac91f64302e060f462016ab008</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.33.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">2d98c0e031dd921d3390b6a56e597fafce6967c0f944a08e1406d8de451a6f70</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.33.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">8e253f0ce2db6bac19270e7bad1c6b0c64dd2adfcd786c8844064d00895ca91a</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.33.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">930712ac2cc54f8df63ee22afcb3bedf49ca9eb51c34b318891c556caed40136</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>rv-5.14.0-570.33.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">abfe2e6cdf1f353c22c7cf53c7fd9c18419194cfbd82fde8e871b891ee0b516d</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.33.2.el9_6.noarch.rpm</filename>
          <sum type="sha256">b17d250deb8082ff6f32327acccb98c12e7a58db0dcd109fe4a249a6426f4773</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.33.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">bb60cf4fe9d5bc1e03c60bb9d38d0c9ba3dbfcaafcf2499250060978a339ae6c</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.33.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">c082143e8d12dcff817764aa7772b6f555b13316533ddeda98f924c2ac49850d</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.33.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">d4d6164a5388ce84fe166babbb25fe5210c3381ff3372271f0f9dbca0db5ba32</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.33.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">e4b7fb59fc0ac374b027c80e192d7256978bd78902d60a9852397c32f76c2042</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>perf-5.14.0-570.33.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">f6780a41b8fa160270bb224861d664004ac520332042da8288cd3728375a328b</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.33.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">fe1e77bd0abddc210de82c6cf18e956d058a0ff0745015ba926ef12095085208</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13673</id>
    <title>Important: toolbox security update</title>
    <issued date="2025-08-12 00:00:00"/>
    <updated date="2025-08-12 14:16:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>toolbox security update</summary>
    <description>Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI.  

Security Fix(es):  

  * nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit (CVE-2025-23266)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13673" id="RHSA-2025:13673" type="rhsa" title="RHSA-2025:13673"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23266" id="CVE-2025-23266" type="cve" title="CVE-2025-23266"/>
      <reference href="https://bugzilla.redhat.com/2381794" id="2381794" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13673.html" id="ALSA-2025:13673" type="self" title="ALSA-2025:13673"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="toolbox-tests" version="0.2" release="1.el9_6" epoch="0" arch="s390x" src="toolbox-0.2-1.el9_6.src.rpm">
          <filename>toolbox-tests-0.2-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">619a15aae701cb4a552722455c4311ec3ede193db555b2e10c6e8ec878ce02da</sum>
        </package>
        <package name="toolbox" version="0.2" release="1.el9_6" epoch="0" arch="s390x" src="toolbox-0.2-1.el9_6.src.rpm">
          <filename>toolbox-0.2-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ebc5b29df005ff73ac0306414158a257cc6faadd11fa1da4fb4ea7373d1f2791</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13782</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-08-13 00:00:00"/>
    <updated date="2025-08-14 13:27:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * angle: insufficient input validation can cause undefined behavior (CVE-2025-6558)
  * webkitgtk: A download?s origin may be incorrectly associated (CVE-2025-43240)
  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31273)
  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31278)
  * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-43211)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43212)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43216)
  * webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2025-43227)
  * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-43265)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13782" id="RHSA-2025:13782" type="rhsa" title="RHSA-2025:13782"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31273" id="CVE-2025-31273" type="cve" title="CVE-2025-31273"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31278" id="CVE-2025-31278" type="cve" title="CVE-2025-31278"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43211" id="CVE-2025-43211" type="cve" title="CVE-2025-43211"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43212" id="CVE-2025-43212" type="cve" title="CVE-2025-43212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43216" id="CVE-2025-43216" type="cve" title="CVE-2025-43216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43227" id="CVE-2025-43227" type="cve" title="CVE-2025-43227"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43240" id="CVE-2025-43240" type="cve" title="CVE-2025-43240"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43265" id="CVE-2025-43265" type="cve" title="CVE-2025-43265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6558" id="CVE-2025-6558" type="cve" title="CVE-2025-6558"/>
      <reference href="https://bugzilla.redhat.com/2380254" id="2380254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2384385" id="2384385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386268" id="2386268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386269" id="2386269" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386270" id="2386270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386271" id="2386271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386273" id="2386273" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386274" id="2386274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386276" id="2386276" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13782.html" id="ALSA-2025:13782" type="self" title="ALSA-2025:13782"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="webkit2gtk3-jsc-devel" version="2.48.5" release="1.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.48.5-1.el9_6.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.48.5-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4cd1899eb8d2f8836a266bb64f0ebd469155a0dded73a89b70966144427d5f57</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.48.5" release="1.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.48.5-1.el9_6.src.rpm">
          <filename>webkit2gtk3-jsc-2.48.5-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4f9856d0bc628647be817803604ad9de8b179dd2f2c19fd2fc45e78e7c05e101</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.48.5" release="1.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.48.5-1.el9_6.src.rpm">
          <filename>webkit2gtk3-devel-2.48.5-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c241b278a8a29eedce80272e361c38fd5206c5b7105fade8e8996604761a3aae</sum>
        </package>
        <package name="webkit2gtk3" version="2.48.5" release="1.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.48.5-1.el9_6.src.rpm">
          <filename>webkit2gtk3-2.48.5-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f6e0c61700549c80028b39f58c827c22b693b62d310bc4b35a2fff32a227c2d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13935</id>
    <title>Important: golang security update</title>
    <issued date="2025-08-18 00:00:00"/>
    <updated date="2025-08-18 11:04:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.  

Security Fix(es):  

  * cmd/go: Go VCS Command Execution Vulnerability (CVE-2025-4674)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13935" id="RHSA-2025:13935" type="rhsa" title="RHSA-2025:13935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4674" id="CVE-2025-4674" type="cve" title="CVE-2025-4674"/>
      <reference href="https://bugzilla.redhat.com/2384329" id="2384329" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13935.html" id="ALSA-2025:13935" type="self" title="ALSA-2025:13935"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="golang" version="1.24.6" release="1.el9_6" epoch="0" arch="s390x" src="golang-1.24.6-1.el9_6.src.rpm">
          <filename>golang-1.24.6-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1c3a452fe4ad54c81041b3390686bfdc02746f41fb4e3922b15d8accba69a658</sum>
        </package>
        <package name="golang-tests" version="1.24.6" release="1.el9_6" epoch="0" arch="noarch" src="golang-1.24.6-1.el9_6.src.rpm">
          <filename>golang-tests-1.24.6-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">3e979194a930d315da6e1d4c2862d63713132fe833d4c743998b27c90734b88a</sum>
        </package>
        <package name="golang-race" version="1.24.6" release="1.el9_6" epoch="0" arch="s390x" src="golang-1.24.6-1.el9_6.src.rpm">
          <filename>golang-race-1.24.6-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">529bf3b4fbdf8bb9a4942694d69ab32bdb2cb4b35aa2b697fc758527021e58e0</sum>
        </package>
        <package name="golang-misc" version="1.24.6" release="1.el9_6" epoch="0" arch="noarch" src="golang-1.24.6-1.el9_6.src.rpm">
          <filename>golang-misc-1.24.6-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">665118655522de2908ac73a38bf76662b6d7af9f3bdc7f23455d230a930e5d21</sum>
        </package>
        <package name="golang-docs" version="1.24.6" release="1.el9_6" epoch="0" arch="noarch" src="golang-1.24.6-1.el9_6.src.rpm">
          <filename>golang-docs-1.24.6-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">6be21eeb7d47530ff343e6857d1b47c72975b79d526bb6f8cb6b80967e8e5269</sum>
        </package>
        <package name="go-toolset" version="1.24.6" release="1.el9_6" epoch="0" arch="s390x" src="golang-1.24.6-1.el9_6.src.rpm">
          <filename>go-toolset-1.24.6-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8c9908258f737e7c37f26d2ac10b1e5f27729bae70f9a526f1a882a00d0342c0</sum>
        </package>
        <package name="golang-src" version="1.24.6" release="1.el9_6" epoch="0" arch="noarch" src="golang-1.24.6-1.el9_6.src.rpm">
          <filename>golang-src-1.24.6-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">93f3d8e82b0aaa4e4ba39f65ba558b39772fb4c83758a9e537ad377b2f8b841a</sum>
        </package>
        <package name="golang-bin" version="1.24.6" release="1.el9_6" epoch="0" arch="s390x" src="golang-1.24.6-1.el9_6.src.rpm">
          <filename>golang-bin-1.24.6-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d0a77dfd2d01a1c1cc11bf8e74cca326aeca91627e7c4e392b565f47a90a5f4e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13962</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-18 00:00:00"/>
    <updated date="2025-08-22 07:57:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (CVE-2025-21867)
  * microcode_ctl: From CVEorg collector (CVE-2024-28956)
  * kernel: mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084)
  * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)
  * kernel: net: fix udp gso skb_segment after pull from frag_list (CVE-2025-38124)
  * kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)
  * kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250)
  * kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380)
  * kernel: tls: always refresh the queue when reading sock (CVE-2025-38471)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13962" id="RHSA-2025:13962" type="rhsa" title="RHSA-2025:13962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28956" id="CVE-2024-28956" type="cve" title="CVE-2024-28956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21867" id="CVE-2025-21867" type="cve" title="CVE-2025-21867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38084" id="CVE-2025-38084" type="cve" title="CVE-2025-38084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38085" id="CVE-2025-38085" type="cve" title="CVE-2025-38085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38124" id="CVE-2025-38124" type="cve" title="CVE-2025-38124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38159" id="CVE-2025-38159" type="cve" title="CVE-2025-38159"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38250" id="CVE-2025-38250" type="cve" title="CVE-2025-38250"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38380" id="CVE-2025-38380" type="cve" title="CVE-2025-38380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38471" id="CVE-2025-38471" type="cve" title="CVE-2025-38471"/>
      <reference href="https://bugzilla.redhat.com/2355334" id="2355334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366125" id="2366125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375303" id="2375303" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375304" id="2375304" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376041" id="2376041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376064" id="2376064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378982" id="2378982" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383381" id="2383381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383893" id="2383893" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13962.html" id="ALSA-2025:13962" type="self" title="ALSA-2025:13962"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.35.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3286a19359df4427fd52cdc136d840e88ee9d6a0b2d98190a187ca1d689048ff</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.35.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">44ab475a3b8c6ff989ededfe78daa32c8c0f19c884548efed4757a5792b2ab8f</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.35.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">52f527719547aa35550bdbbf99c1462d4c2a15cf1a2dcba1d613b3485b741341</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.35.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">53b8d3cc9c21f26d262d1df4c1b937749e3ea7214bc7fc69dd9a4c906d34ae3b</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.35.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7f230d94b1d8a871ffbf93f3a31a31210d7340ee4002938a82a7d7212418ffe3</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.35.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7f50e5e7506b2a7013b9b7dcebd94d185fb72db1cc5c3233b4cc9fdd3d79b632</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.35.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">85513507f5e469ff4608747191765090a0c179343abb3b0292e3244b383319a1</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.35.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">88edecbc6b18bd505551d363224b534a758560f0bab7d4e0f4be85c4791dfe4f</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.35.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">9c2dc9051e9e61e16119c5d58d0b83cb49316586f4124f89368d477e8edbf724</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.35.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">a483581eea724aeeb6bde0282b3f45bcfff3675c9399f1dcdeba23207297d8d0</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.35.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d7c8b423aef6397dd44c5a77e84be16c7f01874cf0a910d27363623fdc334dec</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.35.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">dd14ee10cba5c26ac7a8d628e32d8db24d349268d6053f38719508980eb20a65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14075</id>
    <title>Moderate: xterm security update</title>
    <issued date="2025-08-19 00:00:00"/>
    <updated date="2025-08-19 10:24:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xterm security update</summary>
    <description>The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly.   

Security Fix(es):  

  * xterm: Buffer overflow in set_sixel in graphics_sixel.c (CVE-2022-24130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14075" id="RHSA-2025:14075" type="rhsa" title="RHSA-2025:14075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24130" id="CVE-2022-24130" type="cve" title="CVE-2022-24130"/>
      <reference href="https://bugzilla.redhat.com/2048676" id="2048676" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14075.html" id="ALSA-2025:14075" type="self" title="ALSA-2025:14075"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="xterm" version="366" release="12.el9_6" epoch="0" arch="s390x" src="xterm-366-12.el9_6.src.rpm">
          <filename>xterm-366-12.el9_6.s390x.rpm</filename>
          <sum type="sha256">1fe164199e0768da9bc4d58fad68711957d360da33cf4e8975b5aa18ae566e98</sum>
        </package>
        <package name="xterm-resize" version="366" release="12.el9_6" epoch="0" arch="s390x" src="xterm-366-12.el9_6.src.rpm">
          <filename>xterm-resize-366-12.el9_6.s390x.rpm</filename>
          <sum type="sha256">e97e8e188df4f3c99181f9ed9f6c77f36fb63db58da821a23205f69c64292e65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14130</id>
    <title>Important: libarchive security update</title>
    <issued date="2025-08-20 00:00:00"/>
    <updated date="2025-08-20 14:02:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14130" id="RHSA-2025:14130" type="rhsa" title="RHSA-2025:14130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5914" id="CVE-2025-5914" type="cve" title="CVE-2025-5914"/>
      <reference href="https://bugzilla.redhat.com/2370861" id="2370861" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14130.html" id="ALSA-2025:14130" type="self" title="ALSA-2025:14130"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="bsdtar" version="3.5.3" release="6.el9_6" epoch="0" arch="s390x" src="libarchive-3.5.3-6.el9_6.src.rpm">
          <filename>bsdtar-3.5.3-6.el9_6.s390x.rpm</filename>
          <sum type="sha256">8473d58ee39d231ec9a0cb20b6f54e7b877abf838e7db0890812a663f2b17bf2</sum>
        </package>
        <package name="libarchive-devel" version="3.5.3" release="6.el9_6" epoch="0" arch="s390x" src="libarchive-3.5.3-6.el9_6.src.rpm">
          <filename>libarchive-devel-3.5.3-6.el9_6.s390x.rpm</filename>
          <sum type="sha256">c50b8e6cccc1462c64baf3c8d63ec5d85313fc99cac0303d13146db1defe4aba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14181</id>
    <title>Important: tomcat security update</title>
    <issued date="2025-08-20 00:00:00"/>
    <updated date="2025-08-22 11:25:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.  

Security Fix(es):  

  * tomcat: Apache Tomcat DoS in multipart upload (CVE-2025-48988)
  * tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  * apache-commons-fileupload: Apache Commons FileUpload DoS via part headers (CVE-2025-48976)
  * tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)
  * tomcat: Apache Tomcat denial of service (CVE-2025-52520)
  * tomcat: Apache Tomcat denial of service (CVE-2025-52434)
  * tomcat: Apache Tomcat denial of service (CVE-2025-53506)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14181" id="RHSA-2025:14181" type="rhsa" title="RHSA-2025:14181"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48976" id="CVE-2025-48976" type="cve" title="CVE-2025-48976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48988" id="CVE-2025-48988" type="cve" title="CVE-2025-48988"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48989" id="CVE-2025-48989" type="cve" title="CVE-2025-48989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49125" id="CVE-2025-49125" type="cve" title="CVE-2025-49125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52434" id="CVE-2025-52434" type="cve" title="CVE-2025-52434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52520" id="CVE-2025-52520" type="cve" title="CVE-2025-52520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53506" id="CVE-2025-53506" type="cve" title="CVE-2025-53506"/>
      <reference href="https://bugzilla.redhat.com/2373015" id="2373015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373018" id="2373018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373020" id="2373020" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373309" id="2373309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379374" id="2379374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379382" id="2379382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379386" id="2379386" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14181.html" id="ALSA-2025:14181" type="self" title="ALSA-2025:14181"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="tomcat-jsp-2.3-api" version="9.0.87" release="3.el9_6.3" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.3.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.87-3.el9_6.3.noarch.rpm</filename>
          <sum type="sha256">3d1b2f60c937138eabe2a357da202ce1e61407aaf1616e6636ffdb263d80eeff</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.87" release="3.el9_6.3" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.3.src.rpm">
          <filename>tomcat-admin-webapps-9.0.87-3.el9_6.3.noarch.rpm</filename>
          <sum type="sha256">557fd1368406aa21877f8e8d659b54ca1dd55cb657555f0672c46c69ae0fd2d4</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.87" release="3.el9_6.3" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.3.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.87-3.el9_6.3.noarch.rpm</filename>
          <sum type="sha256">55d082d20841c00e2b3d849f9bc6bc808658ec95f9c55afd25f9ef4a890a6c6e</sum>
        </package>
        <package name="tomcat-lib" version="9.0.87" release="3.el9_6.3" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.3.src.rpm">
          <filename>tomcat-lib-9.0.87-3.el9_6.3.noarch.rpm</filename>
          <sum type="sha256">60dc40355b5199b744c4e87c95aea98eef6b463881fb693fcdf9a5cff1e8fbe9</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.87" release="3.el9_6.3" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.3.src.rpm">
          <filename>tomcat-docs-webapp-9.0.87-3.el9_6.3.noarch.rpm</filename>
          <sum type="sha256">8eb1f3d95d9f23b78e0d9c85b4fb6e5b9a81c47c74e5aac9045745ac9811aa28</sum>
        </package>
        <package name="tomcat" version="9.0.87" release="3.el9_6.3" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.3.src.rpm">
          <filename>tomcat-9.0.87-3.el9_6.3.noarch.rpm</filename>
          <sum type="sha256">9238596ca9828174c3c53c5045a85daad045caa5c2f5bebe482aaaafb2f01a33</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.87" release="3.el9_6.3" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.3.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.87-3.el9_6.3.noarch.rpm</filename>
          <sum type="sha256">927f314c3f4a4cdf02014141604408eea896e608ce5cb8e84c4701181bafb6b6</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.87" release="3.el9_6.3" epoch="1" arch="noarch" src="tomcat-9.0.87-3.el9_6.3.src.rpm">
          <filename>tomcat-webapps-9.0.87-3.el9_6.3.noarch.rpm</filename>
          <sum type="sha256">e7004fac42215d59539ca6924f81d84a43afaf93ca89f3a4e773f49e2682545a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14416</id>
    <title>Important: firefox security update</title>
    <issued date="2025-08-25 00:00:00"/>
    <updated date="2025-08-27 11:56:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component (CVE-2025-9182)
  * thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component (CVE-2025-9179)
  * thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component (CVE-2025-9180)
  * thunderbird: firefox: Uninitialized memory in the JavaScript Engine component (CVE-2025-9181)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 (CVE-2025-9185)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14416" id="RHSA-2025:14416" type="rhsa" title="RHSA-2025:14416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9179" id="CVE-2025-9179" type="cve" title="CVE-2025-9179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9180" id="CVE-2025-9180" type="cve" title="CVE-2025-9180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9181" id="CVE-2025-9181" type="cve" title="CVE-2025-9181"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9182" id="CVE-2025-9182" type="cve" title="CVE-2025-9182"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9185" id="CVE-2025-9185" type="cve" title="CVE-2025-9185"/>
      <reference href="https://bugzilla.redhat.com/2389575" id="2389575" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389580" id="2389580" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389581" id="2389581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389583" id="2389583" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389584" id="2389584" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14416.html" id="ALSA-2025:14416" type="self" title="ALSA-2025:14416"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="firefox" version="128.14.0" release="2.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-128.14.0-2.el9_6.alma.1.src.rpm">
          <filename>firefox-128.14.0-2.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">21ca6cfe3bfb1a2cbc6e2d1ba896580a4d3b6930d9394304d4feb7b5406aa126</sum>
        </package>
        <package name="firefox-x11" version="128.14.0" release="2.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-128.14.0-2.el9_6.alma.1.src.rpm">
          <filename>firefox-x11-128.14.0-2.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">aceb7b925b6678209bce3bdb15f6ff6afdad1b7845500ad0d9bc6f08a3c22b90</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14420</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-25 00:00:00"/>
    <updated date="2025-08-27 12:00:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: udp: Fix memory accounting leak. (CVE-2025-22058)
  * kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914)
  * kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14420" id="RHSA-2025:14420" type="rhsa" title="RHSA-2025:14420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22058" id="CVE-2025-22058" type="cve" title="CVE-2025-22058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37914" id="CVE-2025-37914" type="cve" title="CVE-2025-37914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38417" id="CVE-2025-38417" type="cve" title="CVE-2025-38417"/>
      <reference href="https://bugzilla.redhat.com/2360276" id="2360276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367500" id="2367500" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383463" id="2383463" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14420.html" id="ALSA-2025:14420" type="self" title="ALSA-2025:14420"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3-perf" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.37.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">08ba84e697c23219297821893fd69b5cb1f04051cdda709876c8fc1b0f95d6eb</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.37.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3cfe5373f356a123ce91368f504ae23e7bc769e70469704b6d9b358f2abdc282</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.37.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4683936a42392ab9351c4682f8122eab11d03a187d5b88a7f0193985202efae8</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.37.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4b80ab8a3dbc32a5ccc3a06dc9cac71495e61a6950a9f45e28f35d00819ff659</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.37.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">90eaf5dcb002a87c2dc030d2c777abb4010290687c9dba109141a181d7391535</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.37.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">9f5a41a299b386e469226dff4854c36ff19c30cfbc5351d993f435c943438688</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.37.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">b6c351717d3c273751af2273a2e685a4259a036ad6bf0306c67a3f3e8e2d1761</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.37.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">bbf032241e8bb9c76be48cf482147df3a76cbef70fc16578fa22e85cef21e11e</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.37.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d395dde1abbdb3c52c5f1a8824a00d0eb3ca4f63298ecc14525caa0dafedfffb</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.37.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">e00b33a85bacd8049e46d4d900f7d66d95674050f43ee8a6dd49265cd32b10f5</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.37.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e85bb052a2caabe2549eb55aab68ecaf963c2c3f1a4fadb2b99aeeb9acfdfd90</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.37.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">fc36ca4ed07a4feb29f9e7fefe6f3aaed41aeef6cc55e68fc925dc3737ff0c3c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1443</id>
    <title>Important: nodejs:20 security update</title>
    <issued date="2025-02-13 00:00:00"/>
    <updated date="2025-02-14 09:36:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)
  * nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)
  * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1443" id="RHSA-2025:1443" type="rhsa" title="RHSA-2025:1443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22150" id="CVE-2025-22150" type="cve" title="CVE-2025-22150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23083" id="CVE-2025-23083" type="cve" title="CVE-2025-23083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23085" id="CVE-2025-23085" type="cve" title="CVE-2025-23085"/>
      <reference href="https://bugzilla.redhat.com/2339176" id="2339176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339392" id="2339392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2342618" id="2342618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1443.html" id="ALSA-2025:1443" type="self" title="ALSA-2025:1443"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="nodejs" stream="20" version="9050020250214043037" context="8cf767d6" arch="s390x"/>
        <package name="npm" version="10.8.2" release="1.20.18.2.1.module_el9.5.0+137+381f3eaf" epoch="1" arch="s390x" src="nodejs-20.18.2-1.module_el9.5.0+137+381f3eaf.src.rpm">
          <filename>npm-10.8.2-1.20.18.2.1.module_el9.5.0+137+381f3eaf.s390x.rpm</filename>
          <sum type="sha256">29168ddc7d6d2f391cc40a4f78d126a706b8855437b70fa5f709a5616ac6c6e5</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.2.0+36+853e48f5" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.2.0+36+853e48f5.noarch.rpm</filename>
          <sum type="sha256">6e3f86ef560d05b76cc9e5f81bdbcf1617374c3c12815325d267d44057a954e8</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.3.0+88+29afeaa2" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.3.0+88+29afeaa2.noarch.rpm</filename>
          <sum type="sha256">8014b60b14856a94feb49d7f2a8754c6fd531ac93bf52e19702e32eea1fb729f</sum>
        </package>
        <package name="nodejs-docs" version="20.18.2" release="1.module_el9.5.0+137+381f3eaf" epoch="1" arch="noarch" src="nodejs-20.18.2-1.module_el9.5.0+137+381f3eaf.src.rpm">
          <filename>nodejs-docs-20.18.2-1.module_el9.5.0+137+381f3eaf.noarch.rpm</filename>
          <sum type="sha256">89461b6ac62cedc048af335c1d731fe920e824dcd6aa21c8afd28ce8da18fae7</sum>
        </package>
        <package name="nodejs" version="20.18.2" release="1.module_el9.5.0+137+381f3eaf" epoch="1" arch="s390x" src="nodejs-20.18.2-1.module_el9.5.0+137+381f3eaf.src.rpm">
          <filename>nodejs-20.18.2-1.module_el9.5.0+137+381f3eaf.s390x.rpm</filename>
          <sum type="sha256">aceab1639de2de5b03b05ccd0f874db2eaaeb2d97f797b9495686709c4bd4d8e</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.18.2" release="1.module_el9.5.0+137+381f3eaf" epoch="1" arch="s390x" src="nodejs-20.18.2-1.module_el9.5.0+137+381f3eaf.src.rpm">
          <filename>nodejs-full-i18n-20.18.2-1.module_el9.5.0+137+381f3eaf.s390x.rpm</filename>
          <sum type="sha256">b627a2876fb42aa1319a7213d2c8ed4e42b302f5c485a7cd8944b26920d52f86</sum>
        </package>
        <package name="nodejs-devel" version="20.18.2" release="1.module_el9.5.0+137+381f3eaf" epoch="1" arch="s390x" src="nodejs-20.18.2-1.module_el9.5.0+137+381f3eaf.src.rpm">
          <filename>nodejs-devel-20.18.2-1.module_el9.5.0+137+381f3eaf.s390x.rpm</filename>
          <sum type="sha256">b9bf80bcc753b0f0b10379fe53b10b36c8bef9acbb5fb486c1658aca9690719c</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.5.0+124+df88fe49" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.5.0+124+df88fe49.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.5.0+124+df88fe49.noarch.rpm</filename>
          <sum type="sha256">cb21fb7f8fb0ef5afe10bf3cfbdd7c7d11c15d5c6b567e91a1a2b2256a2424a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1446</id>
    <title>Moderate: nodejs:18 security update</title>
    <issued date="2025-02-13 00:00:00"/>
    <updated date="2025-02-14 11:49:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:18 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)
  * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1446" id="RHSA-2025:1446" type="rhsa" title="RHSA-2025:1446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22150" id="CVE-2025-22150" type="cve" title="CVE-2025-22150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23085" id="CVE-2025-23085" type="cve" title="CVE-2025-23085"/>
      <reference href="https://bugzilla.redhat.com/2339176" id="2339176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2342618" id="2342618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1446.html" id="ALSA-2025:1446" type="self" title="ALSA-2025:1446"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="nodejs" stream="18" version="9050020250214042843" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-devel" version="18.20.6" release="1.module_el9.5.0+136+92f38f3c" epoch="1" arch="s390x" src="nodejs-18.20.6-1.module_el9.5.0+136+92f38f3c.src.rpm">
          <filename>nodejs-devel-18.20.6-1.module_el9.5.0+136+92f38f3c.s390x.rpm</filename>
          <sum type="sha256">064fce9035573c420c608ac59d5ba1b669d7c56e1722f8ae5471b819bc9c4e7f</sum>
        </package>
        <package name="npm" version="10.8.2" release="1.18.20.6.1.module_el9.5.0+136+92f38f3c" epoch="1" arch="s390x" src="nodejs-18.20.6-1.module_el9.5.0+136+92f38f3c.src.rpm">
          <filename>npm-10.8.2-1.18.20.6.1.module_el9.5.0+136+92f38f3c.s390x.rpm</filename>
          <sum type="sha256">2b93007cc1f5e56290e15bb96a4d062d043bb264d47a18d26f20e2dd24e99747</sum>
        </package>
        <package name="nodejs-docs" version="18.20.6" release="1.module_el9.5.0+136+92f38f3c" epoch="1" arch="noarch" src="nodejs-18.20.6-1.module_el9.5.0+136+92f38f3c.src.rpm">
          <filename>nodejs-docs-18.20.6-1.module_el9.5.0+136+92f38f3c.noarch.rpm</filename>
          <sum type="sha256">44794d60a66eef706a67719d77d8b9cbb1ca037963058fa7386dc40b5163b921</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.5.0+136+92f38f3c" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.5.0+136+92f38f3c.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.5.0+136+92f38f3c.noarch.rpm</filename>
          <sum type="sha256">9568f3f288eb90ba5d978da40785d16e3210b65e92276e8ca17b6d88a3339c1b</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.5.0+136+92f38f3c" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.5.0+136+92f38f3c.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.5.0+136+92f38f3c.noarch.rpm</filename>
          <sum type="sha256">bfb954cf0a070014a29b11e53507cb0f05b992c7e1bf6cb568840bb815dca58e</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.5.0+124+df88fe49" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.5.0+124+df88fe49.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.5.0+124+df88fe49.noarch.rpm</filename>
          <sum type="sha256">cb21fb7f8fb0ef5afe10bf3cfbdd7c7d11c15d5c6b567e91a1a2b2256a2424a2</sum>
        </package>
        <package name="nodejs" version="18.20.6" release="1.module_el9.5.0+136+92f38f3c" epoch="1" arch="s390x" src="nodejs-18.20.6-1.module_el9.5.0+136+92f38f3c.src.rpm">
          <filename>nodejs-18.20.6-1.module_el9.5.0+136+92f38f3c.s390x.rpm</filename>
          <sum type="sha256">ccf29521730b387b77ac628257f3cefab5befcd702959302fdaa02a3c23206e9</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.20.6" release="1.module_el9.5.0+136+92f38f3c" epoch="1" arch="s390x" src="nodejs-18.20.6-1.module_el9.5.0+136+92f38f3c.src.rpm">
          <filename>nodejs-full-i18n-18.20.6-1.module_el9.5.0+136+92f38f3c.s390x.rpm</filename>
          <sum type="sha256">e347e92eea6c9154cecda77354798768a1c071e183b882355f7565e1590a64a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14493</id>
    <title>Important: aide security update</title>
    <issued date="2025-08-25 00:00:00"/>
    <updated date="2025-08-27 11:45:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>aide security update</summary>
    <description>Advanced Intrusion Detection Environment (AIDE) is a utility that creates a database of files on the system, and then uses that database to ensure file integrity and detect system intrusions.  

Security Fix(es):  

  * aide: improper output neutralization enables bypassing (CVE-2025-54389)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14493" id="RHSA-2025:14493" type="rhsa" title="RHSA-2025:14493"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-54389" id="CVE-2025-54389" type="cve" title="CVE-2025-54389"/>
      <reference href="https://bugzilla.redhat.com/2388019" id="2388019" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14493.html" id="ALSA-2025:14493" type="self" title="ALSA-2025:14493"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="aide" version="0.16" release="103.el9_6.2" epoch="0" arch="s390x" src="aide-0.16-103.el9_6.2.src.rpm">
          <filename>aide-0.16-103.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">4acad050507a86ce188ad8cb0366541f30704e80ce65e7fab7ea95ded36ae352</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14640</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-08-26 00:00:00"/>
    <updated date="2025-08-29 13:02:26"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component (CVE-2025-9182)
  * thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component (CVE-2025-9179)
  * thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component (CVE-2025-9180)
  * thunderbird: firefox: Uninitialized memory in the JavaScript Engine component (CVE-2025-9181)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 (CVE-2025-9185)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14640" id="RHSA-2025:14640" type="rhsa" title="RHSA-2025:14640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9179" id="CVE-2025-9179" type="cve" title="CVE-2025-9179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9180" id="CVE-2025-9180" type="cve" title="CVE-2025-9180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9181" id="CVE-2025-9181" type="cve" title="CVE-2025-9181"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9182" id="CVE-2025-9182" type="cve" title="CVE-2025-9182"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9185" id="CVE-2025-9185" type="cve" title="CVE-2025-9185"/>
      <reference href="https://bugzilla.redhat.com/2389575" id="2389575" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389580" id="2389580" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389581" id="2389581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389583" id="2389583" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389584" id="2389584" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14640.html" id="ALSA-2025:14640" type="self" title="ALSA-2025:14640"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="thunderbird" version="128.14.0" release="3.el9_6.alma.1" epoch="0" arch="s390x" src="thunderbird-128.14.0-3.el9_6.alma.1.src.rpm">
          <filename>thunderbird-128.14.0-3.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">9fa318b42d880e33790382f5d86c113450bc3704f3fc46bbefed1fe9f260d439</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14827</id>
    <title>Important: postgresql:16 security update</title>
    <issued date="2025-08-28 00:00:00"/>
    <updated date="2025-08-29 10:43:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:16 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14827" id="RHSA-2025:14827" type="rhsa" title="RHSA-2025:14827"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8714" id="CVE-2025-8714" type="cve" title="CVE-2025-8714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8715" id="CVE-2025-8715" type="cve" title="CVE-2025-8715"/>
      <reference href="https://bugzilla.redhat.com/2388551" id="2388551" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388553" id="2388553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14827.html" id="ALSA-2025:14827" type="self" title="ALSA-2025:14827"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <module name="postgresql" stream="16" version="9060020250317150833" context="8cf767d6" arch="s390x"/>
        <package name="pgvector" version="0.6.2" release="2.module_el9.6.0+167+4e561146" epoch="0" arch="s390x" src="pgvector-0.6.2-2.module_el9.6.0+167+4e561146.src.rpm">
          <filename>pgvector-0.6.2-2.module_el9.6.0+167+4e561146.s390x.rpm</filename>
          <sum type="sha256">0189f49bef1c20bac87922d6991e5f0b0b8b5aa7a6b04cfdca3876c35810d906</sum>
        </package>
        <package name="postgresql-private-libs" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-private-libs-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">021478c952c032fb6e17ad39e5242d4d750522529d4c950855325748fc49a045</sum>
        </package>
        <package name="postgresql-server-devel" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-server-devel-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">09848d26aa6067abadf19f45f03a17a7fa29fda4e32bcc559aa9c727ca504604</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-upgrade-devel-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">4937779f996667337273c558ac68e1bb70650f866c8c4a2ee71213e708045d48</sum>
        </package>
        <package name="postgresql-plperl" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-plperl-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">5ec730fec91514c2264458fc1255d0e20b16634d4ac1e05ad4f2e15d8c5d0539</sum>
        </package>
        <package name="postgresql-test" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-test-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">6d1482b33b7b37f7be27f30ee6bf128e047356ee5903af18f2dc544ff2212775</sum>
        </package>
        <package name="postgresql-upgrade" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-upgrade-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">743f634739b9802982bdb6609cdd556b19943204d9dad46f1eed554b797dc12b</sum>
        </package>
        <package name="postgresql-plpython3" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-plpython3-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">7e4c8377ef200409292242e3858ccedaf62b9d858fc98cd08528550d6dc1330b</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="noarch" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-test-rpm-macros-16.10-1.module_el9.6.0+174+80cb77f0.noarch.rpm</filename>
          <sum type="sha256">8cd0978dce92e40295d15a58a3df8e11d64b51a4c0d3f647b2342cc2a57d84a1</sum>
        </package>
        <package name="postgresql-server" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-server-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">8ceabf2395e0753a2a0d86ebd776154a840fc26a3f719682818b8c8ef7917ef5</sum>
        </package>
        <package name="postgresql-private-devel" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-private-devel-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">958b4e1108a6383acbfc0106b4f43e451c0844b25ee3c93456c2a19834fd16c8</sum>
        </package>
        <package name="postgresql" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">a1259062eda07e1506c8c44ddeba4ee31cf943810e31f398415953bd2b6a32df</sum>
        </package>
        <package name="pg_repack" version="1.5.1" release="1.module_el9.6.0+146+c54fdeca" epoch="0" arch="s390x" src="pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.src.rpm">
          <filename>pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.s390x.rpm</filename>
          <sum type="sha256">a56cf5176cd4cb07287fa3fdddaa1e11739b70444afbb4d23f7669dd0b4b3360</sum>
        </package>
        <package name="postgresql-docs" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-docs-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">a56e7f0a4f21befd26e3c297a0d8aad8995f62edccb87bb74d512a5d434754d3</sum>
        </package>
        <package name="postgres-decoderbufs" version="2.4.0" release="1.Final.module_el9.4.0+66+eb9878bc" epoch="0" arch="s390x" src="postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.src.rpm">
          <filename>postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm</filename>
          <sum type="sha256">b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c</sum>
        </package>
        <package name="postgresql-contrib" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-contrib-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">be9f3f4a6f99d0f02098ff05ea8a7fee5ad9482ea0beecda2cea205537735e72</sum>
        </package>
        <package name="postgresql-static" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-static-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">c8877ca835c6b9e75b4659acf81087e76e7682b45a252f14095c91e347eb81fc</sum>
        </package>
        <package name="pgaudit" version="16.0" release="1.module_el9.4.0+66+eb9878bc" epoch="0" arch="s390x" src="pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.src.rpm">
          <filename>pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm</filename>
          <sum type="sha256">dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739</sum>
        </package>
        <package name="postgresql-pltcl" version="16.10" release="1.module_el9.6.0+174+80cb77f0" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el9.6.0+174+80cb77f0.src.rpm">
          <filename>postgresql-pltcl-16.10-1.module_el9.6.0+174+80cb77f0.s390x.rpm</filename>
          <sum type="sha256">e0df43a4aa8fc5bbf1f3cd84659f2c90c773d54fb4aad8c81508daaa6835a196</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14862</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2025-08-28 00:00:00"/>
    <updated date="2025-09-02 10:40:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14862" id="RHSA-2025:14862" type="rhsa" title="RHSA-2025:14862"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8714" id="CVE-2025-8714" type="cve" title="CVE-2025-8714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8715" id="CVE-2025-8715" type="cve" title="CVE-2025-8715"/>
      <reference href="https://bugzilla.redhat.com/2388551" id="2388551" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388553" id="2388553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14862.html" id="ALSA-2025:14862" type="self" title="ALSA-2025:14862"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <module name="postgresql" stream="15" version="9050020241004143704" context="8cf767d6" arch="s390x"/>
        <package name="pgaudit" version="1.7.0" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89</sum>
        </package>
        <package name="postgresql-pltcl" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-pltcl-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">144b5aa38d192e02b2dc962321539ee6f97bd3fe83d3d6284e7d6ef924806e21</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445</sum>
        </package>
        <package name="postgresql-private-libs" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-private-libs-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">4ad82c9b91006defac74e77a20277d2f4610fa932ace75e6fe8c139e60899142</sum>
        </package>
        <package name="postgresql-server" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-server-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">4bd264dcb8f415577ee1aebe2fce1689f00c3ace1b06b3a9ef6810ddd877077e</sum>
        </package>
        <package name="postgresql-test" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-test-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">4fe697c27c9ced5bdacc0fdf6fbeaaaaec1986c46ab4ca49d966a3dda5b1a3d3</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="2.module_el9.5.0+119+18833d03" epoch="0" arch="s390x" src="pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.src.rpm">
          <filename>pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.s390x.rpm</filename>
          <sum type="sha256">565b4d4edc782cf6df048e990f78d9a96ef21d4a91af2800aa9a0d66ac77ae8f</sum>
        </package>
        <package name="postgresql-plpython3" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-plpython3-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">64fd186b66437bd1984f6668255f947984cb0cf91891a844f28468b010e13bed</sum>
        </package>
        <package name="postgresql-contrib" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-contrib-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">6ff2ab8643f199614dd2861d8d7b0bf37ae63a934149ae01f85a23bd3e1f9fad</sum>
        </package>
        <package name="postgresql-server-devel" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-server-devel-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">7ad2887f2ef986496416e67d0057b2b50698fee359ca06e926ebaf6a36b4d3ea</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-upgrade-devel-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">7bae7f879ff8a1e204a749b37543fe6c3a2bfaade7259a33df6c83c6d61bb615</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="noarch" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-test-rpm-macros-15.14-1.module_el9.6.0+176+c508cfa2.noarch.rpm</filename>
          <sum type="sha256">8f444764231792d83992cc5f7c32837a23051773da9cd0c53a4cf84da5820e2f</sum>
        </package>
        <package name="postgresql-static" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-static-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">a070e2dc460d8f0bdbc9f72ece4cc46200ae55709bdb3b3158ae8a201f466753</sum>
        </package>
        <package name="postgresql-docs" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-docs-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">a3cb24bb9e2004bc10e10cb5a112f77597d7efe5884c882ea2c5a2c9d6703c34</sum>
        </package>
        <package name="postgresql-upgrade" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-upgrade-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">b1c1ce7b359576b1c23a66c7a68970559ea658700c78510e0817c5e0c337a715</sum>
        </package>
        <package name="postgresql-private-devel" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-private-devel-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">d5747359d0765671d4060ba16ccd33d8326f1d3e5ce6ff9c415c6c78ceeb9d8c</sum>
        </package>
        <package name="postgresql-plperl" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-plperl-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">e1ec6b603e7a0888692e5dd21aa86a9437755e744bad72b6e3d72dab3ca1f426</sum>
        </package>
        <package name="postgresql" version="15.14" release="1.module_el9.6.0+176+c508cfa2" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el9.6.0+176+c508cfa2.src.rpm">
          <filename>postgresql-15.14-1.module_el9.6.0+176+c508cfa2.s390x.rpm</filename>
          <sum type="sha256">ee842480ccdb7d09238a628b21d187cc3ce7abe9f8f247093cd5bd49c6716d57</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14878</id>
    <title>Important: postgresql security update</title>
    <issued date="2025-08-28 00:00:00"/>
    <updated date="2025-08-29 06:49:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14878" id="RHSA-2025:14878" type="rhsa" title="RHSA-2025:14878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8714" id="CVE-2025-8714" type="cve" title="CVE-2025-8714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8715" id="CVE-2025-8715" type="cve" title="CVE-2025-8715"/>
      <reference href="https://bugzilla.redhat.com/2388551" id="2388551" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388553" id="2388553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14878.html" id="ALSA-2025:14878" type="self" title="ALSA-2025:14878"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="postgresql-contrib" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-contrib-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">14372c953f65b3b27133919310f64ce72a567a20d74314fed5301d55983aa791</sum>
        </package>
        <package name="postgresql-upgrade" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-upgrade-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">25eab2598b1c7ca873485fb3fe9859c62787afdb511361ff5d7766dc4cad276d</sum>
        </package>
        <package name="postgresql-plpython3" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-plpython3-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">48582c0a76ba982a7d72695bba0f8cffee41f3f94491cfd58a1b2748dd78ba71</sum>
        </package>
        <package name="postgresql-plperl" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-plperl-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">739157fd845776a28517a61bdcb352fd9bdc5ae4070e7b01344da431756fcb02</sum>
        </package>
        <package name="postgresql-pltcl" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-pltcl-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">a11c674630758719f5199bf85abb32879e9dfe413d916e97b217d08d0fa52948</sum>
        </package>
        <package name="postgresql-server" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-server-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">becfdff9d0845904ed2d83fc966ca20c0d39ad8ba6d9aabd63484e61068c1060</sum>
        </package>
        <package name="postgresql" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">dc0cd2414064c9fa919b3b1ac9631e6c92c05f84e40f12e5a3d7f0d1e328843a</sum>
        </package>
        <package name="postgresql-private-libs" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-private-libs-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">eafd7fb6674a0da729bd70dd8e716b1771bda18cc2322d4928f48ef3cb7a0c88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14983</id>
    <title>Moderate: mod_http2 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-02 10:38:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mod_http2 security update</summary>
    <description>The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.  

Security Fix(es):  

  * httpd: mod_proxy_http2: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module (CVE-2025-49630)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14983" id="RHSA-2025:14983" type="rhsa" title="RHSA-2025:14983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49630" id="CVE-2025-49630" type="cve" title="CVE-2025-49630"/>
      <reference href="https://bugzilla.redhat.com/2374578" id="2374578" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14983.html" id="ALSA-2025:14983" type="self" title="ALSA-2025:14983"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="mod_http2" version="2.0.26" release="4.el9_6.1" epoch="0" arch="s390x" src="mod_http2-2.0.26-4.el9_6.1.src.rpm">
          <filename>mod_http2-2.0.26-4.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">0404f83a056b857d681ca9e1d540044bc92200388f4f43b1305f919a86141830</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15007</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:23:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15007" id="RHSA-2025:15007" type="rhsa" title="RHSA-2025:15007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15007.html" id="ALSA-2025:15007" type="self" title="ALSA-2025:15007"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3.12" version="3.12.9" release="1.el9_6.2" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.2.src.rpm">
          <filename>python3.12-3.12.9-1.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">5401714730a66cda19f5c2927af581e5443a96ead1e652a6dc0200ecc906e425</sum>
        </package>
        <package name="python3.12-devel" version="3.12.9" release="1.el9_6.2" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.2.src.rpm">
          <filename>python3.12-devel-3.12.9-1.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">67f4ae347385eeaa702b1a438685bbc07b0fa2ffc33a3a2a90c353288e4277d5</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.9" release="1.el9_6.2" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.2.src.rpm">
          <filename>python3.12-tkinter-3.12.9-1.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">c6ef06fe28373c883e21ad71e2885582fb72d4f91d6d3800b1ff95a9f537bcfa</sum>
        </package>
        <package name="python3.12-libs" version="3.12.9" release="1.el9_6.2" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.2.src.rpm">
          <filename>python3.12-libs-3.12.9-1.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">e6365733509a6363db9d21ec1c0edae4495a99589b75cca1d3f8209f87b379b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15010</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:21:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15010" id="RHSA-2025:15010" type="rhsa" title="RHSA-2025:15010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15010.html" id="ALSA-2025:15010" type="self" title="ALSA-2025:15010"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3.11-tkinter" version="3.11.11" release="2.el9_6.2" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.2.src.rpm">
          <filename>python3.11-tkinter-3.11.11-2.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">5559a4b67ccbc004d8d5b34496c51ee0d29ab25c7e29baebd71541445eb0c309</sum>
        </package>
        <package name="python3.11-libs" version="3.11.11" release="2.el9_6.2" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.2.src.rpm">
          <filename>python3.11-libs-3.11.11-2.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">6375258532b1caa085b526b31ebb40960932065ff30b766bc34a10aa01e15a44</sum>
        </package>
        <package name="python3.11-devel" version="3.11.11" release="2.el9_6.2" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.2.src.rpm">
          <filename>python3.11-devel-3.11.11-2.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">95b67dd1be5b27afcd58613eb98281c98e666b5170257e5707aaa64cbe567be6</sum>
        </package>
        <package name="python3.11" version="3.11.11" release="2.el9_6.2" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.2.src.rpm">
          <filename>python3.11-3.11.11-2.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">c811e0b35595ffcb05f6cac3be9f68ce8e69d273bbd443ac2dfc4f02a97269a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15011</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:19:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823)
  * kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200)
  * kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211)
  * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)
  * kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464)
  * kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461)
  * kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15011" id="RHSA-2025:15011" type="rhsa" title="RHSA-2025:15011"/>
      <reference href="https://bugzilla.redhat.com/2365024" id="2365024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376392" id="2376392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376406" id="2376406" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382054" id="2382054" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383509" id="2383509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383513" id="2383513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2387866" id="2387866" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15011.html" id="ALSA-2025:15011" type="self" title="ALSA-2025:15011"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-37823.html" id="CVE-2025-37823" type="cve" title="CVE-2025-37823"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38200.html" id="CVE-2025-38200" type="cve" title="CVE-2025-38200"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38211.html" id="CVE-2025-38211" type="cve" title="CVE-2025-38211"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38350.html" id="CVE-2025-38350" type="cve" title="CVE-2025-38350"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38461.html" id="CVE-2025-38461" type="cve" title="CVE-2025-38461"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38464.html" id="CVE-2025-38464" type="cve" title="CVE-2025-38464"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38500.html" id="CVE-2025-38500" type="cve" title="CVE-2025-38500"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38684.html" id="CVE-2025-38684" type="cve" title="CVE-2025-38684"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-debug-devel" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.39.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">115a3a5749dceb35ab3b680d046534f7e219b88c8d69beb15e204565c4f7634b</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.39.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1a8ad467c9aad58514d5bc83957326c7c227d5a3fb43d3437aac82ff51086ebe</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.39.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">222faf74e86bef2a80c4038964f7fb4e1d2bc72f1c3d7c131a589c52a8011a93</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.39.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2867948516285e1e40a2eeb8ad692d8bbe377b8a6a138800b3d15cacd8abdfab</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.39.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4b4ad6e75a55e55ee25cf6a20ce8bd88bbe032cb73961ce2abe268f08d2a4749</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.39.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">68b9728ef6e6fad73e3caad4a2c669f2c8a05e2116f43e9a7f43b06d390148f0</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.39.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">76cd69de513468876435f9aaaf33085f0de64df10a0300af85576d7a96b9b7cb</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.39.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8b6526051a83e172ba56e69cef2925069cdf065a17a8d25dbb8ad244c0645eb8</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.39.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ba9539b9f5610cfc5b97790a87f2d2ca647899053272ace0adccb5f605458fd8</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.39.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">dbed1129b3fb7d13801da6568e332ce48b5b4a37625941e2706befcaba57713e</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.39.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">e3a9ccef85eaf1c49e12b6d1ef3ae79c481bdf12c9f25578a0eadf29b91ba204</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.39.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e95389e5e9f815d70ff0a2e77fa26892ef25b75618c7b232280e62ea4f8979cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15018</id>
    <title>Important: udisks2 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:14:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>udisks2 security update</summary>
    <description>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.  

Security Fix(es):  

  * udisks: Out-of-bounds read in UDisks Daemon (CVE-2025-8067)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15018" id="RHSA-2025:15018" type="rhsa" title="RHSA-2025:15018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8067" id="CVE-2025-8067" type="cve" title="CVE-2025-8067"/>
      <reference href="https://bugzilla.redhat.com/2388623" id="2388623" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15018.html" id="ALSA-2025:15018" type="self" title="ALSA-2025:15018"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="udisks2-iscsi" version="2.9.4" release="11.el9_6.1" epoch="0" arch="s390x" src="udisks2-2.9.4-11.el9_6.1.src.rpm">
          <filename>udisks2-iscsi-2.9.4-11.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">32b93d7f37b193a2a5250d8826f14f71342e013050e4dcd3b76d0da10524f850</sum>
        </package>
        <package name="libudisks2" version="2.9.4" release="11.el9_6.1" epoch="0" arch="s390x" src="udisks2-2.9.4-11.el9_6.1.src.rpm">
          <filename>libudisks2-2.9.4-11.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">534ee23f1c511a2ccef4f39524d412bd663a0c731246acb401e03b9c40835266</sum>
        </package>
        <package name="udisks2-lsm" version="2.9.4" release="11.el9_6.1" epoch="0" arch="s390x" src="udisks2-2.9.4-11.el9_6.1.src.rpm">
          <filename>udisks2-lsm-2.9.4-11.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">78c47d73b4e86176241776a6e504bc075d775813505fdf2035b9b1e8109f5691</sum>
        </package>
        <package name="udisks2" version="2.9.4" release="11.el9_6.1" epoch="0" arch="s390x" src="udisks2-2.9.4-11.el9_6.1.src.rpm">
          <filename>udisks2-2.9.4-11.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">a2701e0075f1f1a74b7447a2b98d07c83d3e73b9719d11929ff7146ea7e6d457</sum>
        </package>
        <package name="udisks2-lvm2" version="2.9.4" release="11.el9_6.1" epoch="0" arch="s390x" src="udisks2-2.9.4-11.el9_6.1.src.rpm">
          <filename>udisks2-lvm2-2.9.4-11.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">babc20eeca545aaf06b3eaca8328ab7a2359b6dc45dede33dc6ac56c85f2b989</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15019</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:10:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15019" id="RHSA-2025:15019" type="rhsa" title="RHSA-2025:15019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15019.html" id="ALSA-2025:15019" type="self" title="ALSA-2025:15019"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python-unversioned-command" version="3.9.21" release="2.el9_6.2" epoch="0" arch="noarch" src="python3.9-3.9.21-2.el9_6.2.src.rpm">
          <filename>python-unversioned-command-3.9.21-2.el9_6.2.noarch.rpm</filename>
          <sum type="sha256">0fdd1921530cc760298c2928f170a56765e57da35d0834b37b1669309dc7117e</sum>
        </package>
        <package name="python3-tkinter" version="3.9.21" release="2.el9_6.2" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9_6.2.src.rpm">
          <filename>python3-tkinter-3.9.21-2.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">6f2c04a812d73767de30c9a47f3cad58b486a00c0376c87d34cec2460b59508c</sum>
        </package>
        <package name="python3-devel" version="3.9.21" release="2.el9_6.2" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9_6.2.src.rpm">
          <filename>python3-devel-3.9.21-2.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">739400562b80980285c75b9a300646db0b9cf9eeeb50881e7a7d244d0588d298</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15023</id>
    <title>Moderate: httpd security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:03:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>httpd security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  

Security Fix(es):  

  * httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252)
  * httpd: mod_ssl: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
  * httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15023" id="RHSA-2025:15023" type="rhsa" title="RHSA-2025:15023"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47252" id="CVE-2024-47252" type="cve" title="CVE-2024-47252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23048" id="CVE-2025-23048" type="cve" title="CVE-2025-23048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49812" id="CVE-2025-49812" type="cve" title="CVE-2025-49812"/>
      <reference href="https://bugzilla.redhat.com/2374571" id="2374571" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2374576" id="2374576" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2374580" id="2374580" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15023.html" id="ALSA-2025:15023" type="self" title="ALSA-2025:15023"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="mod_proxy_html" version="2.4.62" release="4.el9_6.4" epoch="1" arch="s390x" src="httpd-2.4.62-4.el9_6.4.src.rpm">
          <filename>mod_proxy_html-2.4.62-4.el9_6.4.s390x.rpm</filename>
          <sum type="sha256">0f5a8c505888249213c36b3c63f020c517859aeb765dc06994c749ef90dfaadb</sum>
        </package>
        <package name="httpd-tools" version="2.4.62" release="4.el9_6.4" epoch="0" arch="s390x" src="httpd-2.4.62-4.el9_6.4.src.rpm">
          <filename>httpd-tools-2.4.62-4.el9_6.4.s390x.rpm</filename>
          <sum type="sha256">16354127af3a7b447d5f2a658a5852d589e10c26096cb2ba01d73d09111e305a</sum>
        </package>
        <package name="httpd-core" version="2.4.62" release="4.el9_6.4" epoch="0" arch="s390x" src="httpd-2.4.62-4.el9_6.4.src.rpm">
          <filename>httpd-core-2.4.62-4.el9_6.4.s390x.rpm</filename>
          <sum type="sha256">710d3a57e6e36f1ea1ee0a6f94f26c91b674f1708e4847955e3d9f7dc387e3b7</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.62" release="4.el9_6.4" epoch="0" arch="noarch" src="httpd-2.4.62-4.el9_6.4.src.rpm">
          <filename>httpd-filesystem-2.4.62-4.el9_6.4.noarch.rpm</filename>
          <sum type="sha256">8a61d14555bc458fa6ecf403c1ebda681a2579c804a35b06d1869023ceec8fea</sum>
        </package>
        <package name="httpd-devel" version="2.4.62" release="4.el9_6.4" epoch="0" arch="s390x" src="httpd-2.4.62-4.el9_6.4.src.rpm">
          <filename>httpd-devel-2.4.62-4.el9_6.4.s390x.rpm</filename>
          <sum type="sha256">c77d7a81660ae054da11bbe47a4013014ba18bce5874a6ea98ea87881b6ba0b8</sum>
        </package>
        <package name="mod_session" version="2.4.62" release="4.el9_6.4" epoch="0" arch="s390x" src="httpd-2.4.62-4.el9_6.4.src.rpm">
          <filename>mod_session-2.4.62-4.el9_6.4.s390x.rpm</filename>
          <sum type="sha256">ca72c37b994d25f5bd6250088fb4581d6e47cedca98c290a41fc351b8c5b06e4</sum>
        </package>
        <package name="mod_lua" version="2.4.62" release="4.el9_6.4" epoch="0" arch="s390x" src="httpd-2.4.62-4.el9_6.4.src.rpm">
          <filename>mod_lua-2.4.62-4.el9_6.4.s390x.rpm</filename>
          <sum type="sha256">dbdaf26da2e48b8f5cb52c791d1341264db917bea230433a9a988124fc2c22ee</sum>
        </package>
        <package name="mod_ssl" version="2.4.62" release="4.el9_6.4" epoch="1" arch="s390x" src="httpd-2.4.62-4.el9_6.4.src.rpm">
          <filename>mod_ssl-2.4.62-4.el9_6.4.s390x.rpm</filename>
          <sum type="sha256">dcad365e17d694f49ce685e300d523f7e87004090524bec45209fb47dbf12ccd</sum>
        </package>
        <package name="httpd" version="2.4.62" release="4.el9_6.4" epoch="0" arch="s390x" src="httpd-2.4.62-4.el9_6.4.src.rpm">
          <filename>httpd-2.4.62-4.el9_6.4.s390x.rpm</filename>
          <sum type="sha256">dcfb7e0c95e08d78a50fb69ed6b4e9b3c218fd277c244c6edaa586e112ef4c47</sum>
        </package>
        <package name="mod_ldap" version="2.4.62" release="4.el9_6.4" epoch="0" arch="s390x" src="httpd-2.4.62-4.el9_6.4.src.rpm">
          <filename>mod_ldap-2.4.62-4.el9_6.4.s390x.rpm</filename>
          <sum type="sha256">f0f2d455cc008ba65dff62388b88dee738eb2493dfe79c4204d608c01c97b770</sum>
        </package>
        <package name="httpd-manual" version="2.4.62" release="4.el9_6.4" epoch="0" arch="noarch" src="httpd-2.4.62-4.el9_6.4.src.rpm">
          <filename>httpd-manual-2.4.62-4.el9_6.4.noarch.rpm</filename>
          <sum type="sha256">fcee105be359c4724e4569d741834f7c7e9142cba4d0d18ccc9cb4bd8a440e92</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15099</id>
    <title>Important: pam security update</title>
    <issued date="2025-09-03 00:00:00"/>
    <updated date="2025-09-03 08:51:39"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pam security update</summary>
    <description>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  

Security Fix(es):  

  * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
  * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15099" id="RHSA-2025:15099" type="rhsa" title="RHSA-2025:15099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6020" id="CVE-2025-6020" type="cve" title="CVE-2025-6020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8941" id="CVE-2025-8941" type="cve" title="CVE-2025-8941"/>
      <reference href="https://bugzilla.redhat.com/2372512" id="2372512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388220" id="2388220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15099.html" id="ALSA-2025:15099" type="self" title="ALSA-2025:15099"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="pam-devel" version="1.5.1" release="26.el9_6" epoch="0" arch="s390x" src="pam-1.5.1-26.el9_6.src.rpm">
          <filename>pam-devel-1.5.1-26.el9_6.s390x.rpm</filename>
          <sum type="sha256">1cd39f1f4ac5cd4eee96fd6cba685d1e4ee19cc77fae7d571dffa1710e2b4ee9</sum>
        </package>
        <package name="pam-docs" version="1.5.1" release="26.el9_6" epoch="0" arch="s390x" src="pam-1.5.1-26.el9_6.src.rpm">
          <filename>pam-docs-1.5.1-26.el9_6.s390x.rpm</filename>
          <sum type="sha256">6e16cb4d0da4efddb4f5c272de3ff3ed64bd9d41aeb56ffcc637681bd1d5b038</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15429</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-08 00:00:00"/>
    <updated date="2025-09-15 09:02:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: udmabuf: fix a buf size overflow issue during udmabuf creation (CVE-2025-37803)
  * kernel: idpf: convert control queue mutex to a spinlock (CVE-2025-38392)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15429" id="RHSA-2025:15429" type="rhsa" title="RHSA-2025:15429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37803" id="CVE-2025-37803" type="cve" title="CVE-2025-37803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38392" id="CVE-2025-38392" type="cve" title="CVE-2025-38392"/>
      <reference href="https://bugzilla.redhat.com/2365013" id="2365013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383407" id="2383407" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15429.html" id="ALSA-2025:15429" type="self" title="ALSA-2025:15429"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="perf" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.41.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">02a5b1e6ba83593d413db660f986531aa4e315a14d411294ea5066f62245ea18</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.41.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">04446edbdccaa785f19e9ed20dddadc58825cc1e2e2cd1a8b3b2e456dfeffb35</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.41.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">0592d6ae16bac11ae51c039811eef218331c115de259add72efb5cf2f042f973</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.41.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">187e15c5ce87bf12aa89f8bfcf6ef9db2741ac78d457d91ec918b1d2b8ebc3d3</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.41.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">68e03bb78374d1363dcf0fdcf07d7ae87a860cd33623620e4e70086a0a6ba87d</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.41.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7c6459d627701e69de4c4d457573f076655c06dff0f9ddc3de0eb72319e44d96</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.41.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">a76de3e70b2251d15b1ae28e152fe60619ece9da22c3effbe53287fb5472f944</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.41.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c5c7572e6657901e32951382df511d51560850e22d31b14ab12471dc57e999e1</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.41.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c6744dd5809ea2ffc9c42744117d54ac7b417ed382080b5b5940675d87403e69</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.41.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c76ce6d6c674ac5c308856d5701a7b7cb96f2cf7c1532caa6a00a78e510d55d1</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.41.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d413f06832b5cbeac6782ed307f03dd0711c3a11e0afd49f90ed003397146728</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.41.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f47d74044240c3cf45366b210b034684436f57dcf7c8ff515927639bc0bf7ea6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15608</id>
    <title>Important: python3.12-cryptography security update</title>
    <issued date="2025-09-10 00:00:00"/>
    <updated date="2025-09-10 18:06:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-cryptography security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override (CVE-2024-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15608" id="RHSA-2025:15608" type="rhsa" title="RHSA-2025:15608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26130" id="CVE-2024-26130" type="cve" title="CVE-2024-26130"/>
      <reference href="https://bugzilla.redhat.com/2269617" id="2269617" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15608.html" id="ALSA-2025:15608" type="self" title="ALSA-2025:15608"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3.12-cryptography" version="41.0.7" release="2.el9_6.1" epoch="0" arch="s390x" src="python3.12-cryptography-41.0.7-2.el9_6.1.src.rpm">
          <filename>python3.12-cryptography-41.0.7-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">066e0756192635e3ae821e7146ce4a709cb813f24a7b00714bbb0dff24b9ae1a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15661</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-11 00:00:00"/>
    <updated date="2025-09-16 09:35:14"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097)
  * kernel: scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332)
  * kernel: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352)
  * kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15661" id="RHSA-2025:15661" type="rhsa" title="RHSA-2025:15661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22097" id="CVE-2025-22097" type="cve" title="CVE-2025-22097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38332" id="CVE-2025-38332" type="cve" title="CVE-2025-38332"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38352" id="CVE-2025-38352" type="cve" title="CVE-2025-38352"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38449" id="CVE-2025-38449" type="cve" title="CVE-2025-38449"/>
      <reference href="https://bugzilla.redhat.com/2360223" id="2360223" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379246" id="2379246" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382581" id="2382581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383519" id="2383519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15661.html" id="ALSA-2025:15661" type="self" title="ALSA-2025:15661"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3-perf" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.42.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">0ef89b10b8db3e4a14a3675b69fed8a779c0d688fff8f54fa3914f226f493b90</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.42.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">1712df898ca891a7f406f935de024e55c0ba10ffb91dc198b0fd45d8529e4fc7</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.42.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">52d9a53baf9dc9ce0041a10b8c7c27b25f2ffdb3af332075217dd52e0571e63e</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.42.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">6fa74cae5016c75a7a0bf67ce8a134d3553b7ab9bbf0cc36c6cbca3cdb672e3f</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.42.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">70a3ca4e3f6888f412a44a6be4b04a830b24fb6c4dae62f50ca6619e4932de8f</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.42.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">73c32cf6a6c1ac35c8d7473b1c49fecdf157557a20d8945e1367f95e25c9d8fd</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>rv-5.14.0-570.42.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">8c144d8271d3c3c0db2f02a528d77be9c156fbeead56f424219960999d16db62</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>perf-5.14.0-570.42.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">9b48b6631ead45705a4e07c7ce97b3ff103a27fe2a6548b734d081aafc390386</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.42.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">a12d3a156b46ea3bf3c4d5298ff943e0d39f7a9e9fd1ccf820de99d76bb6603f</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.42.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">b9cf37ea0bcc77c594ecdbc7d2bd4f3ec5d2dcc7a762e0caed86f1129c4962ce</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.42.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">bfb70ce96c24c59eb0d04259b21f5423708a542984b93c6981558c8e4418b500</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.42.2.el9_6.noarch.rpm</filename>
          <sum type="sha256">f7bc78813a004899da727b4dd8be03626f975f3d67b0b16f2dd5d36687253eac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15700</id>
    <title>Important: cups security update</title>
    <issued date="2025-09-11 00:00:00"/>
    <updated date="2025-09-29 08:59:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for  
Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


(CVE-2025-58364)  

  * cups: Authentication Bypass in CUPS Authorization Handling (CVE-2025-58060)


For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE page(s)  
listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15700" id="RHSA-2025:15700" type="rhsa" title="RHSA-2025:15700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58060" id="CVE-2025-58060" type="cve" title="CVE-2025-58060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58364" id="CVE-2025-58364" type="cve" title="CVE-2025-58364"/>
      <reference href="https://bugzilla.redhat.com/2392595" id="2392595" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393078" id="2393078" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15700.html" id="ALSA-2025:15700" type="self" title="ALSA-2025:15700"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="cups-printerapp" version="2.3.3op2" release="33.el9_6.1" epoch="1" arch="s390x" src="cups-2.3.3op2-33.el9_6.1.src.rpm">
          <filename>cups-printerapp-2.3.3op2-33.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">3f235e88b9e7f36ed42a4393d12d5e698c35d052d547b82f24f192455a8dcb40</sum>
        </package>
        <package name="cups-client" version="2.3.3op2" release="33.el9_6.1" epoch="1" arch="s390x" src="cups-2.3.3op2-33.el9_6.1.src.rpm">
          <filename>cups-client-2.3.3op2-33.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">4cbe90ecf935d6b1c553b555f9db4d7fde63fedf4dbccc821fba6c9ba292c010</sum>
        </package>
        <package name="cups-devel" version="2.3.3op2" release="33.el9_6.1" epoch="1" arch="s390x" src="cups-2.3.3op2-33.el9_6.1.src.rpm">
          <filename>cups-devel-2.3.3op2-33.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">5e7bc0e636d966f8848192e79ebbaa94be4ac9f88c792c542139207f97096bfa</sum>
        </package>
        <package name="cups-ipptool" version="2.3.3op2" release="33.el9_6.1" epoch="1" arch="s390x" src="cups-2.3.3op2-33.el9_6.1.src.rpm">
          <filename>cups-ipptool-2.3.3op2-33.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">936eace2a3ee14c20661b9a37fad9271047fa271089c0f75ea1b20f2917360b3</sum>
        </package>
        <package name="cups" version="2.3.3op2" release="33.el9_6.1" epoch="1" arch="s390x" src="cups-2.3.3op2-33.el9_6.1.src.rpm">
          <filename>cups-2.3.3op2-33.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">96f9781b4c0441a00762684075407f2d599cc569efe9b3b4981b16752638b9e7</sum>
        </package>
        <package name="cups-filesystem" version="2.3.3op2" release="33.el9_6.1" epoch="1" arch="noarch" src="cups-2.3.3op2-33.el9_6.1.src.rpm">
          <filename>cups-filesystem-2.3.3op2-33.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">a94d3e4941893f0cadac9947fff905cde01e36b131b04be71758ea8d10ad71e1</sum>
        </package>
        <package name="cups-lpd" version="2.3.3op2" release="33.el9_6.1" epoch="1" arch="s390x" src="cups-2.3.3op2-33.el9_6.1.src.rpm">
          <filename>cups-lpd-2.3.3op2-33.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">e8bfe612ceda36d852938b7825676681f230aedbeb9e4dfe7f9108eab93fa1e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15740</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-15 00:00:00"/>
    <updated date="2025-09-25 08:48:06"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: mcast: Delay put pmc-&gt;idev in mld_del_delrec() (CVE-2025-38550)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15740" id="RHSA-2025:15740" type="rhsa" title="RHSA-2025:15740"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38550" id="CVE-2025-38550" type="cve" title="CVE-2025-38550"/>
      <reference href="https://bugzilla.redhat.com/2388941" id="2388941" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15740.html" id="ALSA-2025:15740" type="self" title="ALSA-2025:15740"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-devel" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.44.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2ef621fba906eea776079c5e5cccf7f333a1dbf7dc0d221621b6c2074b068c89</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.44.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">3c652ff640370fc0178ac170ce2118fde23d3b6baf99d3c8c51d0c5acb7bc98d</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.44.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4bb8d6d7a692b9dcb03f34ba507ea5f386ad263b35897ad0f77cfce2220f524a</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.44.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">64a6748ef3623cc9bc8af8f578fe6c535c4f624399a2597a95baeafaa6488638</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.44.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">6c1f70f5b88aad402395eb6edfd57e837729dc1a7633bdbed03d1dd6bb39caa8</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.44.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">73393dc672d0e6cc14af87410fcc66f5da6a610edb26f8f758d121119f2dd599</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.44.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ad5257f5514cca0f80c44632576d64d3c5893813ea31c12e3cb084e1d8cdcea7</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.44.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c19590f8248605c5f1865ac3031fef83747cf9cdb0a32b1685a1684709ead663</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.44.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e3429fbdd66ca4a261597bf0f8b235056afef81eb158d59cdeef294ba295164c</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.44.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e4bc4f4df0493492f6d513a795af8101043af53c987c33d792646ac95a213300</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.44.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f23f52364b3f6e617709f5ab12260bc793fe290899df3d5dbd196ac0b8e340e2</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.44.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f8482137e2808ec5bf487707dcbc20376204df2cd19442c68bb448d37b0c377c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15887</id>
    <title>Moderate: opentelemetry-collector security update</title>
    <issued date="2025-09-16 00:00:00"/>
    <updated date="2025-09-18 08:42:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opentelemetry-collector security update</summary>
    <description>Collector with the supported components for a AlmaLinux build of OpenTelemetry  

Security Fix(es):  

  * net/[http:](http:) Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15887" id="RHSA-2025:15887" type="rhsa" title="RHSA-2025:15887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4673" id="CVE-2025-4673" type="cve" title="CVE-2025-4673"/>
      <reference href="https://bugzilla.redhat.com/2373305" id="2373305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15887.html" id="ALSA-2025:15887" type="self" title="ALSA-2025:15887"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="opentelemetry-collector" version="0.127.0" release="2.el9_6" epoch="0" arch="s390x" src="opentelemetry-collector-0.127.0-2.el9_6.src.rpm">
          <filename>opentelemetry-collector-0.127.0-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">40953f10987d323965ebae113a509e66f7256b047ff3491579f43e26f7f5de9a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15900</id>
    <title>Important: podman security update</title>
    <issued date="2025-09-16 00:00:00"/>
    <updated date="2025-09-29 08:49:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * podman: Podman kube play command may overwrite host files (CVE-2025-9566)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15900" id="RHSA-2025:15900" type="rhsa" title="RHSA-2025:15900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9566" id="CVE-2025-9566" type="cve" title="CVE-2025-9566"/>
      <reference href="https://bugzilla.redhat.com/2393152" id="2393152" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15900.html" id="ALSA-2025:15900" type="self" title="ALSA-2025:15900"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="podman-docker" version="5.4.0" release="13.el9_6" epoch="5" arch="noarch" src="podman-5.4.0-13.el9_6.src.rpm">
          <filename>podman-docker-5.4.0-13.el9_6.noarch.rpm</filename>
          <sum type="sha256">00097c1b5ff2323445184634f46b33225ad2456dc40c04106a02f60e4c886536</sum>
        </package>
        <package name="podman-plugins" version="5.4.0" release="13.el9_6" epoch="5" arch="s390x" src="podman-5.4.0-13.el9_6.src.rpm">
          <filename>podman-plugins-5.4.0-13.el9_6.s390x.rpm</filename>
          <sum type="sha256">777654f463baeb05db6703e81583b874a3e9c727a8868f3c71490c5dad3998c6</sum>
        </package>
        <package name="podman-remote" version="5.4.0" release="13.el9_6" epoch="5" arch="s390x" src="podman-5.4.0-13.el9_6.src.rpm">
          <filename>podman-remote-5.4.0-13.el9_6.s390x.rpm</filename>
          <sum type="sha256">b286cb05c6479908bd6e1b561c7b46c707dfbfd6b8884ebee38fac88c127632b</sum>
        </package>
        <package name="podman" version="5.4.0" release="13.el9_6" epoch="5" arch="s390x" src="podman-5.4.0-13.el9_6.src.rpm">
          <filename>podman-5.4.0-13.el9_6.s390x.rpm</filename>
          <sum type="sha256">c54464f881e646ed6979b0fc0093de0a17d8909367c6eefab0a6ab4f75ad45f5</sum>
        </package>
        <package name="podman-tests" version="5.4.0" release="13.el9_6" epoch="5" arch="s390x" src="podman-5.4.0-13.el9_6.src.rpm">
          <filename>podman-tests-5.4.0-13.el9_6.s390x.rpm</filename>
          <sum type="sha256">d46a222aa94f88a04b068ffa868df893d0a2e48c96a748f0ed489e40e90e6ecf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16046</id>
    <title>Moderate: mysql:8.4 security update</title>
    <issued date="2025-09-17 00:00:00"/>
    <updated date="2025-09-18 08:40:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * openssl: Timing side-channel in ECDSA signature computation (CVE-2024-13176)
  * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688)
  * mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699)
  * mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683)
  * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715)
  * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585)
  * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21588)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687)
  * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580)
  * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30696)
  * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30705)
  * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21575)
  * mysql: Options unspecified vulnerability (CPU Apr 2025) (CVE-2025-21579)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30685)
  * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30704)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21581)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30689)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30695)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30703)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
  * mysql: DDL unspecified vulnerability (CPU Apr 2025) (CVE-2025-21584)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30684)
  * curl: libcurl: WebSocket endless loop (CVE-2025-5399)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50092)
  * mysql: mysqldump unspecified vulnerability (CPU Jul 2025) (CVE-2025-50081)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50079)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50077)
  * mysql: DML unspecified vulnerability (CPU Jul 2025) (CVE-2025-50078)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50091)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50101)
  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50093)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50099)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50085)
  * mysql: Components Services unspecified vulnerability (CPU Jul 2025) (CVE-2025-50086)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50082)
  * mysql: Encryption unspecified vulnerability (CPU Jul 2025) (CVE-2025-50097)
  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50104)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50087)
  * mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) (CVE-2025-50080)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50088)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50083)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50084)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) (CVE-2025-50100)
  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50094)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50098)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50096)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50102)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16046" id="RHSA-2025:16046" type="rhsa" title="RHSA-2025:16046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-13176" id="CVE-2024-13176" type="cve" title="CVE-2024-13176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21574" id="CVE-2025-21574" type="cve" title="CVE-2025-21574"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21575" id="CVE-2025-21575" type="cve" title="CVE-2025-21575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21577" id="CVE-2025-21577" type="cve" title="CVE-2025-21577"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21579" id="CVE-2025-21579" type="cve" title="CVE-2025-21579"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21580" id="CVE-2025-21580" type="cve" title="CVE-2025-21580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21581" id="CVE-2025-21581" type="cve" title="CVE-2025-21581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21584" id="CVE-2025-21584" type="cve" title="CVE-2025-21584"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21585" id="CVE-2025-21585" type="cve" title="CVE-2025-21585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21588" id="CVE-2025-21588" type="cve" title="CVE-2025-21588"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30681" id="CVE-2025-30681" type="cve" title="CVE-2025-30681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30682" id="CVE-2025-30682" type="cve" title="CVE-2025-30682"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30683" id="CVE-2025-30683" type="cve" title="CVE-2025-30683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30684" id="CVE-2025-30684" type="cve" title="CVE-2025-30684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30685" id="CVE-2025-30685" type="cve" title="CVE-2025-30685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30687" id="CVE-2025-30687" type="cve" title="CVE-2025-30687"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30688" id="CVE-2025-30688" type="cve" title="CVE-2025-30688"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30689" id="CVE-2025-30689" type="cve" title="CVE-2025-30689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30693" id="CVE-2025-30693" type="cve" title="CVE-2025-30693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30695" id="CVE-2025-30695" type="cve" title="CVE-2025-30695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30696" id="CVE-2025-30696" type="cve" title="CVE-2025-30696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30699" id="CVE-2025-30699" type="cve" title="CVE-2025-30699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30703" id="CVE-2025-30703" type="cve" title="CVE-2025-30703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30704" id="CVE-2025-30704" type="cve" title="CVE-2025-30704"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30705" id="CVE-2025-30705" type="cve" title="CVE-2025-30705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30715" id="CVE-2025-30715" type="cve" title="CVE-2025-30715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30721" id="CVE-2025-30721" type="cve" title="CVE-2025-30721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30722" id="CVE-2025-30722" type="cve" title="CVE-2025-30722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50077" id="CVE-2025-50077" type="cve" title="CVE-2025-50077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50078" id="CVE-2025-50078" type="cve" title="CVE-2025-50078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50079" id="CVE-2025-50079" type="cve" title="CVE-2025-50079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50080" id="CVE-2025-50080" type="cve" title="CVE-2025-50080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50081" id="CVE-2025-50081" type="cve" title="CVE-2025-50081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50082" id="CVE-2025-50082" type="cve" title="CVE-2025-50082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50083" id="CVE-2025-50083" type="cve" title="CVE-2025-50083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50084" id="CVE-2025-50084" type="cve" title="CVE-2025-50084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50085" id="CVE-2025-50085" type="cve" title="CVE-2025-50085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50086" id="CVE-2025-50086" type="cve" title="CVE-2025-50086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50087" id="CVE-2025-50087" type="cve" title="CVE-2025-50087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50088" id="CVE-2025-50088" type="cve" title="CVE-2025-50088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50091" id="CVE-2025-50091" type="cve" title="CVE-2025-50091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50092" id="CVE-2025-50092" type="cve" title="CVE-2025-50092"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50093" id="CVE-2025-50093" type="cve" title="CVE-2025-50093"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50094" id="CVE-2025-50094" type="cve" title="CVE-2025-50094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50096" id="CVE-2025-50096" type="cve" title="CVE-2025-50096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50097" id="CVE-2025-50097" type="cve" title="CVE-2025-50097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50098" id="CVE-2025-50098" type="cve" title="CVE-2025-50098"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50099" id="CVE-2025-50099" type="cve" title="CVE-2025-50099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50100" id="CVE-2025-50100" type="cve" title="CVE-2025-50100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50101" id="CVE-2025-50101" type="cve" title="CVE-2025-50101"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50102" id="CVE-2025-50102" type="cve" title="CVE-2025-50102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50104" id="CVE-2025-50104" type="cve" title="CVE-2025-50104"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5399" id="CVE-2025-5399" type="cve" title="CVE-2025-5399"/>
      <reference href="https://bugzilla.redhat.com/2359885" id="2359885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359888" id="2359888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359892" id="2359892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359894" id="2359894" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359895" id="2359895" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359899" id="2359899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359900" id="2359900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359902" id="2359902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359903" id="2359903" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359911" id="2359911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359918" id="2359918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359920" id="2359920" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359924" id="2359924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359928" id="2359928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359930" id="2359930" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359932" id="2359932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359934" id="2359934" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359938" id="2359938" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359940" id="2359940" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359943" id="2359943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359944" id="2359944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359945" id="2359945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359947" id="2359947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359950" id="2359950" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359963" id="2359963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359964" id="2359964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359972" id="2359972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370920" id="2370920" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380264" id="2380264" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380273" id="2380273" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380274" id="2380274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380278" id="2380278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380280" id="2380280" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380283" id="2380283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380284" id="2380284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380290" id="2380290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380291" id="2380291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380295" id="2380295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380298" id="2380298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380306" id="2380306" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380308" id="2380308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380309" id="2380309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380310" id="2380310" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380312" id="2380312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380313" id="2380313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380320" id="2380320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380321" id="2380321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380322" id="2380322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380326" id="2380326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380327" id="2380327" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380334" id="2380334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380335" id="2380335" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16046.html" id="ALSA-2025:16046" type="self" title="ALSA-2025:16046"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <module name="mysql" stream="8.4" version="9060020250917143140" context="8cf767d6" arch="s390x"/>
        <package name="mysql-devel" version="8.4.6" release="1.module_el9.6.0+180+a4e757e5" epoch="0" arch="s390x" src="mysql-8.4.6-1.module_el9.6.0+180+a4e757e5.src.rpm">
          <filename>mysql-devel-8.4.6-1.module_el9.6.0+180+a4e757e5.s390x.rpm</filename>
          <sum type="sha256">1ea43775a7def6359265d4a82924b97d16fb422ea25dbf11205742cff3351250</sum>
        </package>
        <package name="mysql-errmsg" version="8.4.6" release="1.module_el9.6.0+180+a4e757e5" epoch="0" arch="noarch" src="mysql-8.4.6-1.module_el9.6.0+180+a4e757e5.src.rpm">
          <filename>mysql-errmsg-8.4.6-1.module_el9.6.0+180+a4e757e5.noarch.rpm</filename>
          <sum type="sha256">321197f9d190ca05280a2668fd97836928925ecf0eea8c2688b8b3c68a7e8264</sum>
        </package>
        <package name="mysql-common" version="8.4.6" release="1.module_el9.6.0+180+a4e757e5" epoch="0" arch="noarch" src="mysql-8.4.6-1.module_el9.6.0+180+a4e757e5.src.rpm">
          <filename>mysql-common-8.4.6-1.module_el9.6.0+180+a4e757e5.noarch.rpm</filename>
          <sum type="sha256">4efc97279a47c73709b3d728fa707714260e15242037235fb0bd9ab6e05edb31</sum>
        </package>
        <package name="mysql-server" version="8.4.6" release="1.module_el9.6.0+180+a4e757e5" epoch="0" arch="s390x" src="mysql-8.4.6-1.module_el9.6.0+180+a4e757e5.src.rpm">
          <filename>mysql-server-8.4.6-1.module_el9.6.0+180+a4e757e5.s390x.rpm</filename>
          <sum type="sha256">63009b0195e8e3d09ac0294913423e86b7f803fb392f1460ddc140579be14252</sum>
        </package>
        <package name="mecab" version="0.996" release="3.module_el9.6.0+152+8cbce00c.4" epoch="0" arch="s390x" src="mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.src.rpm">
          <filename>mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm</filename>
          <sum type="sha256">69e976d54c4bc862ea946aa1957a4af06ba625136f6734651e78787b4180585a</sum>
        </package>
        <package name="mysql" version="8.4.6" release="1.module_el9.6.0+180+a4e757e5" epoch="0" arch="s390x" src="mysql-8.4.6-1.module_el9.6.0+180+a4e757e5.src.rpm">
          <filename>mysql-8.4.6-1.module_el9.6.0+180+a4e757e5.s390x.rpm</filename>
          <sum type="sha256">78610de9fc29fcf1fab0978ab5b6aedc6f7f3fac5e1160246fbcee062e886b90</sum>
        </package>
        <package name="mysql-test" version="8.4.6" release="1.module_el9.6.0+180+a4e757e5" epoch="0" arch="s390x" src="mysql-8.4.6-1.module_el9.6.0+180+a4e757e5.src.rpm">
          <filename>mysql-test-8.4.6-1.module_el9.6.0+180+a4e757e5.s390x.rpm</filename>
          <sum type="sha256">7fd3b032506e0eea88473c0619f11310cbd2b6800b1acd4422a4d4c5ee0af6c9</sum>
        </package>
        <package name="rapidjson-devel" version="1.1.0" release="19.module_el9.6.0+152+8cbce00c" epoch="0" arch="s390x" src="rapidjson-1.1.0-19.module_el9.6.0+152+8cbce00c.src.rpm">
          <filename>rapidjson-devel-1.1.0-19.module_el9.6.0+152+8cbce00c.s390x.rpm</filename>
          <sum type="sha256">8c0a757ea82924ecf340e621f29cb6d7322ebd996c0b7e05116c51486e2b6c37</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="24.module_el9.6.0+152+8cbce00c" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm</filename>
          <sum type="sha256">a6a291c26e1b08f26ceec3afe3bb4650cb21e203ce04cff2350db34cbd12e24d</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="24.module_el9.6.0+152+8cbce00c" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm</filename>
          <sum type="sha256">bad50cf06e6ea4327ddfa8063a98361e493a8fe7dcf921be55ba12177dac540e</sum>
        </package>
        <package name="mecab-devel" version="0.996" release="3.module_el9.6.0+152+8cbce00c.4" epoch="0" arch="s390x" src="mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.src.rpm">
          <filename>mecab-devel-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm</filename>
          <sum type="sha256">ce7c078f962fd614387a5a86f7b229eb57758d44e95f0f1ad2cd522019019b61</sum>
        </package>
        <package name="mysql-libs" version="8.4.6" release="1.module_el9.6.0+180+a4e757e5" epoch="0" arch="s390x" src="mysql-8.4.6-1.module_el9.6.0+180+a4e757e5.src.rpm">
          <filename>mysql-libs-8.4.6-1.module_el9.6.0+180+a4e757e5.s390x.rpm</filename>
          <sum type="sha256">d4544f4f6c7cabe1b1a998be3e7a95910ead5f5f68bd046e20b23480d8f4cc69</sum>
        </package>
        <package name="mysql-test-data" version="8.4.6" release="1.module_el9.6.0+180+a4e757e5" epoch="0" arch="noarch" src="mysql-8.4.6-1.module_el9.6.0+180+a4e757e5.src.rpm">
          <filename>mysql-test-data-8.4.6-1.module_el9.6.0+180+a4e757e5.noarch.rpm</filename>
          <sum type="sha256">e1e88dcf6959c62bf9ed1994a84293a3b5d0666380b0ceef5e23c91b3d085b85</sum>
        </package>
        <package name="rapidjson-doc" version="1.1.0" release="19.module_el9.6.0+152+8cbce00c" epoch="0" arch="noarch" src="rapidjson-1.1.0-19.module_el9.6.0+152+8cbce00c.src.rpm">
          <filename>rapidjson-doc-1.1.0-19.module_el9.6.0+152+8cbce00c.noarch.rpm</filename>
          <sum type="sha256">f8ffc9a3a68b1ff128217cd41887db70007c1f69467c915cb92a8c754102e0d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16086</id>
    <title>Moderate: mysql security update</title>
    <issued date="2025-09-17 00:00:00"/>
    <updated date="2025-09-29 08:50:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688)
  * mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699)
  * mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683)
  * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715)
  * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687)
  * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580)
  * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30696)
  * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30705)
  * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21575)
  * mysql: Options unspecified vulnerability (CPU Apr 2025) (CVE-2025-21579)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30685)
  * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30704)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21581)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30689)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30695)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30703)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
  * mysql: DDL unspecified vulnerability (CPU Apr 2025) (CVE-2025-21584)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30684)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50092)
  * mysql: mysqldump unspecified vulnerability (CPU Jul 2025) (CVE-2025-50081)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50079)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50077)
  * mysql: DML unspecified vulnerability (CPU Jul 2025) (CVE-2025-50078)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50091)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50101)
  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50093)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50099)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50085)
  * mysql: Components Services unspecified vulnerability (CPU Jul 2025) (CVE-2025-50086)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50082)
  * mysql: Encryption unspecified vulnerability (CPU Jul 2025) (CVE-2025-50097)
  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50104)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50087)
  * mysql: Replication unspecified vulnerability (CPU Jul 2025) (CVE-2025-53023)
  * mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) (CVE-2025-50080)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50088)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50083)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50084)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) (CVE-2025-50100)
  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50094)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50098)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50096)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50102)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16086" id="RHSA-2025:16086" type="rhsa" title="RHSA-2025:16086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21574" id="CVE-2025-21574" type="cve" title="CVE-2025-21574"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21575" id="CVE-2025-21575" type="cve" title="CVE-2025-21575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21577" id="CVE-2025-21577" type="cve" title="CVE-2025-21577"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21579" id="CVE-2025-21579" type="cve" title="CVE-2025-21579"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21580" id="CVE-2025-21580" type="cve" title="CVE-2025-21580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21581" id="CVE-2025-21581" type="cve" title="CVE-2025-21581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21584" id="CVE-2025-21584" type="cve" title="CVE-2025-21584"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21585" id="CVE-2025-21585" type="cve" title="CVE-2025-21585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30681" id="CVE-2025-30681" type="cve" title="CVE-2025-30681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30682" id="CVE-2025-30682" type="cve" title="CVE-2025-30682"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30683" id="CVE-2025-30683" type="cve" title="CVE-2025-30683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30684" id="CVE-2025-30684" type="cve" title="CVE-2025-30684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30685" id="CVE-2025-30685" type="cve" title="CVE-2025-30685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30687" id="CVE-2025-30687" type="cve" title="CVE-2025-30687"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30688" id="CVE-2025-30688" type="cve" title="CVE-2025-30688"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30689" id="CVE-2025-30689" type="cve" title="CVE-2025-30689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30693" id="CVE-2025-30693" type="cve" title="CVE-2025-30693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30695" id="CVE-2025-30695" type="cve" title="CVE-2025-30695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30696" id="CVE-2025-30696" type="cve" title="CVE-2025-30696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30699" id="CVE-2025-30699" type="cve" title="CVE-2025-30699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30703" id="CVE-2025-30703" type="cve" title="CVE-2025-30703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30704" id="CVE-2025-30704" type="cve" title="CVE-2025-30704"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30705" id="CVE-2025-30705" type="cve" title="CVE-2025-30705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30715" id="CVE-2025-30715" type="cve" title="CVE-2025-30715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30721" id="CVE-2025-30721" type="cve" title="CVE-2025-30721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30722" id="CVE-2025-30722" type="cve" title="CVE-2025-30722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50077" id="CVE-2025-50077" type="cve" title="CVE-2025-50077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50078" id="CVE-2025-50078" type="cve" title="CVE-2025-50078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50079" id="CVE-2025-50079" type="cve" title="CVE-2025-50079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50080" id="CVE-2025-50080" type="cve" title="CVE-2025-50080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50081" id="CVE-2025-50081" type="cve" title="CVE-2025-50081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50082" id="CVE-2025-50082" type="cve" title="CVE-2025-50082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50083" id="CVE-2025-50083" type="cve" title="CVE-2025-50083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50084" id="CVE-2025-50084" type="cve" title="CVE-2025-50084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50085" id="CVE-2025-50085" type="cve" title="CVE-2025-50085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50086" id="CVE-2025-50086" type="cve" title="CVE-2025-50086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50087" id="CVE-2025-50087" type="cve" title="CVE-2025-50087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50088" id="CVE-2025-50088" type="cve" title="CVE-2025-50088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50091" id="CVE-2025-50091" type="cve" title="CVE-2025-50091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50092" id="CVE-2025-50092" type="cve" title="CVE-2025-50092"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50093" id="CVE-2025-50093" type="cve" title="CVE-2025-50093"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50094" id="CVE-2025-50094" type="cve" title="CVE-2025-50094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50096" id="CVE-2025-50096" type="cve" title="CVE-2025-50096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50097" id="CVE-2025-50097" type="cve" title="CVE-2025-50097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50098" id="CVE-2025-50098" type="cve" title="CVE-2025-50098"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50099" id="CVE-2025-50099" type="cve" title="CVE-2025-50099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50100" id="CVE-2025-50100" type="cve" title="CVE-2025-50100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50101" id="CVE-2025-50101" type="cve" title="CVE-2025-50101"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50102" id="CVE-2025-50102" type="cve" title="CVE-2025-50102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50104" id="CVE-2025-50104" type="cve" title="CVE-2025-50104"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53023" id="CVE-2025-53023" type="cve" title="CVE-2025-53023"/>
      <reference href="https://bugzilla.redhat.com/2359885" id="2359885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359888" id="2359888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359892" id="2359892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359894" id="2359894" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359895" id="2359895" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359899" id="2359899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359900" id="2359900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359902" id="2359902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359903" id="2359903" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359918" id="2359918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359920" id="2359920" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359924" id="2359924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359928" id="2359928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359930" id="2359930" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359932" id="2359932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359934" id="2359934" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359938" id="2359938" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359940" id="2359940" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359943" id="2359943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359944" id="2359944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359945" id="2359945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359947" id="2359947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359950" id="2359950" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359963" id="2359963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359964" id="2359964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359972" id="2359972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380264" id="2380264" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380273" id="2380273" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380274" id="2380274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380278" id="2380278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380280" id="2380280" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380283" id="2380283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380284" id="2380284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380290" id="2380290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380291" id="2380291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380295" id="2380295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380298" id="2380298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380306" id="2380306" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380308" id="2380308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380309" id="2380309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380310" id="2380310" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380311" id="2380311" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380312" id="2380312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380313" id="2380313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380320" id="2380320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380321" id="2380321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380322" id="2380322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380326" id="2380326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380327" id="2380327" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380334" id="2380334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380335" id="2380335" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16086.html" id="ALSA-2025:16086" type="self" title="ALSA-2025:16086"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="mysql" version="8.0.43" release="1.el9_6" epoch="0" arch="s390x" src="mysql-8.0.43-1.el9_6.src.rpm">
          <filename>mysql-8.0.43-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">657b36060e630dd83cc4c500e462d9bebfc5166d7c468c2693cabe4bf53c66b1</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.43" release="1.el9_6" epoch="0" arch="s390x" src="mysql-8.0.43-1.el9_6.src.rpm">
          <filename>mysql-errmsg-8.0.43-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">889b7c30939248d75d1ebc06835d96ad2bcc486ae236c0da20bd34d8235189ec</sum>
        </package>
        <package name="mysql-server" version="8.0.43" release="1.el9_6" epoch="0" arch="s390x" src="mysql-8.0.43-1.el9_6.src.rpm">
          <filename>mysql-server-8.0.43-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">aa58a3bdfbadc8c83528fba72a6a7b1d8969eb8c4394c26e74609288743f4ca9</sum>
        </package>
        <package name="mysql-common" version="8.0.43" release="1.el9_6" epoch="0" arch="s390x" src="mysql-8.0.43-1.el9_6.src.rpm">
          <filename>mysql-common-8.0.43-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">abb166554bb5555468816ef42d89d31f3760755b434e7e392d813c109be8392a</sum>
        </package>
        <package name="mysql-libs" version="8.0.43" release="1.el9_6" epoch="0" arch="s390x" src="mysql-8.0.43-1.el9_6.src.rpm">
          <filename>mysql-libs-8.0.43-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ee6112407190b6205d66e06ac866fd0d96791be644dfa9cde586a609b5cee661</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16108</id>
    <title>Important: firefox security update</title>
    <issued date="2025-09-17 00:00:00"/>
    <updated date="2025-09-29 08:52:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component (CVE-2025-10527)
  * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component (CVE-2025-10532)
  * firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component (CVE-2025-10528)
  * firefox: thunderbird: Same-origin policy bypass in the Layout component (CVE-2025-10529)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 (CVE-2025-10537)
  * firefox: thunderbird: Information disclosure in the Networking: Cache component (CVE-2025-10536)
  * firefox: thunderbird: Integer overflow in the SVG component (CVE-2025-10533)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16108" id="RHSA-2025:16108" type="rhsa" title="RHSA-2025:16108"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10527" id="CVE-2025-10527" type="cve" title="CVE-2025-10527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10528" id="CVE-2025-10528" type="cve" title="CVE-2025-10528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10529" id="CVE-2025-10529" type="cve" title="CVE-2025-10529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10532" id="CVE-2025-10532" type="cve" title="CVE-2025-10532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10533" id="CVE-2025-10533" type="cve" title="CVE-2025-10533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10536" id="CVE-2025-10536" type="cve" title="CVE-2025-10536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10537" id="CVE-2025-10537" type="cve" title="CVE-2025-10537"/>
      <reference href="https://bugzilla.redhat.com/2395745" id="2395745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395754" id="2395754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395755" id="2395755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395756" id="2395756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395759" id="2395759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395764" id="2395764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395766" id="2395766" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16108.html" id="ALSA-2025:16108" type="self" title="ALSA-2025:16108"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="firefox-x11" version="140.3.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-140.3.0-1.el9_6.alma.1.src.rpm">
          <filename>firefox-x11-140.3.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">06b3b9a7421fdbf82fed2f5640b3809ff43dcb4a35707922ce4f2b7d244bb395</sum>
        </package>
        <package name="firefox" version="140.3.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-140.3.0-1.el9_6.alma.1.src.rpm">
          <filename>firefox-140.3.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">e6c449c12533b8da74ca1e329415c0c72279302bc99e7c83df837d75dd324964</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16116</id>
    <title>Moderate: gnutls security, bug fix, and enhancement update</title>
    <issued date="2025-09-17 00:00:00"/>
    <updated date="2025-09-29 08:47:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security, bug fix, and enhancement update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.  

Security Fix(es):  

  * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)
  * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)
  * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)
  * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)


Bug Fix(es) and Enhancement(s):  

  * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)
  * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)
  * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)
  * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16116" id="RHSA-2025:16116" type="rhsa" title="RHSA-2025:16116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32988" id="CVE-2025-32988" type="cve" title="CVE-2025-32988"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32989" id="CVE-2025-32989" type="cve" title="CVE-2025-32989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32990" id="CVE-2025-32990" type="cve" title="CVE-2025-32990"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6395" id="CVE-2025-6395" type="cve" title="CVE-2025-6395"/>
      <reference href="https://bugzilla.redhat.com/2359620" id="2359620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359621" id="2359621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359622" id="2359622" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376755" id="2376755" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16116.html" id="ALSA-2025:16116" type="self" title="ALSA-2025:16116"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="gnutls-dane" version="3.8.3" release="6.el9_6.2" epoch="0" arch="s390x" src="gnutls-3.8.3-6.el9_6.2.src.rpm">
          <filename>gnutls-dane-3.8.3-6.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">0b2cae36a163bbba971aed531194ae79a9a799d2c701917190199b25e07df22e</sum>
        </package>
        <package name="gnutls-c++" version="3.8.3" release="6.el9_6.2" epoch="0" arch="s390x" src="gnutls-3.8.3-6.el9_6.2.src.rpm">
          <filename>gnutls-c++-3.8.3-6.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">a61c1305420def423e09b261b743ac1976890a8c49e8d1e24ff1087531799071</sum>
        </package>
        <package name="gnutls-devel" version="3.8.3" release="6.el9_6.2" epoch="0" arch="s390x" src="gnutls-3.8.3-6.el9_6.2.src.rpm">
          <filename>gnutls-devel-3.8.3-6.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">aef80a336f54495c98097a0e4c14110c71efed2ceead3fff21cc2a1164098eaf</sum>
        </package>
        <package name="gnutls-utils" version="3.8.3" release="6.el9_6.2" epoch="0" arch="s390x" src="gnutls-3.8.3-6.el9_6.2.src.rpm">
          <filename>gnutls-utils-3.8.3-6.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">ea4eac035958d263b76e1439d6525602bda9473fd7d516e4922035d283dcc4b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1613</id>
    <title>Important: nodejs:22 security update</title>
    <issued date="2025-02-17 00:00:00"/>
    <updated date="2025-02-18 12:04:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)
  * nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)
  * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1613" id="RHSA-2025:1613" type="rhsa" title="RHSA-2025:1613"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22150" id="CVE-2025-22150" type="cve" title="CVE-2025-22150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23083" id="CVE-2025-23083" type="cve" title="CVE-2025-23083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23085" id="CVE-2025-23085" type="cve" title="CVE-2025-23085"/>
      <reference href="https://bugzilla.redhat.com/2339176" id="2339176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339392" id="2339392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2342618" id="2342618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1613.html" id="ALSA-2025:1613" type="self" title="ALSA-2025:1613"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="nodejs" stream="18" version="9050020250214042843" context="8cf767d6" arch="s390x"/>
        <package name="npm" version="10.9.2" release="1.22.13.1.1.module_el9.5.0+139+09296491" epoch="1" arch="s390x" src="nodejs-22.13.1-1.module_el9.5.0+139+09296491.src.rpm">
          <filename>npm-10.9.2-1.22.13.1.1.module_el9.5.0+139+09296491.s390x.rpm</filename>
          <sum type="sha256">059dfeb132d92a36ef2e6e5d7726c32fc852850a711a17bb2386f872619ffada</sum>
        </package>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.13.1.1.module_el9.5.0+139+09296491" epoch="3" arch="s390x" src="nodejs-22.13.1-1.module_el9.5.0+139+09296491.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.13.1.1.module_el9.5.0+139+09296491.s390x.rpm</filename>
          <sum type="sha256">21f02213f34e914316103f40d5db10b2feb329f3b9b8e24da31765d518eac615</sum>
        </package>
        <package name="nodejs-full-i18n" version="22.13.1" release="1.module_el9.5.0+139+09296491" epoch="1" arch="s390x" src="nodejs-22.13.1-1.module_el9.5.0+139+09296491.src.rpm">
          <filename>nodejs-full-i18n-22.13.1-1.module_el9.5.0+139+09296491.s390x.rpm</filename>
          <sum type="sha256">2c9cdd3d7d8dd15a28977830c074e17b5768dffd50183328c10217a77ae0eb4d</sum>
        </package>
        <package name="nodejs-devel" version="22.13.1" release="1.module_el9.5.0+139+09296491" epoch="1" arch="s390x" src="nodejs-22.13.1-1.module_el9.5.0+139+09296491.src.rpm">
          <filename>nodejs-devel-22.13.1-1.module_el9.5.0+139+09296491.s390x.rpm</filename>
          <sum type="sha256">2d85f0e4b2280370acfb41474e53982098f04d68401d7012769a04a97496b0a8</sum>
        </package>
        <package name="nodejs" version="22.13.1" release="1.module_el9.5.0+139+09296491" epoch="1" arch="s390x" src="nodejs-22.13.1-1.module_el9.5.0+139+09296491.src.rpm">
          <filename>nodejs-22.13.1-1.module_el9.5.0+139+09296491.s390x.rpm</filename>
          <sum type="sha256">44a4b604666a6e8416ec658ba46004e52d90970154eca3c908f9a3edaf2d9429</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.5.0+139+09296491" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.5.0+139+09296491.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm</filename>
          <sum type="sha256">8d55336a92da679c52d1360312b8a8816a753687bce70e3efcb80ca181d76662</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.5.0+136+92f38f3c" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.5.0+136+92f38f3c.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.5.0+136+92f38f3c.noarch.rpm</filename>
          <sum type="sha256">9568f3f288eb90ba5d978da40785d16e3210b65e92276e8ca17b6d88a3339c1b</sum>
        </package>
        <package name="nodejs-docs" version="22.13.1" release="1.module_el9.5.0+139+09296491" epoch="1" arch="noarch" src="nodejs-22.13.1-1.module_el9.5.0+139+09296491.src.rpm">
          <filename>nodejs-docs-22.13.1-1.module_el9.5.0+139+09296491.noarch.rpm</filename>
          <sum type="sha256">9ceb6b255ac8e0ab31086f29fe4215ec55497fa486c2df07985cdb83c7035025</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.5.0+136+92f38f3c" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.5.0+136+92f38f3c.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.5.0+136+92f38f3c.noarch.rpm</filename>
          <sum type="sha256">bfb954cf0a070014a29b11e53507cb0f05b992c7e1bf6cb568840bb815dca58e</sum>
        </package>
        <package name="nodejs-libs" version="22.13.1" release="1.module_el9.5.0+139+09296491" epoch="1" arch="s390x" src="nodejs-22.13.1-1.module_el9.5.0+139+09296491.src.rpm">
          <filename>nodejs-libs-22.13.1-1.module_el9.5.0+139+09296491.s390x.rpm</filename>
          <sum type="sha256">e3d8a3112674eafde2c96794429a8ad69745afeec292e5e767d2c3b919ed466c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16156</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-09-18 00:00:00"/>
    <updated date="2025-09-26 11:14:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component (CVE-2025-10527)
  * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component (CVE-2025-10532)
  * firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component (CVE-2025-10528)
  * firefox: thunderbird: Same-origin policy bypass in the Layout component (CVE-2025-10529)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 (CVE-2025-10537)
  * firefox: thunderbird: Information disclosure in the Networking: Cache component (CVE-2025-10536)
  * firefox: thunderbird: Integer overflow in the SVG component (CVE-2025-10533)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16156" id="RHSA-2025:16156" type="rhsa" title="RHSA-2025:16156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10527" id="CVE-2025-10527" type="cve" title="CVE-2025-10527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10528" id="CVE-2025-10528" type="cve" title="CVE-2025-10528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10529" id="CVE-2025-10529" type="cve" title="CVE-2025-10529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10532" id="CVE-2025-10532" type="cve" title="CVE-2025-10532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10533" id="CVE-2025-10533" type="cve" title="CVE-2025-10533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10536" id="CVE-2025-10536" type="cve" title="CVE-2025-10536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10537" id="CVE-2025-10537" type="cve" title="CVE-2025-10537"/>
      <reference href="https://bugzilla.redhat.com/2395745" id="2395745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395754" id="2395754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395755" id="2395755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395756" id="2395756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395759" id="2395759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395764" id="2395764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395766" id="2395766" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16156.html" id="ALSA-2025:16156" type="self" title="ALSA-2025:16156"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="thunderbird" version="140.3.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="thunderbird-140.3.0-1.el9_6.alma.1.src.rpm">
          <filename>thunderbird-140.3.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">7618b734fe29e1f04a380bcbf7f52e5f466ed3027cd889035dcaa0dc3d92fc02</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16398</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-22 00:00:00"/>
    <updated date="2025-09-29 08:44:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: usb: smsc75xx: Limit packet length to skb-&gt;len (CVE-2023-53125)
  * kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length (CVE-2025-37810)
  * kernel: do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498)
  * kernel: s390/sclp: Fix SCCB present check (CVE-2025-39694)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16398" id="RHSA-2025:16398" type="rhsa" title="RHSA-2025:16398"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53125" id="CVE-2023-53125" type="cve" title="CVE-2023-53125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37810" id="CVE-2025-37810" type="cve" title="CVE-2025-37810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38498" id="CVE-2025-38498" type="cve" title="CVE-2025-38498"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39694" id="CVE-2025-39694" type="cve" title="CVE-2025-39694"/>
      <reference href="https://bugzilla.redhat.com/2363686" id="2363686" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2365028" id="2365028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2384422" id="2384422" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393534" id="2393534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16398.html" id="ALSA-2025:16398" type="self" title="ALSA-2025:16398"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="perf" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.46.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0bffc271de5a1bd9d2b11f9c49b3239c9e2e5cec6e2db4411f1e98cceac47fac</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.46.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1a673b4ecc80b3979a0b1fc7e35c6ae7be551edc7bc8959ba235ad169f1662b9</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.46.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1b0194ab72c8a2919aeb54472a42f5de5f0489e82a288f465c8404738b38723d</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.46.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1c58eafdcef3a13e2e007104081dab32b885b5cace00f08ca19f907767e59f68</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.46.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2d62e93d4eeaee440142c5ee9bffc377420d192f934d9706409ca41181942f1c</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.46.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">38e28e0ba26d69824f0387b807cac20bcecfe02623c03e556553ae1a76ab624d</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.46.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">580d1dbfa43cb4c73719299d7184c9a3ddb912f621743d239df91ac10548c0c6</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.46.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">8840bc58e79eb03b7403d70c43e87b78b6960ef7e49d3a80f5aeb262bd741e6b</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.46.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">952767fb1a88d5da6f3a51c8f96f1d7e49b6f2c0e54ab283202bd78ca99ee5d0</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.46.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">cbdb795a826b1ede378ec803c3393b4c6bfeabf85c4eeddcd2b0452b23f51d77</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.46.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">fc84c5623d1b63e9241626c0aba350644b514c54f895ae1243b76f072febbdf8</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.46.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ff8519c7e951a9baf34d0f7e694cd604cb12021724e5be07bd49ed1fb3d30218</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1659</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-03-04 08:50:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: mm: migrate: fix getting incorrect page mapping during page migration (CVE-2023-52490)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1659" id="RHSA-2025:1659" type="rhsa" title="RHSA-2025:1659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52490" id="CVE-2023-52490" type="cve" title="CVE-2023-52490"/>
      <reference href="https://bugzilla.redhat.com/2269187" id="2269187" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1659.html" id="ALSA-2025:1659" type="self" title="ALSA-2025:1659"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="kernel-doc" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-doc-5.14.0-503.26.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">2479a43804e37810c0b80ca99b70fc4cc46568ba4ed0596b9ee36dd2a8503b2d</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-5.14.0-503.26.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">3c112adae627ebc7fafbcbb70dd29848c743a2995801a97d2392154dabe2ed46</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-503.26.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">42d470a2ec4fa9c2b765dc31d620bb2d825cf1446303c9991fbb41418379bc66</sum>
        </package>
        <package name="perf" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>perf-5.14.0-503.26.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">495dd1ad144c4edd6c0d48f34df6a558e9cbd81aa2d6d83f80c055850118eb07</sum>
        </package>
        <package name="rtla" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>rtla-5.14.0-503.26.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">592b1d65a2036f933bef44dfe1bbf086605ab6b08af27d4bdd3f9aabec537b47</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-headers-5.14.0-503.26.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">b6b77e8bf003a12050aa90afdb3ddcbe87605e0d5163b0fc1e06cc4911631a38</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-503.26.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">b746f29d5c6e74f45d4008cf12c1437c0da27c829366eb250b9f41a557c85427</sum>
        </package>
        <package name="rv" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>rv-5.14.0-503.26.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">bdca3aad897ca84c0bbdf6c44f9299a586d459555060e7afc0d6241efa174eb8</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-devel-matched-5.14.0-503.26.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">d4c1ccef4d66ca3780586c317c934ce19f85d8a723dede771f2a473814bb369b</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-devel-5.14.0-503.26.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">d5c8dd979ba4392f84b5c32dcf22e5954a445e15f952d9d14ed5978cdbd998b8</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-503.26.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">e6566c6f62d9c60751e112933d0929ca7efcace210b48449f601ec9602ad353b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1670</id>
    <title>Important: bind9.18 security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-02-24 10:51:27"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.18 security update</summary>
    <description>BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  

Security Fix(es):  

  * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)
  * bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load (CVE-2024-12705)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1670" id="RHSA-2025:1670" type="rhsa" title="RHSA-2025:1670"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11187" id="CVE-2024-11187" type="cve" title="CVE-2024-11187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12705" id="CVE-2024-12705" type="cve" title="CVE-2024-12705"/>
      <reference href="https://bugzilla.redhat.com/2342879" id="2342879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2342880" id="2342880" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1670.html" id="ALSA-2025:1670" type="self" title="ALSA-2025:1670"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="bind9.18" version="9.18.29" release="1.el9_5.1" epoch="32" arch="s390x" src="bind9.18-9.18.29-1.el9_5.1.src.rpm">
          <filename>bind9.18-9.18.29-1.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">07513e060ffd5b27272cf189fcafcac05f1deb0607bd3a09e6dcaae0a94c8b60</sum>
        </package>
        <package name="bind9.18-libs" version="9.18.29" release="1.el9_5.1" epoch="32" arch="s390x" src="bind9.18-9.18.29-1.el9_5.1.src.rpm">
          <filename>bind9.18-libs-9.18.29-1.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">18ec345f9acbd07fcb45efec6a85052008f1911deda7f079617bb4607bee6200</sum>
        </package>
        <package name="bind9.18-utils" version="9.18.29" release="1.el9_5.1" epoch="32" arch="s390x" src="bind9.18-9.18.29-1.el9_5.1.src.rpm">
          <filename>bind9.18-utils-9.18.29-1.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">a53ccc8018511d40a7202609e1963a01236ad3780ed95befb45a4fb8fea635bc</sum>
        </package>
        <package name="bind9.18-dnssec-utils" version="9.18.29" release="1.el9_5.1" epoch="32" arch="s390x" src="bind9.18-9.18.29-1.el9_5.1.src.rpm">
          <filename>bind9.18-dnssec-utils-9.18.29-1.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">dfbb494e3512b7cdc759a5a1a6ba75094973871fc0f118472728f16aacb7c343</sum>
        </package>
        <package name="bind9.18-chroot" version="9.18.29" release="1.el9_5.1" epoch="32" arch="s390x" src="bind9.18-9.18.29-1.el9_5.1.src.rpm">
          <filename>bind9.18-chroot-9.18.29-1.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">e0834566c6866f03caf1563a89fdaddb68102d0764b118df0ed3d61a7f0ae5c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1671</id>
    <title>Important: mysql security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-02-20 14:55:32"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)
  * krb5: GSS message token handling (CVE-2024-37371)
  * curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)
  * mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)
  * mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)
  * mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)
  * mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)
  * mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)
  * mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)
  * mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)
  * mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)
  * mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)
  * mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)
  * mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)
  * curl: curl netrc password leak (CVE-2024-11053)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)
  * mysql: MySQL Server Options Vulnerability (CVE-2025-21520)
  * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  * mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)
  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)
  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)
  * mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)
  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)
  * mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)
  * mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)
  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)
  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)
  * mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)
  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)
  * mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)
  * mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1671" id="RHSA-2025:1671" type="rhsa" title="RHSA-2025:1671"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11053" id="CVE-2024-11053" type="cve" title="CVE-2024-11053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21193" id="CVE-2024-21193" type="cve" title="CVE-2024-21193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21194" id="CVE-2024-21194" type="cve" title="CVE-2024-21194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21196" id="CVE-2024-21196" type="cve" title="CVE-2024-21196"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21197" id="CVE-2024-21197" type="cve" title="CVE-2024-21197"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21198" id="CVE-2024-21198" type="cve" title="CVE-2024-21198"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21199" id="CVE-2024-21199" type="cve" title="CVE-2024-21199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21201" id="CVE-2024-21201" type="cve" title="CVE-2024-21201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21203" id="CVE-2024-21203" type="cve" title="CVE-2024-21203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21212" id="CVE-2024-21212" type="cve" title="CVE-2024-21212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21213" id="CVE-2024-21213" type="cve" title="CVE-2024-21213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21218" id="CVE-2024-21218" type="cve" title="CVE-2024-21218"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21219" id="CVE-2024-21219" type="cve" title="CVE-2024-21219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21230" id="CVE-2024-21230" type="cve" title="CVE-2024-21230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21231" id="CVE-2024-21231" type="cve" title="CVE-2024-21231"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21236" id="CVE-2024-21236" type="cve" title="CVE-2024-21236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21237" id="CVE-2024-21237" type="cve" title="CVE-2024-21237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21238" id="CVE-2024-21238" type="cve" title="CVE-2024-21238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21239" id="CVE-2024-21239" type="cve" title="CVE-2024-21239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21241" id="CVE-2024-21241" type="cve" title="CVE-2024-21241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21247" id="CVE-2024-21247" type="cve" title="CVE-2024-21247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37371" id="CVE-2024-37371" type="cve" title="CVE-2024-37371"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5535" id="CVE-2024-5535" type="cve" title="CVE-2024-5535"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7264" id="CVE-2024-7264" type="cve" title="CVE-2024-7264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21490" id="CVE-2025-21490" type="cve" title="CVE-2025-21490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21491" id="CVE-2025-21491" type="cve" title="CVE-2025-21491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21494" id="CVE-2025-21494" type="cve" title="CVE-2025-21494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21497" id="CVE-2025-21497" type="cve" title="CVE-2025-21497"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21500" id="CVE-2025-21500" type="cve" title="CVE-2025-21500"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21501" id="CVE-2025-21501" type="cve" title="CVE-2025-21501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21503" id="CVE-2025-21503" type="cve" title="CVE-2025-21503"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21504" id="CVE-2025-21504" type="cve" title="CVE-2025-21504"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21505" id="CVE-2025-21505" type="cve" title="CVE-2025-21505"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21518" id="CVE-2025-21518" type="cve" title="CVE-2025-21518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21519" id="CVE-2025-21519" type="cve" title="CVE-2025-21519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21520" id="CVE-2025-21520" type="cve" title="CVE-2025-21520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21521" id="CVE-2025-21521" type="cve" title="CVE-2025-21521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21522" id="CVE-2025-21522" type="cve" title="CVE-2025-21522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21523" id="CVE-2025-21523" type="cve" title="CVE-2025-21523"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21525" id="CVE-2025-21525" type="cve" title="CVE-2025-21525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21529" id="CVE-2025-21529" type="cve" title="CVE-2025-21529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21531" id="CVE-2025-21531" type="cve" title="CVE-2025-21531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21534" id="CVE-2025-21534" type="cve" title="CVE-2025-21534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21536" id="CVE-2025-21536" type="cve" title="CVE-2025-21536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21540" id="CVE-2025-21540" type="cve" title="CVE-2025-21540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21543" id="CVE-2025-21543" type="cve" title="CVE-2025-21543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21546" id="CVE-2025-21546" type="cve" title="CVE-2025-21546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21555" id="CVE-2025-21555" type="cve" title="CVE-2025-21555"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21559" id="CVE-2025-21559" type="cve" title="CVE-2025-21559"/>
      <reference href="https://bugzilla.redhat.com/2294581" id="2294581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294676" id="2294676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301888" id="2301888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318857" id="2318857" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318858" id="2318858" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318870" id="2318870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318873" id="2318873" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318874" id="2318874" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318876" id="2318876" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318882" id="2318882" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318883" id="2318883" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318884" id="2318884" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318885" id="2318885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318886" id="2318886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318897" id="2318897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318900" id="2318900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318905" id="2318905" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318914" id="2318914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318922" id="2318922" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318923" id="2318923" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318925" id="2318925" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318926" id="2318926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318927" id="2318927" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331191" id="2331191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339218" id="2339218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339220" id="2339220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339221" id="2339221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339226" id="2339226" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339231" id="2339231" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339236" id="2339236" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339238" id="2339238" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339243" id="2339243" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339247" id="2339247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339252" id="2339252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339259" id="2339259" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339266" id="2339266" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339270" id="2339270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339271" id="2339271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339275" id="2339275" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339277" id="2339277" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339281" id="2339281" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339284" id="2339284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339291" id="2339291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339293" id="2339293" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339295" id="2339295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339299" id="2339299" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339300" id="2339300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339304" id="2339304" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339305" id="2339305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1671.html" id="ALSA-2025:1671" type="self" title="ALSA-2025:1671"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="mysql-common" version="8.0.41" release="2.el9_5" epoch="0" arch="s390x" src="mysql-8.0.41-2.el9_5.src.rpm">
          <filename>mysql-common-8.0.41-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">27eabf960f9fcfa6bf8140737114ff77b52be9b85a6a72c848a26c28b30fe31f</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.41" release="2.el9_5" epoch="0" arch="s390x" src="mysql-8.0.41-2.el9_5.src.rpm">
          <filename>mysql-errmsg-8.0.41-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">aee557800a51d9bd8265e786c70c69bd52270effaa2e9f6f03a594c520b67889</sum>
        </package>
        <package name="mysql" version="8.0.41" release="2.el9_5" epoch="0" arch="s390x" src="mysql-8.0.41-2.el9_5.src.rpm">
          <filename>mysql-8.0.41-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">b14a385f5c243da0c0d2bbc4d7bb216ba5b2023b6d93438e768b7ec3ae84c13f</sum>
        </package>
        <package name="mysql-server" version="8.0.41" release="2.el9_5" epoch="0" arch="s390x" src="mysql-8.0.41-2.el9_5.src.rpm">
          <filename>mysql-server-8.0.41-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">fc0a8ed758e7d1e5e667210e126b03069136a89428bae118a591f937dd7a8714</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1681</id>
    <title>Important: bind security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-02-20 12:03:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1681" id="RHSA-2025:1681" type="rhsa" title="RHSA-2025:1681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11187" id="CVE-2024-11187" type="cve" title="CVE-2024-11187"/>
      <reference href="https://bugzilla.redhat.com/2342879" id="2342879" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1681.html" id="ALSA-2025:1681" type="self" title="ALSA-2025:1681"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="python3-bind" version="9.16.23" release="24.el9_5.3" epoch="32" arch="noarch" src="bind-9.16.23-24.el9_5.3.src.rpm">
          <filename>python3-bind-9.16.23-24.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">22b0cbd581bd49c0429845d8d5d9acc2b73a6cea8279f486f9327cc876219b7e</sum>
        </package>
        <package name="bind" version="9.16.23" release="24.el9_5.3" epoch="32" arch="s390x" src="bind-9.16.23-24.el9_5.3.src.rpm">
          <filename>bind-9.16.23-24.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">306d3dfd1bfd52be2c3b4ae266e0dc42ab0490eaef56ef12027c94d4c55cbda9</sum>
        </package>
        <package name="bind-libs" version="9.16.23" release="24.el9_5.3" epoch="32" arch="s390x" src="bind-9.16.23-24.el9_5.3.src.rpm">
          <filename>bind-libs-9.16.23-24.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">67c69e140204e0a1b9173e5b8e6a951ed58c5ce655820f89dcfe0ec3cface008</sum>
        </package>
        <package name="bind-dnssec-doc" version="9.16.23" release="24.el9_5.3" epoch="32" arch="noarch" src="bind-9.16.23-24.el9_5.3.src.rpm">
          <filename>bind-dnssec-doc-9.16.23-24.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">ada4e0082730024c4bab00aa45def50b8739ba0ddfe2a66b38c2d1627465ff4a</sum>
        </package>
        <package name="bind-utils" version="9.16.23" release="24.el9_5.3" epoch="32" arch="s390x" src="bind-9.16.23-24.el9_5.3.src.rpm">
          <filename>bind-utils-9.16.23-24.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">aee7ca88cb8a5300baf9ae051f3f9f7636940a60130ca71795f247d7a4765281</sum>
        </package>
        <package name="bind-license" version="9.16.23" release="24.el9_5.3" epoch="32" arch="noarch" src="bind-9.16.23-24.el9_5.3.src.rpm">
          <filename>bind-license-9.16.23-24.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">b9977269dfdce9d84806c58529dc87316284ce76fc8c7aa2c1b9f1c73d98cbc3</sum>
        </package>
        <package name="bind-chroot" version="9.16.23" release="24.el9_5.3" epoch="32" arch="s390x" src="bind-9.16.23-24.el9_5.3.src.rpm">
          <filename>bind-chroot-9.16.23-24.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">c2e346dbf97938b6a506e1918483c94b6682dbe9d49328229f29fdc9db2dcd56</sum>
        </package>
        <package name="bind-dnssec-utils" version="9.16.23" release="24.el9_5.3" epoch="32" arch="s390x" src="bind-9.16.23-24.el9_5.3.src.rpm">
          <filename>bind-dnssec-utils-9.16.23-24.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">cf7cebbe07950bb493810071819bc6f88bcbd6163b1dde846f14cc6730beb2ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16880</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-29 00:00:00"/>
    <updated date="2025-10-01 09:17:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472)
  * kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527)
  * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)
  * kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682)
  * kernel: io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CVE-2025-39698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16880" id="RHSA-2025:16880" type="rhsa" title="RHSA-2025:16880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38472" id="CVE-2025-38472" type="cve" title="CVE-2025-38472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38527" id="CVE-2025-38527" type="cve" title="CVE-2025-38527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38718" id="CVE-2025-38718" type="cve" title="CVE-2025-38718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39682" id="CVE-2025-39682" type="cve" title="CVE-2025-39682"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39698" id="CVE-2025-39698" type="cve" title="CVE-2025-39698"/>
      <reference href="https://bugzilla.redhat.com/2383916" id="2383916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388928" id="2388928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393166" id="2393166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393511" id="2393511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393519" id="2393519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16880.html" id="ALSA-2025:16880" type="self" title="ALSA-2025:16880"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.49.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">02d8e0d649248c1a930f3d548285f9f31beba62419a72a5ce7d7e934c3e62c1d</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.49.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2b6c3e916429aee38d10422f1c26425f1ffd896fdac8a3e86fe0bdbbcc1d2a69</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.49.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5d436bb57acd18d1afba9c89e95b4f2de0865e03fcba03c4940390c35544d7f0</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.49.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8b0d65924c21e8f5c09e6aa170e0fedc3904c1a7b73b558013d148a1c63c16df</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.49.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">b404507bd162c9dabdea370049eeda5a3000290914ce9f2098f498dbb7945dcb</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.49.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">b7fee64c28e7bc5d47663a487517fefb26b1cd9973261bbca7e81c2d527de83b</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.49.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">cbae93374dedb8e5e1e5aa5ba23dd0f87169dddc29f3c3e2d722645218e622f1</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.49.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e0f4bb1190487f7342e7fe5495d8475b2e7d1bffef6e92614a54df670dacf8f9</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.49.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ebd79996eeb3d68f35ee47f4b4b6b3a1e3397697acad8c66d7bda808136fc2f1</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.49.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">ed724e5ade50fd211f8b767c7868337fe2053bcda9207bcb9195fef06c91bf1f</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.49.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f07bc29c2d910bb2fba064d8229f480bd88e25bb58d43659b9f713f22c30ba2b</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.49.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">fcb137f485f911fb1b93594c1ee0d6c645b702e8157c5454b5aa1d6ae28d3496</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17084</id>
    <title>Important: ipa security update</title>
    <issued date="2025-09-30 00:00:00"/>
    <updated date="2025-10-22 13:15:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.  

Security Fix(es):  

  * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17084" id="RHSA-2025:17084" type="rhsa" title="RHSA-2025:17084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7493" id="CVE-2025-7493" type="cve" title="CVE-2025-7493"/>
      <reference href="https://bugzilla.redhat.com/2389448" id="2389448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17084.html" id="ALSA-2025:17084" type="self" title="ALSA-2025:17084"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="ipa-client-epn" version="4.12.2" release="14.el9_6.5" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-client-epn-4.12.2-14.el9_6.5.s390x.rpm</filename>
          <sum type="sha256">061dc8939086c1886e21267dd8ecd9aab444e9ab3b12f079f16072e6f44fcca1</sum>
        </package>
        <package name="ipa-client-samba" version="4.12.2" release="14.el9_6.5" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-client-samba-4.12.2-14.el9_6.5.s390x.rpm</filename>
          <sum type="sha256">1480650b91160256d0cc908d957bc05c295926f187e5b59e3940e39358f185f5</sum>
        </package>
        <package name="ipa-server" version="4.12.2" release="14.el9_6.5" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-server-4.12.2-14.el9_6.5.s390x.rpm</filename>
          <sum type="sha256">188af9174cd4c695aa195df4fbb737f381aa208c7454c7591ef18f957d22ea45</sum>
        </package>
        <package name="ipa-server-encrypted-dns" version="4.12.2" release="14.el9_6.5" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-server-encrypted-dns-4.12.2-14.el9_6.5.s390x.rpm</filename>
          <sum type="sha256">1f72dd3c6edcd8288c0c8d38159a9fb992a84a93911ecd8ba77d804da283e849</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.12.2" release="14.el9_6.5" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-server-trust-ad-4.12.2-14.el9_6.5.s390x.rpm</filename>
          <sum type="sha256">2b2f88899fcd5b2c5664d1b6be688269db7094e128f5497aeb2ee11317f13a3f</sum>
        </package>
        <package name="python3-ipaclient" version="4.12.2" release="14.el9_6.5" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>python3-ipaclient-4.12.2-14.el9_6.5.noarch.rpm</filename>
          <sum type="sha256">4afec2a4ec1fee6ae153d58e0b1d5c9588a3256badbcb617dd16e407de04329d</sum>
        </package>
        <package name="python3-ipaserver" version="4.12.2" release="14.el9_6.5" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>python3-ipaserver-4.12.2-14.el9_6.5.noarch.rpm</filename>
          <sum type="sha256">5b39ad672a08c50e968b4955b06ed2964b9e80c96036e5066363e5226eb6be49</sum>
        </package>
        <package name="ipa-server-common" version="4.12.2" release="14.el9_6.5" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-server-common-4.12.2-14.el9_6.5.noarch.rpm</filename>
          <sum type="sha256">5c58a48f8a41415c6cebc0840e2406d3619fd765f4eba07a23cce17e575d28c1</sum>
        </package>
        <package name="ipa-selinux-luna" version="4.12.2" release="14.el9_6.5" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-selinux-luna-4.12.2-14.el9_6.5.noarch.rpm</filename>
          <sum type="sha256">606baa5844d826f8b3106cd79fdedcef2c7b91cd0515ff6e286c894ab6306f84</sum>
        </package>
        <package name="python3-ipalib" version="4.12.2" release="14.el9_6.5" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>python3-ipalib-4.12.2-14.el9_6.5.noarch.rpm</filename>
          <sum type="sha256">6d956768cb64c563e64603ccad3adb8bead1a4738780c0f9eb160da8f4a8a7f9</sum>
        </package>
        <package name="ipa-selinux-nfast" version="4.12.2" release="14.el9_6.5" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-selinux-nfast-4.12.2-14.el9_6.5.noarch.rpm</filename>
          <sum type="sha256">79c3d1d875df54c2a6299732351c91176579f9eb90fc2c99e291b8b83a175eb0</sum>
        </package>
        <package name="ipa-server-dns" version="4.12.2" release="14.el9_6.5" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-server-dns-4.12.2-14.el9_6.5.noarch.rpm</filename>
          <sum type="sha256">8e61a839b8627ef3f21b54e422d3338d5f35a5bbd6b6e615957420ebd29e099d</sum>
        </package>
        <package name="ipa-client-encrypted-dns" version="4.12.2" release="14.el9_6.5" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-client-encrypted-dns-4.12.2-14.el9_6.5.s390x.rpm</filename>
          <sum type="sha256">9459dc885d7622fc2724c657b46bd59789c3bd342db068e0a49ef69b237f5030</sum>
        </package>
        <package name="ipa-client-common" version="4.12.2" release="14.el9_6.5" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-client-common-4.12.2-14.el9_6.5.noarch.rpm</filename>
          <sum type="sha256">9473590c63e11c3260d122c56fbc634f7ea33586dcf3cf48153d6049a754f89c</sum>
        </package>
        <package name="ipa-common" version="4.12.2" release="14.el9_6.5" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-common-4.12.2-14.el9_6.5.noarch.rpm</filename>
          <sum type="sha256">b1a6eafa2ab6872b4f60368da4f243697aef6b8d880bc3a813c505f399426170</sum>
        </package>
        <package name="ipa-selinux" version="4.12.2" release="14.el9_6.5" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-selinux-4.12.2-14.el9_6.5.noarch.rpm</filename>
          <sum type="sha256">bfb103ee750a8e17294b8333f5d7468297d5cd673ef0c74b7998d349a2d0be94</sum>
        </package>
        <package name="ipa-client" version="4.12.2" release="14.el9_6.5" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>ipa-client-4.12.2-14.el9_6.5.s390x.rpm</filename>
          <sum type="sha256">e8c4a811e1b4665fc070c999b47c44038071926dd6d86a29d961d6500305db44</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17377</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-06 00:00:00"/>
    <updated date="2025-10-09 07:42:10"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301)
  * kernel: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CVE-2025-38351)
  * kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling (CVE-2025-39761)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17377" id="RHSA-2025:17377" type="rhsa" title="RHSA-2025:17377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50301" id="CVE-2024-50301" type="cve" title="CVE-2024-50301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38351" id="CVE-2025-38351" type="cve" title="CVE-2025-38351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39761" id="CVE-2025-39761" type="cve" title="CVE-2025-39761"/>
      <reference href="https://bugzilla.redhat.com/2327188" id="2327188" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382059" id="2382059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394606" id="2394606" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17377.html" id="ALSA-2025:17377" type="self" title="ALSA-2025:17377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-doc" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.51.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">047dbd5b878a0bd6d008b005924025001e2134e62442bd7800a2794fd51b187f</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.51.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">113135495d025f534cc2e51b9aafbb4b63f935678d8d46540b95bf14e075dc98</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.51.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">23fddb108403b16e60c28f4e86503df4e0bc64ee737c4cfcec6adbe2d6d6e87f</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.51.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3167effb7b5568ccb41fc3b933dcb7fd72b6dd959072445ef57a1218cd2e45f2</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.51.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">36829b3033d61284fea2844b5d0018f05205d13df8b86defae8372c2aae907c9</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.51.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">43b6de11d51454e3dff8d26207dad92f852832f395beef56f0261cf39b034a07</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.51.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">52aabd68a277cd2c71e11758315e54f4214577b7660d106c77239c25cde3096f</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.51.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5b4f98454428c2276bbf351b1be4b9f0489d455bc42cd30562f86430189f2dca</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.51.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">6ac2c173c8cf3ccf5f7ec926d50d12f02fab269498787bf51ac2d82beea55885</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.51.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">a38a180a18ab44c1bcfccd1b098872bb927e4c7d742d4ac76c5fe1bb292d1004</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.51.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ad56140fa02f0fc749b9c26eeba4938ebcd89fe29f52103f6a624c639c784ce8</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.51.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c755ad2580b7013b5959d8dae19cab0b13ff796ed7428a932a68bf36447f4c4a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1738</id>
    <title>Important: libpq security update</title>
    <issued date="2025-02-20 00:00:00"/>
    <updated date="2025-02-21 13:14:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libpq security update</summary>
    <description>The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers.   

Security Fix(es):  

  * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1738" id="RHSA-2025:1738" type="rhsa" title="RHSA-2025:1738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1094" id="CVE-2025-1094" type="cve" title="CVE-2025-1094"/>
      <reference href="https://bugzilla.redhat.com/2345548" id="2345548" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1738.html" id="ALSA-2025:1738" type="self" title="ALSA-2025:1738"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="libpq-devel" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="libpq-13.20-1.el9_5.src.rpm">
          <filename>libpq-devel-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">3524c3f5989959680f3da352ece97da177115c140583b85f0c306788b982c604</sum>
        </package>
        <package name="libpq" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="libpq-13.20-1.el9_5.src.rpm">
          <filename>libpq-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">dbd90fe4b4eafb436ab3b88755f1d7d4347538b97d8acc01f3bd0a74a95e60f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1741</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2025-02-20 00:00:00"/>
    <updated date="2025-02-21 13:13:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1741" id="RHSA-2025:1741" type="rhsa" title="RHSA-2025:1741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1094" id="CVE-2025-1094" type="cve" title="CVE-2025-1094"/>
      <reference href="https://bugzilla.redhat.com/2345548" id="2345548" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1741.html" id="ALSA-2025:1741" type="self" title="ALSA-2025:1741"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="postgresql" stream="15" version="9050020250221080435" context="8cf767d6" arch="s390x"/>
        <package name="pgaudit" version="1.7.0" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89</sum>
        </package>
        <package name="postgresql-static" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-static-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">2ea5c5aa476308b8eb8da39f77f6aeb4a73721d15754e045cad946aa0fab1256</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445</sum>
        </package>
        <package name="postgresql" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">468ada373998d8f2379bd16603602ad15333c7d240981d9dd4cff4b86d95dfe9</sum>
        </package>
        <package name="postgresql-test" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-test-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">4eb3d214fb5d7da134b5550f40fc20ec6cb57fa0ed84404727be513736dbb1f5</sum>
        </package>
        <package name="postgresql-docs" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-docs-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">593340244619c70bb0483836a7139fe555e7aa43d61f27bec45a026d2d2cc355</sum>
        </package>
        <package name="postgresql-server-devel" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-server-devel-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">5d84bfe7b52a9ae20c465ac5c78a64072e2cc0378b84a0a5d55528fa9c2cb329</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="noarch" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-test-rpm-macros-15.12-1.module_el9.5.0+140+e3f03d9d.noarch.rpm</filename>
          <sum type="sha256">6e2b70d191a2a45071734aada3f59d6a36768a015b8ef7c332a2f7fb07002581</sum>
        </package>
        <package name="postgresql-private-devel" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-private-devel-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">74771aeb9c5d8e028fd47a75b17198f5ef4680dba8f5df2f2a99f152f36d8e0a</sum>
        </package>
        <package name="postgresql-contrib" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-contrib-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">9d8c2afe1b86b006086b691069e1ff50978aa6e360dee49ae3c690eec63791e0</sum>
        </package>
        <package name="postgresql-upgrade" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-upgrade-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">a8d8d71d389991535313728484e6f37d2eb097ffff73691be220d09875f84423</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-upgrade-devel-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">ab08c9c325283ad60ddd126048330f2e5c51e8f0437db067016579bf720cd882</sum>
        </package>
        <package name="postgresql-plperl" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-plperl-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">ad788390c96d7816870fe0da81ed0b717b39ffe504d5f14828769502bb5c4c5e</sum>
        </package>
        <package name="postgresql-private-libs" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-private-libs-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">b43b95d6159064b49855f12fd0889c1553827ac8ae0121dcb9194d5e8081b734</sum>
        </package>
        <package name="postgresql-server" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-server-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">c5cc855b56e9c1ed7455fdb5931882e778818476bab6ede416a85f9a90b23fc2</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="2.module_el9.5.0+120+4533eb20" epoch="0" arch="s390x" src="pg_repack-1.4.8-2.module_el9.5.0+120+4533eb20.src.rpm">
          <filename>pg_repack-1.4.8-2.module_el9.5.0+120+4533eb20.s390x.rpm</filename>
          <sum type="sha256">df1164222320af61b8334ca2db5460bf0aaee4337cfff3c51ce7ba90aa1e9b66</sum>
        </package>
        <package name="postgresql-plpython3" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-plpython3-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">e72d46b3e111b8daf70767eb96de16c97d830f25800ba45fb47c9356d11ec9db</sum>
        </package>
        <package name="postgresql-pltcl" version="15.12" release="1.module_el9.5.0+140+e3f03d9d" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el9.5.0+140+e3f03d9d.src.rpm">
          <filename>postgresql-pltcl-15.12-1.module_el9.5.0+140+e3f03d9d.s390x.rpm</filename>
          <sum type="sha256">f692f3d14889ff295d6b83b59bc6b35c5442b79f4262702fa62f545edb52e799</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1742</id>
    <title>Important: postgresql security update</title>
    <issued date="2025-02-20 00:00:00"/>
    <updated date="2025-02-21 13:11:14"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1742" id="RHSA-2025:1742" type="rhsa" title="RHSA-2025:1742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1094" id="CVE-2025-1094" type="cve" title="CVE-2025-1094"/>
      <reference href="https://bugzilla.redhat.com/2345548" id="2345548" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1742.html" id="ALSA-2025:1742" type="self" title="ALSA-2025:1742"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="postgresql-contrib" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-contrib-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">1c119d3b7228bae321295b9b2de21bc1aae1567504a467a7e3fde10104863fc2</sum>
        </package>
        <package name="postgresql" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">4317f9b1edbeebbddc044449892077fc5038e8e32a7279fa6d5c5240560f2b2a</sum>
        </package>
        <package name="postgresql-private-libs" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-private-libs-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">560577e745deadd4f3ef36978f984922e8496cc1461b55f9efb8807f72e1d70a</sum>
        </package>
        <package name="postgresql-plperl" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-plperl-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">8a98baac3411d8c36dcede8e3890bc705014b9a57f0de203c30502d7898dccc2</sum>
        </package>
        <package name="postgresql-upgrade" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-upgrade-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">8d9f28e4413acf696cf270a15a5a6fc2f9660f7a618a0bec587b8eb09b43360d</sum>
        </package>
        <package name="postgresql-plpython3" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-plpython3-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">c1189263f5c24be1f854d131cd82a8bd1aafa0b360f67d784023b6828c5ad8a4</sum>
        </package>
        <package name="postgresql-pltcl" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-pltcl-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">cd2b8031a032c49a4525ebd57a426301e1f81d36a301207545fc4728228b41d6</sum>
        </package>
        <package name="postgresql-server" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-server-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">ceb47209b64e4b76d1784ddf33528aa1bd5d7709baeb9d25bffcd501643ab8eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1743</id>
    <title>Important: postgresql:16 security update</title>
    <issued date="2025-02-20 00:00:00"/>
    <updated date="2025-02-24 10:49:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:16 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1743" id="RHSA-2025:1743" type="rhsa" title="RHSA-2025:1743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1094" id="CVE-2025-1094" type="cve" title="CVE-2025-1094"/>
      <reference href="https://bugzilla.redhat.com/2345548" id="2345548" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1743.html" id="ALSA-2025:1743" type="self" title="ALSA-2025:1743"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="postgresql" stream="16" version="9050020241205111724" context="8cf767d6" arch="s390x"/>
        <package name="postgresql-plpython3" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-plpython3-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">027a18da8f109d77f15b9736427998fd95954abfb748844b7d1b16fabd38b26d</sum>
        </package>
        <package name="postgresql-upgrade" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-upgrade-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">063eb4ee77020da20e3dfe0e20b6c06450b781a3b96ea02a1380f7436ab87c7f</sum>
        </package>
        <package name="postgresql-private-devel" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-private-devel-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">169742932cb9e8f8bbcbf2c8386d0be2e603f1e41810c7c12095172a96bce480</sum>
        </package>
        <package name="postgresql-test" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-test-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">169bccac1c5914c1750a6bb77f8a2a803540b7ac594f49af17db03690a33f1c7</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-upgrade-devel-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">1a069cd86abd0f1d0c452e3b33c3a6db8e6f9fae10a61ecd1ddcda1eb31ecc14</sum>
        </package>
        <package name="postgresql-server-devel" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-server-devel-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">3118deacf2252ca855bba828baf83e72ae2555dbafb623a4373bbb1963c70aa6</sum>
        </package>
        <package name="postgresql" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">3c3f6f9ae7db5900e17b0a36fe1d4a788bf07b68380c415b9bb91f1c3407f78e</sum>
        </package>
        <package name="postgresql-contrib" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-contrib-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">7610737064caae3288d23307767ee08a779a201ec35688c02c1850b2209b1908</sum>
        </package>
        <package name="postgresql-static" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-static-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">7ed217d64ad8bca0c9de43281ccd0e29b28ee741824145c6afa4009358332b7b</sum>
        </package>
        <package name="pg_repack" version="1.5.1" release="1.module_el9.5.0+128+1095dce2" epoch="0" arch="s390x" src="pg_repack-1.5.1-1.module_el9.5.0+128+1095dce2.src.rpm">
          <filename>pg_repack-1.5.1-1.module_el9.5.0+128+1095dce2.s390x.rpm</filename>
          <sum type="sha256">7f6298567f4c4c449fb6821c1b7f708373496b47a39e64274a57c0e48396e0fa</sum>
        </package>
        <package name="postgresql-server" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-server-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">ac0751d4374c6dd6542a5de7f6a9961e3e3ad37f162bb19d638057dea2be49b0</sum>
        </package>
        <package name="postgresql-docs" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-docs-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">ae376b9ff9c8118a0381962a8abeb3d86ae87690e25d15dabbf4dfd76f7adefd</sum>
        </package>
        <package name="postgres-decoderbufs" version="2.4.0" release="1.Final.module_el9.4.0+66+eb9878bc" epoch="0" arch="s390x" src="postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.src.rpm">
          <filename>postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm</filename>
          <sum type="sha256">b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c</sum>
        </package>
        <package name="postgresql-plperl" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-plperl-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">ba4c2b3e4a97a5c34667b5126e1af554f75abc4d7bc1935b100cc8ef3df20974</sum>
        </package>
        <package name="postgresql-private-libs" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-private-libs-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">c9cf1d82bae11cd4b2e5eb0f62602b632c5909fbd9a9d1b4a38b65b803731aeb</sum>
        </package>
        <package name="pgvector" version="0.6.2" release="1.module_el9.5.0+120+4533eb20" epoch="0" arch="s390x" src="pgvector-0.6.2-1.module_el9.5.0+120+4533eb20.src.rpm">
          <filename>pgvector-0.6.2-1.module_el9.5.0+120+4533eb20.s390x.rpm</filename>
          <sum type="sha256">d9e5362a606cfeea735372eaed74bfcdf4f197951f254b8087bf4055677527ad</sum>
        </package>
        <package name="pgaudit" version="16.0" release="1.module_el9.4.0+66+eb9878bc" epoch="0" arch="s390x" src="pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.src.rpm">
          <filename>pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm</filename>
          <sum type="sha256">dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739</sum>
        </package>
        <package name="postgresql-pltcl" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-pltcl-16.8-1.module_el9.5.0+141+f4b0f9b7.s390x.rpm</filename>
          <sum type="sha256">dcf12da3f85e46824b5b63e30d7914197c79c2a8b15195ae200ab18b0b0dce0f</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="16.8" release="1.module_el9.5.0+141+f4b0f9b7" epoch="0" arch="noarch" src="postgresql-16.8-1.module_el9.5.0+141+f4b0f9b7.src.rpm">
          <filename>postgresql-test-rpm-macros-16.8-1.module_el9.5.0+141+f4b0f9b7.noarch.rpm</filename>
          <sum type="sha256">f39818d93691a7091f8e51657c5513b5a3683a1dc11c81512372024cf8c691bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17558</id>
    <title>Moderate: iputils security update</title>
    <issued date="2025-10-08 00:00:00"/>
    <updated date="2025-10-13 08:54:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>iputils security update</summary>
    <description>The iputils packages contain basic utilities for monitoring a network, including ping.   

Security Fix(es):  

  * iputils: iputils integer overflow (CVE-2025-48964)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17558" id="RHSA-2025:17558" type="rhsa" title="RHSA-2025:17558"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48964" id="CVE-2025-48964" type="cve" title="CVE-2025-48964"/>
      <reference href="https://bugzilla.redhat.com/2382657" id="2382657" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17558.html" id="ALSA-2025:17558" type="self" title="ALSA-2025:17558"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="iputils-ninfod" version="20210202" release="11.el9_6.3" epoch="0" arch="s390x" src="iputils-20210202-11.el9_6.3.src.rpm">
          <filename>iputils-ninfod-20210202-11.el9_6.3.s390x.rpm</filename>
          <sum type="sha256">2e08d1340d374be21aa4477522e87fce6c666f510c1172392c3abcb5df1687e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17742</id>
    <title>Moderate: vim security update</title>
    <issued date="2025-10-13 00:00:00"/>
    <updated date="2025-10-14 13:35:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim path traversal (CVE-2025-53906)
  * vim: Vim path traversial (CVE-2025-53905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17742" id="RHSA-2025:17742" type="rhsa" title="RHSA-2025:17742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53905" id="CVE-2025-53905" type="cve" title="CVE-2025-53905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53906" id="CVE-2025-53906" type="cve" title="CVE-2025-53906"/>
      <reference href="https://bugzilla.redhat.com/2380360" id="2380360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380362" id="2380362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17742.html" id="ALSA-2025:17742" type="self" title="ALSA-2025:17742"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="vim-common" version="8.2.2637" release="22.el9_6.1" epoch="2" arch="s390x" src="vim-8.2.2637-22.el9_6.1.src.rpm">
          <filename>vim-common-8.2.2637-22.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">002a9a9ce012dba92926381dddf4fc2ecf8ca310ff89ad12bb29d9853afa4bd1</sum>
        </package>
        <package name="vim-X11" version="8.2.2637" release="22.el9_6.1" epoch="2" arch="s390x" src="vim-8.2.2637-22.el9_6.1.src.rpm">
          <filename>vim-X11-8.2.2637-22.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">2047be00bf5eaaf4e7b24fc70f48181bb0114afd43238080d56cc83666475cad</sum>
        </package>
        <package name="vim-enhanced" version="8.2.2637" release="22.el9_6.1" epoch="2" arch="s390x" src="vim-8.2.2637-22.el9_6.1.src.rpm">
          <filename>vim-enhanced-8.2.2637-22.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">93a654956324d36861c93fb560317fba5cf7e04d12df736eb1ddcfe1d7a95a3a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17760</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-13 00:00:00"/>
    <updated date="2025-10-16 07:33:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556)
  * kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614)
  * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757)
  * kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17760" id="RHSA-2025:17760" type="rhsa" title="RHSA-2025:17760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53373" id="CVE-2023-53373" type="cve" title="CVE-2023-53373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38556" id="CVE-2025-38556" type="cve" title="CVE-2025-38556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38614" id="CVE-2025-38614" type="cve" title="CVE-2025-38614"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39757" id="CVE-2025-39757" type="cve" title="CVE-2025-39757"/>
      <reference href="https://bugzilla.redhat.com/2389456" id="2389456" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389491" id="2389491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394615" id="2394615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396379" id="2396379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17760.html" id="ALSA-2025:17760" type="self" title="ALSA-2025:17760"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-devel-matched" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.52.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0119f9468c3aadbddf13d7574f068c53b67b36cf6cd29f965b300df5c55f376d</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.52.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">1bf06be1fa5936b44f785fc6d5d68e4964bffd2d50c1e6a80323dcc203d9bcf3</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.52.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1d5bc26370a95d2b10e5def202fc965ed59e99ace54dcf2edda275353c07ab3e</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.52.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">271e640c527147b5137e8361ee47175264b4bf2e98c82837901f69aff2dd1f74</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.52.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">42ec2fe806a23ff266e5264b4647c039465787fd56a2e668551865f14c830a46</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.52.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5203832c0837043844ba7657f654c9ac5efc16ea2dc7438f200b72e063999035</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.52.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5adeb9c1798725d78db341af57edd1d14e1b7eadf3c87204201c3e3181cb4a23</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.52.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">667f2b3cab3ee69ae31f53a82b4ba9129cc6f59d1663403487e28721113dcee3</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.52.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">6887efcd031e8ab1a3266a1ae25a505adf4a267e2d038ae413765fef706e9ef8</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.52.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8113b0d9a132966993ba89556176e520ec5398fc864a45825ff67ffa51717b16</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.52.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">92d9991f22d2dbe47ae65822f1ce4fa264fbcc1d969f8ab976c418c499750267</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.52.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">a149a4e96dfd53c2351de564a7148d009da67987f6806689c007f92ab881da49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18097</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-10-23 12:50:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342)
  * webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43343)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18097" id="RHSA-2025:18097" type="rhsa" title="RHSA-2025:18097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43272" id="CVE-2025-43272" type="cve" title="CVE-2025-43272"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43342" id="CVE-2025-43342" type="cve" title="CVE-2025-43342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43343" id="CVE-2025-43343" type="cve" title="CVE-2025-43343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43356" id="CVE-2025-43356" type="cve" title="CVE-2025-43356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43368" id="CVE-2025-43368" type="cve" title="CVE-2025-43368"/>
      <reference href="https://bugzilla.redhat.com/2397626" id="2397626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397627" id="2397627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397628" id="2397628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397630" id="2397630" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403598" id="2403598" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18097.html" id="ALSA-2025:18097" type="self" title="ALSA-2025:18097"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="webkit2gtk3-jsc" version="2.50.1" release="0.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.50.1-0.el9_6.src.rpm">
          <filename>webkit2gtk3-jsc-2.50.1-0.el9_6.s390x.rpm</filename>
          <sum type="sha256">3131dc88ee1b226cba35a1f92799845c0e387e6515cda435f9845d94be44b0d4</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.50.1" release="0.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.50.1-0.el9_6.src.rpm">
          <filename>webkit2gtk3-devel-2.50.1-0.el9_6.s390x.rpm</filename>
          <sum type="sha256">4430be468a902081441dd75c3439d66f932c221c83a43da3d1ce19f473714a0b</sum>
        </package>
        <package name="webkit2gtk3" version="2.50.1" release="0.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.50.1-0.el9_6.src.rpm">
          <filename>webkit2gtk3-2.50.1-0.el9_6.s390x.rpm</filename>
          <sum type="sha256">4863f6eb0d1a822250719faa8b66eeb4b67a16226c3f2afa814b0ab2694baa70</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.50.1" release="0.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.50.1-0.el9_6.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.50.1-0.el9_6.s390x.rpm</filename>
          <sum type="sha256">d78778593ff1574bd7285b738dde65a142d2f843c61472e63fc3058443bb3a37</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18149</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-10-20 12:28:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.121 and .NET Runtime 8.0.21.Security Fix(es):  

  * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)
  * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18149" id="RHSA-2025:18149" type="rhsa" title="RHSA-2025:18149"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55247" id="CVE-2025-55247" type="cve" title="CVE-2025-55247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55248" id="CVE-2025-55248" type="cve" title="CVE-2025-55248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55315" id="CVE-2025-55315" type="cve" title="CVE-2025-55315"/>
      <reference href="https://bugzilla.redhat.com/2403083" id="2403083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403085" id="2403085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403086" id="2403086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18149.html" id="ALSA-2025:18149" type="self" title="ALSA-2025:18149"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="aspnetcore-runtime-8.0" version="8.0.21" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el9_6.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.21-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">31cd1568abfa2ba9a103f2598d51be05fa48c20f20f6fb32d64ee0ef9f60d546</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.21" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el9_6.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.21-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3d580396a65fdc01e117ecf5743f61432bfcee4d26c882754cb7dd844d021bdc</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.121" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el9_6.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.121-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3da60e1b759ff754cc10810b84cb3935193c686cd5cddc90438f08c270e5e469</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.121" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el9_6.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.121-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">42619164a400f705022188f86cb35bd055539cd53bfe1fd82c7f0b2f4787db1c</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.121" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el9_6.src.rpm">
          <filename>dotnet-templates-8.0-8.0.121-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">6079ae70cf109782b564a18b699224d4fe4909a39d794f1148df4614b3af9b3e</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.21" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el9_6.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.21-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">6e10cb0a2e10dd33f6529472781a8ba5720e69665c75000b05b55d7ecac98ddf</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.21" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el9_6.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.21-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">a61806a8e3c8c9dd20dd0c8c7d999105d8605f65be36cc8d181dd5ddc288da77</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.21" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el9_6.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.21-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">aa14121f441e6ed6570a0e570401fb875651308f20b1ab457ba2c2b5b4b7f501</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.21" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el9_6.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.21-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c73c30f7684d2c4e8b7671a48a6df350ce021e275dcbf55c83afc01b7ba570a6</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.21" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el9_6.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.21-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d509ebf9d8f5bb643a6b18a4d9eed7fd15432d59e950ad0bc82b47ef61c3ee1a</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.21" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el9_6.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.21-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f5f53e4a89e3eb0acda3fe9252dcbe2e970c95423b8e51b9bc90ce95e523c72e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18151</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-11-03 08:48:43"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.111 and .NET Runtime 9.0.10.Security Fix(es):  

  * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)
  * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18151" id="RHSA-2025:18151" type="rhsa" title="RHSA-2025:18151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55247" id="CVE-2025-55247" type="cve" title="CVE-2025-55247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55248" id="CVE-2025-55248" type="cve" title="CVE-2025-55248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55315" id="CVE-2025-55315" type="cve" title="CVE-2025-55315"/>
      <reference href="https://bugzilla.redhat.com/2403083" id="2403083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403085" id="2403085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403086" id="2403086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18151.html" id="ALSA-2025:18151" type="self" title="ALSA-2025:18151"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="dotnet-templates-9.0" version="9.0.111" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>dotnet-templates-9.0-9.0.111-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">01287e90b5803ea982863bc2be574acea7f4c9e16cb83381d393116d16dba368</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.10" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.10-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">022ab69e93bf3ab2cbc789ff68f900c6d4d718de4ebebf9bceb06309d76ce71f</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.10" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.10-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">08a215da7f2d92d60dc2d1f4bfdef569510f97ecbebc0be36e5b82769507a4cc</sum>
        </package>
        <package name="dotnet-host" version="9.0.10" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>dotnet-host-9.0.10-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">381e836b2aaaa8975f460c80653a775aca54e97b080094db899537d1c3527124</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.10" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.10-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3f83873653750e4fb0fe6bb4809ce6eda6ed3e2af649bb2b3bb0b837594bbf16</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="9.0.111" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.111-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">422e9bff28ed6982a87f623f83f8240f9586a5f2c3dfbc6337f692cd72de839f</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.10" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.10-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">49db887192fe29de17af4095c4ba4701e6144271a2292387c61f21c48d6c19be</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.10" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.10-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8af85c7ee1ce4c34ca40ceb0ab0ac38a1c546f4d75bbed4e6be6ed043d2d0167</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.10" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.10-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8db5e5060a4b818a77fadb3c37a1be6e09f274f6d0f9fcec5ce91f9c47b2792d</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.111" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.111-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">a0dcdd1478218afeedf4783fe624e43c1cb6b2e0fc99d124b4d38d187a7ca6de</sum>
        </package>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.10" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.10-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c86fc7c25286c8850c4491fbb347b1d11b6d6a3a3df2daae1a1e4e0a0605851c</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.111" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.111-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f9bbc1b5a0bb171455c438777aaef257b1395c3d499b69ccf3bc130a5ce671f2</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.10" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.10-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">fe58953ce46b3484b9afc76d17eec5dc1e854e11e1cb9699d4ee91a6c632ec7d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18155</id>
    <title>Important: firefox security update</title>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-10-20 12:31:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * thunderbird: firefox: Memory safety bugs (CVE-2025-11714)
  * thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures (CVE-2025-11709)
  * thunderbird: firefox: Cross-process information leaked due to malicious IPC messages (CVE-2025-11710)
  * thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance() (CVE-2025-11708)
  * thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type (CVE-2025-11712)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 (CVE-2025-11715)
  * thunderbird: firefox: Some non-writable Object properties could be modified (CVE-2025-11711)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18155" id="RHSA-2025:18155" type="rhsa" title="RHSA-2025:18155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11708" id="CVE-2025-11708" type="cve" title="CVE-2025-11708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11709" id="CVE-2025-11709" type="cve" title="CVE-2025-11709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11710" id="CVE-2025-11710" type="cve" title="CVE-2025-11710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11711" id="CVE-2025-11711" type="cve" title="CVE-2025-11711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11712" id="CVE-2025-11712" type="cve" title="CVE-2025-11712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11714" id="CVE-2025-11714" type="cve" title="CVE-2025-11714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11715" id="CVE-2025-11715" type="cve" title="CVE-2025-11715"/>
      <reference href="https://bugzilla.redhat.com/2403763" id="2403763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403765" id="2403765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403768" id="2403768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403769" id="2403769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403770" id="2403770" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403774" id="2403774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403776" id="2403776" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18155.html" id="ALSA-2025:18155" type="self" title="ALSA-2025:18155"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="firefox" version="140.4.0" release="3.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-140.4.0-3.el9_6.alma.1.src.rpm">
          <filename>firefox-140.4.0-3.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">27f946ec92125a0e0110dee484f5f7a4570a88cc07e8b321d9fa27642ddedb87</sum>
        </package>
        <package name="firefox-x11" version="140.4.0" release="3.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-140.4.0-3.el9_6.alma.1.src.rpm">
          <filename>firefox-x11-140.4.0-3.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">c9e6601b2cb9da93f7715432519d9d9d7b25103c6fd97a001da87fafd17029c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18275</id>
    <title>Moderate: libssh security update</title>
    <issued date="2025-10-16 00:00:00"/>
    <updated date="2025-10-17 08:04:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  

Security Fix(es):  

  * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18275" id="RHSA-2025:18275" type="rhsa" title="RHSA-2025:18275"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5318" id="CVE-2025-5318" type="cve" title="CVE-2025-5318"/>
      <reference href="https://bugzilla.redhat.com/2369131" id="2369131" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18275.html" id="ALSA-2025:18275" type="self" title="ALSA-2025:18275"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libssh-devel" version="0.10.4" release="15.el9_6" epoch="0" arch="s390x" src="libssh-0.10.4-15.el9_6.src.rpm">
          <filename>libssh-devel-0.10.4-15.el9_6.s390x.rpm</filename>
          <sum type="sha256">c68ac1762d421c605a76278cde4142df56fc387f36ca172c259006aef43c6942</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18281</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-20 00:00:00"/>
    <updated date="2025-10-22 10:16:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)
  * kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087)
  * kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571)
  * kernel: sunrpc: fix handling of server side tls alerts (CVE-2025-38566)
  * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)
  * kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849)
  * kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18281" id="RHSA-2025:18281" type="rhsa" title="RHSA-2025:18281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50087" id="CVE-2022-50087" type="cve" title="CVE-2022-50087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22026" id="CVE-2025-22026" type="cve" title="CVE-2025-22026"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38566" id="CVE-2025-38566" type="cve" title="CVE-2025-38566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38571" id="CVE-2025-38571" type="cve" title="CVE-2025-38571"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39817" id="CVE-2025-39817" type="cve" title="CVE-2025-39817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39841" id="CVE-2025-39841" type="cve" title="CVE-2025-39841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39849" id="CVE-2025-39849" type="cve" title="CVE-2025-39849"/>
      <reference href="https://bugzilla.redhat.com/2360224" id="2360224" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373539" id="2373539" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389480" id="2389480" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389487" id="2389487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395805" id="2395805" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396928" id="2396928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396944" id="2396944" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18281.html" id="ALSA-2025:18281" type="self" title="ALSA-2025:18281"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-devel-matched" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.55.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2029a8f2e9cb714abe2e46c7960be1e0d34b50492e675512778741b25aa6eb4e</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.55.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2dc1e002beda9393017c057990cd81c36f93e6f99e7c3e234cb9eff01b058f6b</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.55.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">48b461788c255327fd7112699bb975e207b2f32dfcb8cf85264229f5f5a3392b</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.55.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">4d9c6b35d3194124513ca452e19b2f7736f8bea1266f6c1b065374ff9a92ef9a</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.55.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">61c787c3fe73b7b3042f11279c8815df9db53f05cbaf08c9c84cd21c60f6f456</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.55.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">75a3c90cb1ad5ebc88e52a79d8f6c17c6e2d68b63b50292f047ee8350b8f4a88</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.55.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8147d8a28bc40bfb9521e65635e956a2bcee6a2f49acfd5c7b24f4be870c01ce</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.55.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ab5322a46b8f68863e9deb1408ff0e3d4091b9bb11b13b4d7beeb045b8b4800b</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.55.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">dcda907ae852ce6ec307dfcf490318031b68e0b021bcae568353746251ce4c7f</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.55.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e5077502c5f3887bd00ded7a95f39c8e2edcd7a8a54c7247c2e9b51291513b09</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.55.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ef55f6a13633538122d6c458530ed6d688ae033ad79ec2c0404aaffb15d420cf</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.55.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f37070ed65d1115f8877cfc56c9c047fc7597c7ec7e8e50e8fa11e85dbde2d68</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18321</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-10-20 00:00:00"/>
    <updated date="2025-10-22 10:38:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * thunderbird: firefox: Memory safety bugs (CVE-2025-11714)
  * thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures (CVE-2025-11709)
  * thunderbird: firefox: Cross-process information leaked due to malicious IPC messages (CVE-2025-11710)
  * thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance() (CVE-2025-11708)
  * thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type (CVE-2025-11712)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 (CVE-2025-11715)
  * thunderbird: firefox: Some non-writable Object properties could be modified (CVE-2025-11711)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18321" id="RHSA-2025:18321" type="rhsa" title="RHSA-2025:18321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11708" id="CVE-2025-11708" type="cve" title="CVE-2025-11708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11709" id="CVE-2025-11709" type="cve" title="CVE-2025-11709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11710" id="CVE-2025-11710" type="cve" title="CVE-2025-11710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11711" id="CVE-2025-11711" type="cve" title="CVE-2025-11711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11712" id="CVE-2025-11712" type="cve" title="CVE-2025-11712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11714" id="CVE-2025-11714" type="cve" title="CVE-2025-11714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11715" id="CVE-2025-11715" type="cve" title="CVE-2025-11715"/>
      <reference href="https://bugzilla.redhat.com/2403763" id="2403763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403765" id="2403765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403768" id="2403768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403769" id="2403769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403770" id="2403770" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403774" id="2403774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403776" id="2403776" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18321.html" id="ALSA-2025:18321" type="self" title="ALSA-2025:18321"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="thunderbird" version="140.4.0" release="2.el9_6.alma.1" epoch="0" arch="s390x" src="thunderbird-140.4.0-2.el9_6.alma.1.src.rpm">
          <filename>thunderbird-140.4.0-2.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">6cf845fd3f53643eeec3c5503b77c4886fe8cc14fba8ea8c84fb6cfeca52dedb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18815</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-30 11:04:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance Path Factories (CVE-2025-53066)
  * JDK: Enhance Certificate Handling (CVE-2025-53057)


Bug Fix(es):  

  * Since the 8.8 release of AlmaLinuxand the 9.2 release of AlmaLinux OpenJDK 8 has used a single build repackaged for each major AlmaLinux release. With this release, this same build is now also used by the following older releases: 8.2, 8.4, 8.6, and 9.0. On AlmaLinux systems, this means that OpenJDK's FIPS mode will now be enabled by default when the system is in FIPS mode. To revert to the previous behaviour, use -Dcom.AlmaLinux.fips=false (AlmaLinux-118777, AlmaLinux-118778, AlmaLinux-118779, AlmaLinux-118782)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18815" id="RHSA-2025:18815" type="rhsa" title="RHSA-2025:18815"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53057" id="CVE-2025-53057" type="cve" title="CVE-2025-53057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53066" id="CVE-2025-53066" type="cve" title="CVE-2025-53066"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18815.html" id="ALSA-2025:18815" type="self" title="ALSA-2025:18815"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.472.b08" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.472.b08-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">030e66b3fbb851d457464f840b04bebaa64069a0c0de04872af524f198a31161</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.472.b08" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.472.b08-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">1f05a015be506f1bba79301d4ca020f957c5bbcf303abace96eef6ebff6af71c</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.472.b08" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.472.b08-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">312a8f6cb28c974a4db139522e4c035a601855d5484e13f7ae4965db0cd05868</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.472.b08" release="1.el9.alma.1" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.472.b08-1.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">7e289418594ddbd3e9f698ad094d485ec0f4489473314d18c07c6273122667da</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.472.b08" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.472.b08-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">7f8406077667d22f40e1fd63272e087c33bd6eb1df412f0fedf92d35f1ea46df</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.472.b08" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.472.b08-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ae271d7d0b35b7b2e44692d01dd12e5d39f60832fa69412e5c4f14bcd32dd220</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.472.b08" release="1.el9.alma.1" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.472.b08-1.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">f42a0e0c86f8235e9c8edbcd28d33fa9773a58d54e7dc288e4f94399126ea955</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18821</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-30 07:23:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance Path Factories (CVE-2025-53066)
  * JDK: Enhance Certificate Handling (CVE-2025-53057)


Bug Fix(es):  

  * Since the 8.8 release of AlmaLinuxand the 9.2 release of AlmaLinux OpenJDK 17 has used a single build repackaged for each major AlmaLinux release. With this release, this same build is now also used by the following older releases: 8.4, 8.6 and 9.0 (AlmaLinux-118788, AlmaLinux-118789, AlmaLinux-118792)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18821" id="RHSA-2025:18821" type="rhsa" title="RHSA-2025:18821"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53057" id="CVE-2025-53057" type="cve" title="CVE-2025-53057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53066" id="CVE-2025-53066" type="cve" title="CVE-2025-53066"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18821.html" id="ALSA-2025:18821" type="self" title="ALSA-2025:18821"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="java-17-openjdk-src" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">593bd55a3dcbfd3b2a3e13037205417a2d326d91d443d260bcb04b878f465791</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">5cf850737d76e4739e344b9202a6927830b164386ea9aa4442f0b10f0804fdfb</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">81f3a4178c59ddb8c98256ffd092d4513144e39f46f9ad06aed1494fef421cad</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">87e500d96f26bff28c7b3c0cbaa51026f4044ebe8ff2216615895877bafdc7d4</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">925bdf3471620ad7139d2708cbeb15a91f9057a3464c7be0e74555c2f050ab3a</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b4e10b2dd432a89e3cf114eda088bc2ff6dbdd41e76123cd350f326846fc5b69</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b92460970d184f901d84fc5d2ce996099e06394fa6ce8475f51cf6c9592db7cd</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">bd27d69c5222a9a843fe13d5435ba2d6ca5435858e3e49cbd18c45ffbaf00baf</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">fb040f02165f808478eb674e921ee0f0fa160f6705c597e0df0180616e4e1768</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18824</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-30 07:10:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance Path Factories (CVE-2025-53066)
  * JDK: Enhance Certificate Handling (CVE-2025-53057)
  * JDK: Enhance String Handling (CVE-2025-61748)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18824" id="RHSA-2025:18824" type="rhsa" title="RHSA-2025:18824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53057" id="CVE-2025-53057" type="cve" title="CVE-2025-53057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53066" id="CVE-2025-53066" type="cve" title="CVE-2025-53066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61748" id="CVE-2025-61748" type="cve" title="CVE-2025-61748"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18824.html" id="ALSA-2025:18824" type="self" title="ALSA-2025:18824"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="java-21-openjdk" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">0c3a5c3c55026e908185a77784b624f5690412dd0b36ca96d2e9c803543fcf8f</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">1e4cb1b6cbf71feec469c0d68ab373d542ef899b71ea17b5444ceff26150bcaa</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">231724b556a055d74aa749319b14d2c16cc5b0354d1ca21afdae74a87a30a200</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">4bb546c2494d57c663e5c0e1c0fa931c94d8ad1d883a33dbc7e9028affd91dca</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">580a7e7376f9ac6ee2cdf617e16894a3f77c07bf362955019230f44c730a8545</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">6064861f6e8db17074aaf5b1916a5b5881380f15a47c37e6297b00fad0e48407</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">6199013b6d2765f696dd1be006c3824378121ca62bfeea6139f07f636605c223</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">9cf54f301e2290d015ef78360f1c061db5e0d3f54fcaaf3d255da944601128c6</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d9ad2bb96a1aacf6502f1c04d39ff8f829884824ddea31ec71c61637cab920d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19113</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-10-27 00:00:00"/>
    <updated date="2025-10-28 07:58:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176)
  * libtiff: Libtiff Write-What-Where (CVE-2025-9900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19113" id="RHSA-2025:19113" type="rhsa" title="RHSA-2025:19113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8176" id="CVE-2025-8176" type="cve" title="CVE-2025-8176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900"/>
      <reference href="https://bugzilla.redhat.com/2383598" id="2383598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2392784" id="2392784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19113.html" id="ALSA-2025:19113" type="self" title="ALSA-2025:19113"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libtiff" version="4.4.0" release="13.el9_6.2" epoch="0" arch="s390x" src="libtiff-4.4.0-13.el9_6.2.src.rpm">
          <filename>libtiff-4.4.0-13.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">540b5cf6ce1260e1c88f624edd99d2d2858ae98c39159286985d3a7149625673</sum>
        </package>
        <package name="libtiff-devel" version="4.4.0" release="13.el9_6.2" epoch="0" arch="s390x" src="libtiff-4.4.0-13.el9_6.2.src.rpm">
          <filename>libtiff-devel-4.4.0-13.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">dbbccb0699e75f11957024d1949ccdd3b2ca0b299aa044fe3e171984ee08a774</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1915</id>
    <title>Important: emacs security update</title>
    <issued date="2025-02-27 00:00:00"/>
    <updated date="2025-03-18 07:05:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>emacs security update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.  

Security Fix(es):  

  * emacs: Shell Injection Vulnerability in GNU Emacs via Custom "man" URI Scheme (CVE-2025-1244)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1915" id="RHSA-2025:1915" type="rhsa" title="RHSA-2025:1915"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1244" id="CVE-2025-1244" type="cve" title="CVE-2025-1244"/>
      <reference href="https://bugzilla.redhat.com/2345150" id="2345150" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1915.html" id="ALSA-2025:1915" type="self" title="ALSA-2025:1915"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="emacs-common" version="27.2" release="11.el9_5.1" epoch="1" arch="s390x" src="emacs-27.2-11.el9_5.1.src.rpm">
          <filename>emacs-common-27.2-11.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">272cf1b1fd56f01e8b38d89985e4c50fc0b111694862558a4aa5427bbc4bbcae</sum>
        </package>
        <package name="emacs-filesystem" version="27.2" release="11.el9_5.1" epoch="1" arch="noarch" src="emacs-27.2-11.el9_5.1.src.rpm">
          <filename>emacs-filesystem-27.2-11.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">57425fc8bd2c19350e0bfcfb88acd31691426f35eb27d61378c162a4f848fe7a</sum>
        </package>
        <package name="emacs-lucid" version="27.2" release="11.el9_5.1" epoch="1" arch="s390x" src="emacs-27.2-11.el9_5.1.src.rpm">
          <filename>emacs-lucid-27.2-11.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">7282d4cd1e3077ffd812ca29a27600f27be24a2fb3ac79ea8acb7e9a8611f437</sum>
        </package>
        <package name="emacs" version="27.2" release="11.el9_5.1" epoch="1" arch="s390x" src="emacs-27.2-11.el9_5.1.src.rpm">
          <filename>emacs-27.2-11.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">fafde1d6ce18ba1c3ac7503c3d69cc9744e26bb7380b72e075ab00f9fe356414</sum>
        </package>
        <package name="emacs-nox" version="27.2" release="11.el9_5.1" epoch="1" arch="s390x" src="emacs-27.2-11.el9_5.1.src.rpm">
          <filename>emacs-nox-27.2-11.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">fe558376b2ce8aefc556c05b25f2ad8f868478dc9af0503d346b6c468d04a3cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19237</id>
    <title>Important: redis security update</title>
    <issued date="2025-10-29 00:00:00"/>
    <updated date="2025-10-30 07:03:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)
  * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)
  * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)
  * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19237" id="RHSA-2025:19237" type="rhsa" title="RHSA-2025:19237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46817" id="CVE-2025-46817" type="cve" title="CVE-2025-46817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46818" id="CVE-2025-46818" type="cve" title="CVE-2025-46818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46819" id="CVE-2025-46819" type="cve" title="CVE-2025-46819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49844" id="CVE-2025-49844" type="cve" title="CVE-2025-49844"/>
      <reference href="https://bugzilla.redhat.com/2401258" id="2401258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401292" id="2401292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401322" id="2401322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401324" id="2401324" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19237.html" id="ALSA-2025:19237" type="self" title="ALSA-2025:19237"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="redis-doc" version="6.2.20" release="1.el9_6" epoch="0" arch="noarch" src="redis-6.2.20-1.el9_6.src.rpm">
          <filename>redis-doc-6.2.20-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">1e8b70ff7c429f4c9a4b2ceeb0700b5d771d0e49fd783385b99e72d840a97e99</sum>
        </package>
        <package name="redis" version="6.2.20" release="1.el9_6" epoch="0" arch="s390x" src="redis-6.2.20-1.el9_6.src.rpm">
          <filename>redis-6.2.20-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5b43c4b7d3eb60cb891f5de031dc25594e84b8d8ffa06bc0e059addc50822540</sum>
        </package>
        <package name="redis-devel" version="6.2.20" release="1.el9_6" epoch="0" arch="s390x" src="redis-6.2.20-1.el9_6.src.rpm">
          <filename>redis-devel-6.2.20-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e4dd3b299980bf7179914f2cdd3ad6ee456b4f874e308930d5c51a5dec6fa418</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19345</id>
    <title>Important: redis:7 security update</title>
    <issued date="2025-10-30 00:00:00"/>
    <updated date="2025-11-07 12:12:46"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis:7 security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)
  * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)
  * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)
  * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19345" id="RHSA-2025:19345" type="rhsa" title="RHSA-2025:19345"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46817" id="CVE-2025-46817" type="cve" title="CVE-2025-46817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46818" id="CVE-2025-46818" type="cve" title="CVE-2025-46818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46819" id="CVE-2025-46819" type="cve" title="CVE-2025-46819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49844" id="CVE-2025-49844" type="cve" title="CVE-2025-49844"/>
      <reference href="https://bugzilla.redhat.com/2401258" id="2401258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401292" id="2401292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401322" id="2401322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401324" id="2401324" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19345.html" id="ALSA-2025:19345" type="self" title="ALSA-2025:19345"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <module name="redis" stream="7" version="9060020251030145517" context="8cf767d6" arch="s390x"/>
        <package name="redis" version="7.2.11" release="1.module_el9.6.0+188+92104ce8" epoch="0" arch="s390x" src="redis-7.2.11-1.module_el9.6.0+188+92104ce8.src.rpm">
          <filename>redis-7.2.11-1.module_el9.6.0+188+92104ce8.s390x.rpm</filename>
          <sum type="sha256">0224c646e556c5d4ae9d33f72d7dd4d2cc38e87fda59245ad6b6f937b646a39d</sum>
        </package>
        <package name="redis-devel" version="7.2.11" release="1.module_el9.6.0+188+92104ce8" epoch="0" arch="s390x" src="redis-7.2.11-1.module_el9.6.0+188+92104ce8.src.rpm">
          <filename>redis-devel-7.2.11-1.module_el9.6.0+188+92104ce8.s390x.rpm</filename>
          <sum type="sha256">5712cf06b3a42c187c13116b38a9ae8c2a72f01ece80177e6180b2617e1d495c</sum>
        </package>
        <package name="redis-doc" version="7.2.11" release="1.module_el9.6.0+188+92104ce8" epoch="0" arch="noarch" src="redis-7.2.11-1.module_el9.6.0+188+92104ce8.src.rpm">
          <filename>redis-doc-7.2.11-1.module_el9.6.0+188+92104ce8.noarch.rpm</filename>
          <sum type="sha256">e0e782684f21c859ef6e2be5a9e350696716b68b6e68ae9e6070eaae7a7881f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19409</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-03 00:00:00"/>
    <updated date="2025-11-07 11:52:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702)
  * kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367)
  * kernel: crypto: xts - Handle EBUSY correctly (CVE-2023-53494)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19409" id="RHSA-2025:19409" type="rhsa" title="RHSA-2025:19409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50367" id="CVE-2022-50367" type="cve" title="CVE-2022-50367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53494" id="CVE-2023-53494" type="cve" title="CVE-2023-53494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39702" id="CVE-2025-39702" type="cve" title="CVE-2025-39702"/>
      <reference href="https://bugzilla.redhat.com/2393533" id="2393533" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396114" id="2396114" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400777" id="2400777" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19409.html" id="ALSA-2025:19409" type="self" title="ALSA-2025:19409"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-devel" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.60.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0b36e1af0be7778ab05140297ee38204e9d97afcd885c224ee641aae214aa516</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.60.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0c11558809813a6041da7418b45ab0a9a662133cd780466c3f4faadb4a91cdfc</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.60.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">16d7d85170fbe430aac3d86740b26a47cc9ce5f777d29cf8523a3554e96f632e</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.60.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">348af100886bfbf5fd464e76b33936be76dd657cb4b4d0692c4fe35dcaefbf2e</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.60.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">56d81918c6bf8cfe78aa7045fdf3a566b6bf060001ad9c292756177b92de89ca</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.60.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">672e5da8ebd07b7370c7f5fbeec873811e0e3d256011de37ff7ce37ab4ded155</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.60.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7169ace9779697c4848445cb7fc31673d7e76eeb407307af32dc154a66de3fc3</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.60.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">9933e2c9b8b9188d13dc6d27efdf01fa39e201987d1414e6b2fcd4e591d82661</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.60.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e6d873f896ccee753cb9eca0bea94b271c33097e0bea92d9dbd44b2b1519d222</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.60.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f1c3d9ada7a5c2f2c4fc9f74cfa70ab4bacd3380c5dcc8b804863c8a42ca2a76</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.60.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f20b183d3790d826521dda62e166c5932e8d115f6b3e6c29701b352a7fc4554b</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.60.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">fff5f542311c467ce121c43962f3a29b41557ce7fa927bfd3d65e8bee4666dc7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19489</id>
    <title>Important: tigervnc security update</title>
    <issued date="2025-11-03 00:00:00"/>
    <updated date="2025-11-07 10:26:16"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19489" id="RHSA-2025:19489" type="rhsa" title="RHSA-2025:19489"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19489.html" id="ALSA-2025:19489" type="self" title="ALSA-2025:19489"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="tigervnc-server" version="1.14.1" release="9.el9_6" epoch="0" arch="s390x" src="tigervnc-1.14.1-9.el9_6.src.rpm">
          <filename>tigervnc-server-1.14.1-9.el9_6.s390x.rpm</filename>
          <sum type="sha256">18a120ab00fe561171300c13f4faf516471d7a8d556a4724854a3e2a2c0aa06b</sum>
        </package>
        <package name="tigervnc-icons" version="1.14.1" release="9.el9_6" epoch="0" arch="noarch" src="tigervnc-1.14.1-9.el9_6.src.rpm">
          <filename>tigervnc-icons-1.14.1-9.el9_6.noarch.rpm</filename>
          <sum type="sha256">a48af40b7b945104b762b3bee9b92d035d55472d983c8a5618b5e9955010c260</sum>
        </package>
        <package name="tigervnc-license" version="1.14.1" release="9.el9_6" epoch="0" arch="noarch" src="tigervnc-1.14.1-9.el9_6.src.rpm">
          <filename>tigervnc-license-1.14.1-9.el9_6.noarch.rpm</filename>
          <sum type="sha256">b0a4e8d4edae26e11f55b71f6894b5ac9fe20e6873ff20ca43ffe155a724cc41</sum>
        </package>
        <package name="tigervnc-server-module" version="1.14.1" release="9.el9_6" epoch="0" arch="s390x" src="tigervnc-1.14.1-9.el9_6.src.rpm">
          <filename>tigervnc-server-module-1.14.1-9.el9_6.s390x.rpm</filename>
          <sum type="sha256">b28cabf7cf6bc0ba391abaf9ff343bd3dac071bdb9638d8f2c0f22c410b52ccf</sum>
        </package>
        <package name="tigervnc-selinux" version="1.14.1" release="9.el9_6" epoch="0" arch="noarch" src="tigervnc-1.14.1-9.el9_6.src.rpm">
          <filename>tigervnc-selinux-1.14.1-9.el9_6.noarch.rpm</filename>
          <sum type="sha256">cb396b6637c108f1a93ab3c4b6d5f8268f6ae61a68b5cca03d929802b332076f</sum>
        </package>
        <package name="tigervnc" version="1.14.1" release="9.el9_6" epoch="0" arch="s390x" src="tigervnc-1.14.1-9.el9_6.src.rpm">
          <filename>tigervnc-1.14.1-9.el9_6.s390x.rpm</filename>
          <sum type="sha256">faa0b390cca71d478e6f035007080e40980b287b44f316438015e2e4942cc4e5</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.14.1" release="9.el9_6" epoch="0" arch="s390x" src="tigervnc-1.14.1-9.el9_6.src.rpm">
          <filename>tigervnc-server-minimal-1.14.1-9.el9_6.s390x.rpm</filename>
          <sum type="sha256">fbc74fc0ea608407ef85ec770de752c15efe09a563f421d40c6d34acff7acac1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19584</id>
    <title>Moderate: galera and mariadb security update</title>
    <issued date="2025-11-04 00:00:00"/>
    <updated date="2025-11-07 09:36:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>galera and mariadb security update</summary>
    <description>Galera is a fast synchronous multimaster wsrep provider (replication engine) for transactional databases and similar applications. For more information about wsrep API see &lt;https://github.com/codership/wsrep-API&gt; repository. For a description of Galera replication engine see &lt;https://www.galeracluster.com&gt; web.  

Security Fix(es):  

  * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
  * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
  * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19584" id="RHSA-2025:19584" type="rhsa" title="RHSA-2025:19584"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52969" id="CVE-2023-52969" type="cve" title="CVE-2023-52969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52970" id="CVE-2023-52970" type="cve" title="CVE-2023-52970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21490" id="CVE-2025-21490" type="cve" title="CVE-2025-21490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30693" id="CVE-2025-30693" type="cve" title="CVE-2025-30693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30722" id="CVE-2025-30722" type="cve" title="CVE-2025-30722"/>
      <reference href="https://bugzilla.redhat.com/2339221" id="2339221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350916" id="2350916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350918" id="2350918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359885" id="2359885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359963" id="2359963" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19584.html" id="ALSA-2025:19584" type="self" title="ALSA-2025:19584"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="mariadb-backup" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-backup-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">0009ecd30fcaa7ca6e40b646773be67bf566d40d77b4da7c47681d8c82bee137</sum>
        </package>
        <package name="mariadb" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">00488badcd9ec9d7ffbffc0ccc6a5f39a8d01f17da833b6978bc4f63993fdb26</sum>
        </package>
        <package name="mariadb-embedded" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-embedded-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">03b4301b106d5fda6322f315d527c7cf799d20e379f534f2eed4f2622cd0d57f</sum>
        </package>
        <package name="mariadb-server" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-server-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">116918cc91652c015a1c4f461c187d1bcf8446a0196255ccb5d2a86ba3845b78</sum>
        </package>
        <package name="mariadb-pam" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-pam-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">6c4083e4c6a3efe87421d7365b0647762c5ede93c47223f601896e323f156225</sum>
        </package>
        <package name="mariadb-server-galera" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-server-galera-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">782791fcd4bfafb29c3cca1119ed1d710fa916ab171673cf3034e2d84f91c2b4</sum>
        </package>
        <package name="mariadb-errmsg" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-errmsg-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">7839d10bb60368853146f3e29159f0ee574d541f1a614d713186cabcb47f9684</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-gssapi-server-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">a8c59ccd20bc80f5dcff549839652fb761f3b7f45dc158661b44fad8b7f5176f</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-oqgraph-engine-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">b15e3072ed7c2469aa181ea9eb55a4cf5de4a76a49b859a03dc85c18805f1009</sum>
        </package>
        <package name="mariadb-server-utils" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-server-utils-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">c550162458645f767636e556cd772a7dc5f1213e9668d15582e8ba01ee36a7ad</sum>
        </package>
        <package name="mariadb-common" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-common-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">f799174add2aa10ce938b01079d8a3c9a7b159e337c0e1f2edee45e4c7e6e171</sum>
        </package>
        <package name="galera" version="26.4.22" release="1.el9_6" epoch="0" arch="s390x" src="galera-26.4.22-1.el9_6.src.rpm">
          <filename>galera-26.4.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">fbea147068e69776b3ea32e01c9dae44a12ba615703063cc358164dce674d889</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19927</id>
    <title>Important: runc security update</title>
    <issued date="2025-11-07 00:00:00"/>
    <updated date="2025-11-10 12:59:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>runc security update</summary>
    <description>The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.  

Security Fix(es):  

  * runc: container escape via 'masked path' abuse due to mount race conditions (CVE-2025-31133)
  * runc: container escape with malicious config due to /dev/console mount and related races (CVE-2025-52565)
  * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19927" id="RHSA-2025:19927" type="rhsa" title="RHSA-2025:19927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31133" id="CVE-2025-31133" type="cve" title="CVE-2025-31133"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52565" id="CVE-2025-52565" type="cve" title="CVE-2025-52565"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52881" id="CVE-2025-52881" type="cve" title="CVE-2025-52881"/>
      <reference href="https://bugzilla.redhat.com/2404705" id="2404705" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404708" id="2404708" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404715" id="2404715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19927.html" id="ALSA-2025:19927" type="self" title="ALSA-2025:19927"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="runc" version="1.2.5" release="3.el9_6" epoch="4" arch="s390x" src="runc-1.2.5-3.el9_6.src.rpm">
          <filename>runc-1.2.5-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">1f81a90565da1d20e7b1b4d1141879bfc422bfe16b1538411040fcf8d2e3f245</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19930</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-10 00:00:00"/>
    <updated date="2025-11-12 09:57:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350)
  * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357)
  * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19930" id="RHSA-2025:19930" type="rhsa" title="RHSA-2025:19930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36350" id="CVE-2024-36350" type="cve" title="CVE-2024-36350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36357" id="CVE-2024-36357" type="cve" title="CVE-2024-36357"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40300" id="CVE-2025-40300" type="cve" title="CVE-2025-40300"/>
      <reference href="https://bugzilla.redhat.com/2350725" id="2350725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350726" id="2350726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394627" id="2394627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19930.html" id="ALSA-2025:19930" type="self" title="ALSA-2025:19930"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="perf" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.62.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0275767235d939e36e18f217990079b2c02b4c2e9feb688ffbffba98fc65e2a5</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.62.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">05b88e416069c5e9dbe8fe7dcacd8fc024fc4fdc9ac915b43c43358053a1f740</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.62.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0dfb82bce610fa69b0fcce709d77222dbb7f58e9ef5705b7f70251ad687e404a</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.62.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">36ddfa0671f25087e616c0c94d7263bb9e40cae3866d29851e0356fb972ea9ba</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.62.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">46adc409d85d81167d647b96b2f8a20e7105edca5fbd7c2c98d4a3a573f8a3c5</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.62.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">519f3b3694ca08c31e9f96e0d7741dc97fd38f3734178026b5b06e613c49e510</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.62.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">6f8756cd50540c0ba18e61d6e71482a22198afd19992669c90e8d0925a88344c</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.62.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">7f01643d1b9c165c0f8e53b1b715f7bfea46f4aeb0c7ae6ae386ef645c2abcb4</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.62.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">97a6bcbc311e5cd0b62e4b8c50a55cab058572e5a8ce572114ec9658519aed94</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.62.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">b2ea6a0d9f2feb26a1e1156d5bf35dc3c1cb4dc4512bc36621db01df0574294b</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.62.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c6996be5cca479cbba69f76de2f2113937042a48c5756bfecd63b6db41b8906a</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.62.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e46cef5aa8cd2344c53285fa23e81bb3ee5f29cc275f3d9b9124cb967ccbd4dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19950</id>
    <title>Important: bind9.18 security update</title>
    <issued date="2025-11-10 00:00:00"/>
    <updated date="2025-11-19 09:11:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.18 security update</summary>
    <description>BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  

Security Fix(es):  

  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19950" id="RHSA-2025:19950" type="rhsa" title="RHSA-2025:19950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40778" id="CVE-2025-40778" type="cve" title="CVE-2025-40778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40780" id="CVE-2025-40780" type="cve" title="CVE-2025-40780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8677" id="CVE-2025-8677" type="cve" title="CVE-2025-8677"/>
      <reference href="https://bugzilla.redhat.com/2405827" id="2405827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405829" id="2405829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405830" id="2405830" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19950.html" id="ALSA-2025:19950" type="self" title="ALSA-2025:19950"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="bind9.18-libs" version="9.18.29" release="4.el9_6.2" epoch="32" arch="s390x" src="bind9.18-9.18.29-4.el9_6.2.src.rpm">
          <filename>bind9.18-libs-9.18.29-4.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">2d5423ac3a99092b25ad8b254f639ecc9ab5b521574beed313b7a5dd3090977d</sum>
        </package>
        <package name="bind9.18-utils" version="9.18.29" release="4.el9_6.2" epoch="32" arch="s390x" src="bind9.18-9.18.29-4.el9_6.2.src.rpm">
          <filename>bind9.18-utils-9.18.29-4.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">9aa267683c27b2d9259355f6552427f94ac0e37ee56f4a85fa0c3e0610694b4a</sum>
        </package>
        <package name="bind9.18" version="9.18.29" release="4.el9_6.2" epoch="32" arch="s390x" src="bind9.18-9.18.29-4.el9_6.2.src.rpm">
          <filename>bind9.18-9.18.29-4.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">9cf81e3eb0eb75f39560365cc9d2d55894c19c58537a7882dfbcd011d991bba5</sum>
        </package>
        <package name="bind9.18-chroot" version="9.18.29" release="4.el9_6.2" epoch="32" arch="s390x" src="bind9.18-9.18.29-4.el9_6.2.src.rpm">
          <filename>bind9.18-chroot-9.18.29-4.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">bf5e279508f29f0237a6d4961adf8ed7b12115a461accf93acf9b016d333814b</sum>
        </package>
        <package name="bind9.18-dnssec-utils" version="9.18.29" release="4.el9_6.2" epoch="32" arch="s390x" src="bind9.18-9.18.29-4.el9_6.2.src.rpm">
          <filename>bind9.18-dnssec-utils-9.18.29-4.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">db48aa6836da3ee0b0939cf6c8f4650d633cd15c9db2730adac170ff000304af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2035</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-03-03 00:00:00"/>
    <updated date="2025-03-11 12:06:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54543)
  * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2025-24143)
  * webkitgtk: Copying a URL from Web Inspector may lead to command injection (CVE-2025-24150)
  * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-24158)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24162)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2035" id="RHSA-2025:2035" type="rhsa" title="RHSA-2025:2035"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54543" id="CVE-2024-54543" type="cve" title="CVE-2024-54543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24143" id="CVE-2025-24143" type="cve" title="CVE-2025-24143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24150" id="CVE-2025-24150" type="cve" title="CVE-2025-24150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24158" id="CVE-2025-24158" type="cve" title="CVE-2025-24158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24162" id="CVE-2025-24162" type="cve" title="CVE-2025-24162"/>
      <reference href="https://bugzilla.redhat.com/2344619" id="2344619" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344621" id="2344621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344622" id="2344622" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344623" id="2344623" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344624" id="2344624" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2035.html" id="ALSA-2025:2035" type="self" title="ALSA-2025:2035"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="webkit2gtk3-devel" version="2.46.6" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-1.el9_5.src.rpm">
          <filename>webkit2gtk3-devel-2.46.6-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">15035e2ef0908b953ea9fbde013dfe12377d6c4de191d28fb5e206e67a4ad469</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.46.6" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-1.el9_5.src.rpm">
          <filename>webkit2gtk3-jsc-2.46.6-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">d19440f6527b5b037bb09cde2c60e68342ba8993d7cf75c8d9292cd1b413b5a6</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.46.6" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-1.el9_5.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.46.6-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">dca2bbc6c9730aba45f1e1e63596569a26515d5bae2f05eb0db6afb66bfc979f</sum>
        </package>
        <package name="webkit2gtk3" version="2.46.6" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-1.el9_5.src.rpm">
          <filename>webkit2gtk3-2.46.6-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">fb84256fd36d84cec117634baf7a6ef97d0d41f1fe33fa014ebb11eb5c1e75fb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20518</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:15:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)
  * kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)
  * kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)
  * kernel: vfs: fix race between evice_inodes() and find_inode()&amp;#38;iput() (CVE-2024-47679)
  * kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)
  * kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)
  * kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)
  * kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)
  * kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)
  * kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)
  * kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)
  * kernel: afs: Fix lock recursion (CVE-2024-53090)
  * kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)
  * kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)
  * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  * kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)
  * kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)
  * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
  * kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)
  * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
  * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  * kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)
  * kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)
  * kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)
  * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  * kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)
  * kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)
  * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  * kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)
  * kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  * kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)
  * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  * kernel: pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0 (CVE-2025-21702)
  * kernel: usbnet: fix memory leak in error case (CVE-2022-49657)
  * kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)
  * kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)
  * kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)
  * kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)
  * kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)
  * kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)
  * kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269)
  * kernel: ima: Fix a potential integer overflow in ima_appraise_measurement (CVE-2022-49643)
  * kernel: powerpc/xive/spapr: correct bitmap allocation size (CVE-2022-49623)
  * kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs (CVE-2022-49357)
  * kernel: list: fix a data-race around ep-&gt;rdllist (CVE-2022-49443)
  * kernel: tracing/histograms: Fix memory leak problem (CVE-2022-49648)
  * kernel: Input: synaptics - fix crash when enabling pass-through port (CVE-2025-21746)
  * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
  * kernel: bpf: Send signals asynchronously if !preemptible (CVE-2025-21728)
  * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
  * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
  * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
  * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
  * kernel: RDMA/mlx5: Fix implicit ODP use after free (CVE-2025-21714)
  * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
  * kernel: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (CVE-2024-57993)
  * kernel: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (CVE-2025-21729)
  * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
  * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
  * kernel: OPP: add index check to assert to avoid buffer overflow in _read_freq() (CVE-2024-57998)
  * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
  * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
  * kernel: scsi: ufs: core: Fix use-after free in init error and remove paths (CVE-2025-21739)
  * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
  * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
  * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
  * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
  * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
  * kernel: team: better TEAM_OPTION_TYPE_STRING validation (CVE-2025-21787)
  * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981)
  * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790)
  * kernel: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (CVE-2024-57990)
  * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765)
  * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012)
  * kernel: blk-cgroup: Fix class @block_class's subsystem refcount leakage (CVE-2025-21745)
  * kernel: net: let net.core.dev_weight always be non-zero (CVE-2025-21806)
  * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072)
  * kernel: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (CVE-2024-58068)
  * kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference (CVE-2024-58062)
  * kernel: idpf: convert workqueues to unbound (CVE-2024-58057)
  * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828)
  * kernel: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CVE-2024-58083)
  * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826)
  * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077)
  * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075)
  * kernel: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (CVE-2025-21829)
  * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839)
  * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837)
  * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350)
  * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357)
  * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851)
  * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855)
  * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844)
  * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853)
  * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847)
  * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864)
  * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088)
  * kernel: acct: perform last write from workqueue (CVE-2025-21846)
  * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (CVE-2025-21861)
  * kernel: io_uring: prevent opcode speculation (CVE-2025-21863)
  * kernel: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (CVE-2025-21848)
  * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056)
  * kernel: can: j1939: j1939_send_one(): fix missing CAN header initialization (CVE-2022-49845)
  * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994)
  * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116)
  * kernel: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (CVE-2025-38396)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20518" id="RHSA-2025:20518" type="rhsa" title="RHSA-2025:20518"/>
      <reference href="https://bugzilla.redhat.com/2298169" id="2298169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312077" id="2312077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2313092" id="2313092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320172" id="2320172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320259" id="2320259" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320455" id="2320455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320616" id="2320616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320722" id="2320722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324549" id="2324549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327203" id="2327203" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327374" id="2327374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327887" id="2327887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329918" id="2329918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2330341" id="2330341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331326" id="2331326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334357" id="2334357" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334396" id="2334396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334415" id="2334415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334439" id="2334439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334537" id="2334537" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334547" id="2334547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334548" id="2334548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334560" id="2334560" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334676" id="2334676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334795" id="2334795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334829" id="2334829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336541" id="2336541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337121" id="2337121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337124" id="2337124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338814" id="2338814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338828" id="2338828" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338832" id="2338832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343172" id="2343172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343175" id="2343175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344684" id="2344684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344687" id="2344687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345240" id="2345240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346272" id="2346272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347707" id="2347707" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347753" id="2347753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347759" id="2347759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347781" id="2347781" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347807" id="2347807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347859" id="2347859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347919" id="2347919" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347968" id="2347968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348022" id="2348022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348071" id="2348071" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348238" id="2348238" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348240" id="2348240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348279" id="2348279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348515" id="2348515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348523" id="2348523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348528" id="2348528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348541" id="2348541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348543" id="2348543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348547" id="2348547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348550" id="2348550" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348554" id="2348554" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348556" id="2348556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348566" id="2348566" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348573" id="2348573" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348574" id="2348574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348577" id="2348577" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348578" id="2348578" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348581" id="2348581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348584" id="2348584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348585" id="2348585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348587" id="2348587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348595" id="2348595" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348597" id="2348597" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348600" id="2348600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348601" id="2348601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348615" id="2348615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348620" id="2348620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348625" id="2348625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348634" id="2348634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348645" id="2348645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348650" id="2348650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348654" id="2348654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348901" id="2348901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350363" id="2350363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350367" id="2350367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350374" id="2350374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350375" id="2350375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350386" id="2350386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350388" id="2350388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350392" id="2350392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350396" id="2350396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350397" id="2350397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350400" id="2350400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350585" id="2350585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350589" id="2350589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350725" id="2350725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350726" id="2350726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351606" id="2351606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351608" id="2351608" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351612" id="2351612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351613" id="2351613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351616" id="2351616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351618" id="2351618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351620" id="2351620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351624" id="2351624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351625" id="2351625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351629" id="2351629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351633" id="2351633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360215" id="2360215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363380" id="2363380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369184" id="2369184" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376076" id="2376076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383441" id="2383441" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20518.html" id="ALSA-2025:20518" type="self" title="ALSA-2025:20518"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-48830.html" id="CVE-2022-48830" type="cve" title="CVE-2022-48830"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49024.html" id="CVE-2022-49024" type="cve" title="CVE-2022-49024"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49269.html" id="CVE-2022-49269" type="cve" title="CVE-2022-49269"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49353.html" id="CVE-2022-49353" type="cve" title="CVE-2022-49353"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49357.html" id="CVE-2022-49357" type="cve" title="CVE-2022-49357"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49432.html" id="CVE-2022-49432" type="cve" title="CVE-2022-49432"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49437.html" id="CVE-2022-49437" type="cve" title="CVE-2022-49437"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49443.html" id="CVE-2022-49443" type="cve" title="CVE-2022-49443"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49623.html" id="CVE-2022-49623" type="cve" title="CVE-2022-49623"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49627.html" id="CVE-2022-49627" type="cve" title="CVE-2022-49627"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49643.html" id="CVE-2022-49643" type="cve" title="CVE-2022-49643"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49648.html" id="CVE-2022-49648" type="cve" title="CVE-2022-49648"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49657.html" id="CVE-2022-49657" type="cve" title="CVE-2022-49657"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49670.html" id="CVE-2022-49670" type="cve" title="CVE-2022-49670"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49672.html" id="CVE-2022-49672" type="cve" title="CVE-2022-49672"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49845.html" id="CVE-2022-49845" type="cve" title="CVE-2022-49845"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-36350.html" id="CVE-2024-36350" type="cve" title="CVE-2024-36350"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-36357.html" id="CVE-2024-36357" type="cve" title="CVE-2024-36357"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-46689.html" id="CVE-2024-46689" type="cve" title="CVE-2024-46689"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-46744.html" id="CVE-2024-46744" type="cve" title="CVE-2024-46744"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-47679.html" id="CVE-2024-47679" type="cve" title="CVE-2024-47679"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-47727.html" id="CVE-2024-47727" type="cve" title="CVE-2024-47727"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-49570.html" id="CVE-2024-49570" type="cve" title="CVE-2024-49570"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-49864.html" id="CVE-2024-49864" type="cve" title="CVE-2024-49864"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-50060.html" id="CVE-2024-50060" type="cve" title="CVE-2024-50060"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-50195.html" id="CVE-2024-50195" type="cve" title="CVE-2024-50195"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-50294.html" id="CVE-2024-50294" type="cve" title="CVE-2024-50294"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-52332.html" id="CVE-2024-52332" type="cve" title="CVE-2024-52332"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53052.html" id="CVE-2024-53052" type="cve" title="CVE-2024-53052"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53090.html" id="CVE-2024-53090" type="cve" title="CVE-2024-53090"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53119.html" id="CVE-2024-53119" type="cve" title="CVE-2024-53119"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53135.html" id="CVE-2024-53135" type="cve" title="CVE-2024-53135"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53170.html" id="CVE-2024-53170" type="cve" title="CVE-2024-53170"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53216.html" id="CVE-2024-53216" type="cve" title="CVE-2024-53216"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53229.html" id="CVE-2024-53229" type="cve" title="CVE-2024-53229"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53241.html" id="CVE-2024-53241" type="cve" title="CVE-2024-53241"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53680.html" id="CVE-2024-53680" type="cve" title="CVE-2024-53680"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-54456.html" id="CVE-2024-54456" type="cve" title="CVE-2024-54456"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56603.html" id="CVE-2024-56603" type="cve" title="CVE-2024-56603"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56645.html" id="CVE-2024-56645" type="cve" title="CVE-2024-56645"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56662.html" id="CVE-2024-56662" type="cve" title="CVE-2024-56662"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56672.html" id="CVE-2024-56672" type="cve" title="CVE-2024-56672"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56675.html" id="CVE-2024-56675" type="cve" title="CVE-2024-56675"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56690.html" id="CVE-2024-56690" type="cve" title="CVE-2024-56690"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56709.html" id="CVE-2024-56709" type="cve" title="CVE-2024-56709"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56739.html" id="CVE-2024-56739" type="cve" title="CVE-2024-56739"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56786.html" id="CVE-2024-56786" type="cve" title="CVE-2024-56786"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57981.html" id="CVE-2024-57981" type="cve" title="CVE-2024-57981"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57986.html" id="CVE-2024-57986" type="cve" title="CVE-2024-57986"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57987.html" id="CVE-2024-57987" type="cve" title="CVE-2024-57987"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57988.html" id="CVE-2024-57988" type="cve" title="CVE-2024-57988"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57989.html" id="CVE-2024-57989" type="cve" title="CVE-2024-57989"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57990.html" id="CVE-2024-57990" type="cve" title="CVE-2024-57990"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57993.html" id="CVE-2024-57993" type="cve" title="CVE-2024-57993"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57995.html" id="CVE-2024-57995" type="cve" title="CVE-2024-57995"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57998.html" id="CVE-2024-57998" type="cve" title="CVE-2024-57998"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58012.html" id="CVE-2024-58012" type="cve" title="CVE-2024-58012"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58014.html" id="CVE-2024-58014" type="cve" title="CVE-2024-58014"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58015.html" id="CVE-2024-58015" type="cve" title="CVE-2024-58015"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58057.html" id="CVE-2024-58057" type="cve" title="CVE-2024-58057"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58062.html" id="CVE-2024-58062" type="cve" title="CVE-2024-58062"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58068.html" id="CVE-2024-58068" type="cve" title="CVE-2024-58068"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58072.html" id="CVE-2024-58072" type="cve" title="CVE-2024-58072"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58075.html" id="CVE-2024-58075" type="cve" title="CVE-2024-58075"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58077.html" id="CVE-2024-58077" type="cve" title="CVE-2024-58077"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58083.html" id="CVE-2024-58083" type="cve" title="CVE-2024-58083"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58088.html" id="CVE-2024-58088" type="cve" title="CVE-2024-58088"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21631.html" id="CVE-2025-21631" type="cve" title="CVE-2025-21631"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21647.html" id="CVE-2025-21647" type="cve" title="CVE-2025-21647"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21648.html" id="CVE-2025-21648" type="cve" title="CVE-2025-21648"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21671.html" id="CVE-2025-21671" type="cve" title="CVE-2025-21671"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21672.html" id="CVE-2025-21672" type="cve" title="CVE-2025-21672"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21691.html" id="CVE-2025-21691" type="cve" title="CVE-2025-21691"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21693.html" id="CVE-2025-21693" type="cve" title="CVE-2025-21693"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21696.html" id="CVE-2025-21696" type="cve" title="CVE-2025-21696"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21702.html" id="CVE-2025-21702" type="cve" title="CVE-2025-21702"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21714.html" id="CVE-2025-21714" type="cve" title="CVE-2025-21714"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21726.html" id="CVE-2025-21726" type="cve" title="CVE-2025-21726"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21728.html" id="CVE-2025-21728" type="cve" title="CVE-2025-21728"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21729.html" id="CVE-2025-21729" type="cve" title="CVE-2025-21729"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21738.html" id="CVE-2025-21738" type="cve" title="CVE-2025-21738"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21739.html" id="CVE-2025-21739" type="cve" title="CVE-2025-21739"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21745.html" id="CVE-2025-21745" type="cve" title="CVE-2025-21745"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21746.html" id="CVE-2025-21746" type="cve" title="CVE-2025-21746"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21765.html" id="CVE-2025-21765" type="cve" title="CVE-2025-21765"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21786.html" id="CVE-2025-21786" type="cve" title="CVE-2025-21786"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21787.html" id="CVE-2025-21787" type="cve" title="CVE-2025-21787"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21790.html" id="CVE-2025-21790" type="cve" title="CVE-2025-21790"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21791.html" id="CVE-2025-21791" type="cve" title="CVE-2025-21791"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21795.html" id="CVE-2025-21795" type="cve" title="CVE-2025-21795"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21796.html" id="CVE-2025-21796" type="cve" title="CVE-2025-21796"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21806.html" id="CVE-2025-21806" type="cve" title="CVE-2025-21806"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21826.html" id="CVE-2025-21826" type="cve" title="CVE-2025-21826"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21828.html" id="CVE-2025-21828" type="cve" title="CVE-2025-21828"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21829.html" id="CVE-2025-21829" type="cve" title="CVE-2025-21829"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21837.html" id="CVE-2025-21837" type="cve" title="CVE-2025-21837"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21839.html" id="CVE-2025-21839" type="cve" title="CVE-2025-21839"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21844.html" id="CVE-2025-21844" type="cve" title="CVE-2025-21844"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21846.html" id="CVE-2025-21846" type="cve" title="CVE-2025-21846"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21847.html" id="CVE-2025-21847" type="cve" title="CVE-2025-21847"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21848.html" id="CVE-2025-21848" type="cve" title="CVE-2025-21848"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21851.html" id="CVE-2025-21851" type="cve" title="CVE-2025-21851"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21853.html" id="CVE-2025-21853" type="cve" title="CVE-2025-21853"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21855.html" id="CVE-2025-21855" type="cve" title="CVE-2025-21855"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21861.html" id="CVE-2025-21861" type="cve" title="CVE-2025-21861"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21863.html" id="CVE-2025-21863" type="cve" title="CVE-2025-21863"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21864.html" id="CVE-2025-21864" type="cve" title="CVE-2025-21864"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-22056.html" id="CVE-2025-22056" type="cve" title="CVE-2025-22056"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-22097.html" id="CVE-2025-22097" type="cve" title="CVE-2025-22097"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-37994.html" id="CVE-2025-37994" type="cve" title="CVE-2025-37994"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38116.html" id="CVE-2025-38116" type="cve" title="CVE-2025-38116"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38396.html" id="CVE-2025-38396" type="cve" title="CVE-2025-38396"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">0970b641a549f2a54fe9f188e64598e0dda62f88f6ca24622ebdf7962a4d56c6</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">283e0b83d139e8fd964cf726f4e35451e27d673ead87236b8a32c743bec30974</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">6c70ec30327b93655b33b82f00eb8e8a12d5d52054057d15f271cd453fea58cf</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">87ce0a139bc763106cab6572a09e19058c776767ed4552e01f3a2136ed6c7fa4</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">8b00479dd14c708c34e3ff54771c4ce596ad378c2512440c95177d2433e79a75</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">99a6fa6731e25f1a9bfb118882435bb769049f7879eba30a94ba42e2104ebb65</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">a5d41791b95a8f6a58624dab52eb141b453a11cfd2271d22d7b277dc11760608</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">b23e4333955565c04555d4f0ea18658417fd9e61e06296fa49b082ba66ded7d1</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">dc97f8d36f9ad4894f04f4f1ef09fa5d74251e2182b28cc93271d1a2f08f379d</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.5.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">e0ab78a8550bea90b76893646795a5e87e4bf3dc56ed958f8c803214d9f2ed81</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">e4271a2358474c0d160ff69c6eb44b0a955f09513967e754f934eea207c4e2df</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">f1694ecf8502e9fcf71750cc282b11b004b7889acc52a79c260a8e8e37f909cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20838</id>
    <title>Moderate: zziplib security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:20:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zziplib security update</summary>
    <description>The zziplib is a lightweight library to easily extract data from zip files.  

Security Fix(es):  

  * zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20838" id="RHSA-2025:20838" type="rhsa" title="RHSA-2025:20838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2018-17828" id="CVE-2018-17828" type="cve" title="CVE-2018-17828"/>
      <reference href="https://bugzilla.redhat.com/1635888" id="1635888" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20838.html" id="ALSA-2025:20838" type="self" title="ALSA-2025:20838"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="zziplib-utils" version="0.13.71" release="12.el9" epoch="0" arch="s390x" src="zziplib-0.13.71-12.el9.src.rpm">
          <filename>zziplib-utils-0.13.71-12.el9.s390x.rpm</filename>
          <sum type="sha256">7c2e23f220b3b96e2d870fba1c3f5b40d946b0d9d051b9b3bf57f2dcde4c33bb</sum>
        </package>
        <package name="zziplib" version="0.13.71" release="12.el9" epoch="0" arch="s390x" src="zziplib-0.13.71-12.el9.src.rpm">
          <filename>zziplib-0.13.71-12.el9.s390x.rpm</filename>
          <sum type="sha256">bd1f18fa6c34ca5f91c5d26a508b6967a611cf703a03cf714cc5efbe3effe033</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20909</id>
    <title>Important: podman security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 12:26:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * database/sql: Postgres Scan Race Condition (CVE-2025-47907)
  * podman: Podman kube play command may overwrite host files (CVE-2025-9566)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20909" id="RHSA-2025:20909" type="rhsa" title="RHSA-2025:20909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47907" id="CVE-2025-47907" type="cve" title="CVE-2025-47907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9566" id="CVE-2025-9566" type="cve" title="CVE-2025-9566"/>
      <reference href="https://bugzilla.redhat.com/2387083" id="2387083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393152" id="2393152" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20909.html" id="ALSA-2025:20909" type="self" title="ALSA-2025:20909"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="podman" version="5.6.0" release="6.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-6.el9_7.src.rpm">
          <filename>podman-5.6.0-6.el9_7.s390x.rpm</filename>
          <sum type="sha256">03f4c7c387302d9f2b4835734ef7c8d6ec04c142dad08999fd32a769b9d17699</sum>
        </package>
        <package name="podman-docker" version="5.6.0" release="6.el9_7" epoch="6" arch="noarch" src="podman-5.6.0-6.el9_7.src.rpm">
          <filename>podman-docker-5.6.0-6.el9_7.noarch.rpm</filename>
          <sum type="sha256">0dc69f001bfc0953d60bfffcd07c0eeced0ae9dfc3e237fb6b9959fdae5eb761</sum>
        </package>
        <package name="podman-tests" version="5.6.0" release="6.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-6.el9_7.src.rpm">
          <filename>podman-tests-5.6.0-6.el9_7.s390x.rpm</filename>
          <sum type="sha256">2f43338f3bcd3687b55730a3837bd7cc5645444683a590ae4912a5fffc286283</sum>
        </package>
        <package name="podman-plugins" version="5.6.0" release="6.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-6.el9_7.src.rpm">
          <filename>podman-plugins-5.6.0-6.el9_7.s390x.rpm</filename>
          <sum type="sha256">5a378279d784f48e2aa9121bddacb29443fb2ea2c5614cbe8317604fbf9099e8</sum>
        </package>
        <package name="podman-remote" version="5.6.0" release="6.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-6.el9_7.src.rpm">
          <filename>podman-remote-5.6.0-6.el9_7.s390x.rpm</filename>
          <sum type="sha256">a39624f29c13516affef24b6823793d3a887fe4bba0558e037cc8eb5f0efe3fe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20922</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:22:06"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342)
  * webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43343)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20922" id="RHSA-2025:20922" type="rhsa" title="RHSA-2025:20922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43272" id="CVE-2025-43272" type="cve" title="CVE-2025-43272"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43342" id="CVE-2025-43342" type="cve" title="CVE-2025-43342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43343" id="CVE-2025-43343" type="cve" title="CVE-2025-43343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43356" id="CVE-2025-43356" type="cve" title="CVE-2025-43356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43368" id="CVE-2025-43368" type="cve" title="CVE-2025-43368"/>
      <reference href="https://bugzilla.redhat.com/2397626" id="2397626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397627" id="2397627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397628" id="2397628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397630" id="2397630" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403598" id="2403598" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20922.html" id="ALSA-2025:20922" type="self" title="ALSA-2025:20922"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="webkit2gtk3-devel" version="2.50.1" release="1.el9_7" epoch="0" arch="s390x" src="webkit2gtk3-2.50.1-1.el9_7.src.rpm">
          <filename>webkit2gtk3-devel-2.50.1-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">06cd0bdac4107745a28dddf0155d4b7414d147a7481815f8a80da92a117df082</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.50.1" release="1.el9_7" epoch="0" arch="s390x" src="webkit2gtk3-2.50.1-1.el9_7.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.50.1-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">6e8567cf8aeb2344df7b396502990e0a0a769cc7897a57c3cbfb9ae7a9c51bee</sum>
        </package>
        <package name="webkit2gtk3" version="2.50.1" release="1.el9_7" epoch="0" arch="s390x" src="webkit2gtk3-2.50.1-1.el9_7.src.rpm">
          <filename>webkit2gtk3-2.50.1-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">bde8e614b7d1a025f5ea001f69b47226cfc4b51e1034203266d792c322f35eb0</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.50.1" release="1.el9_7" epoch="0" arch="s390x" src="webkit2gtk3-2.50.1-1.el9_7.src.rpm">
          <filename>webkit2gtk3-jsc-2.50.1-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">e903401312f65511dc4edf2448f294b276046b9796d661077bfcb5acd8546c5f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20926</id>
    <title>Important: redis security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:23:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)
  * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)
  * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)
  * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20926" id="RHSA-2025:20926" type="rhsa" title="RHSA-2025:20926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46817" id="CVE-2025-46817" type="cve" title="CVE-2025-46817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46818" id="CVE-2025-46818" type="cve" title="CVE-2025-46818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46819" id="CVE-2025-46819" type="cve" title="CVE-2025-46819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49844" id="CVE-2025-49844" type="cve" title="CVE-2025-49844"/>
      <reference href="https://bugzilla.redhat.com/2401258" id="2401258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401292" id="2401292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401322" id="2401322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401324" id="2401324" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20926.html" id="ALSA-2025:20926" type="self" title="ALSA-2025:20926"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="redis-doc" version="6.2.20" release="2.el9_7" epoch="0" arch="noarch" src="redis-6.2.20-2.el9_7.src.rpm">
          <filename>redis-doc-6.2.20-2.el9_7.noarch.rpm</filename>
          <sum type="sha256">42232f3aecfa61e79d0025ac7cc0edb318fc05cf219e6b0404c9eedc8aaf5117</sum>
        </package>
        <package name="redis-devel" version="6.2.20" release="2.el9_7" epoch="0" arch="s390x" src="redis-6.2.20-2.el9_7.src.rpm">
          <filename>redis-devel-6.2.20-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">47c268a5ec655057cc8e18ed24b20e7e1bc806688dbcb452abf346c5684c4d1f</sum>
        </package>
        <package name="redis" version="6.2.20" release="2.el9_7" epoch="0" arch="s390x" src="redis-6.2.20-2.el9_7.src.rpm">
          <filename>redis-6.2.20-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">8f4a58c1610c22166890c0dee69c65063e419fd1df48431d418cc69f7a3e6176</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20928</id>
    <title>Important: ipa security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-12-01 08:16:32"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.  

Security Fix(es):  

  * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20928" id="RHSA-2025:20928" type="rhsa" title="RHSA-2025:20928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7493" id="CVE-2025-7493" type="cve" title="CVE-2025-7493"/>
      <reference href="https://bugzilla.redhat.com/2389448" id="2389448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20928.html" id="ALSA-2025:20928" type="self" title="ALSA-2025:20928"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3-ipaclient" version="4.12.2" release="22.el9_7.1" epoch="0" arch="noarch" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>python3-ipaclient-4.12.2-22.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">023ac0818f6d060a70c77956bd8ac835311b393eef88c8400b43d48a9d3e4d94</sum>
        </package>
        <package name="ipa-client-samba" version="4.12.2" release="22.el9_7.1" epoch="0" arch="s390x" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-client-samba-4.12.2-22.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">0430cfab6b7c16a8b2d295d3539fb17238d6c8755bd5d8174c81fafc9f4bd811</sum>
        </package>
        <package name="ipa-common" version="4.12.2" release="22.el9_7.1" epoch="0" arch="noarch" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-common-4.12.2-22.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">09fee2c19da96fd3e2097f8d6f43f34ff093a9427d7b4693c1cad539920b82d3</sum>
        </package>
        <package name="ipa-server-dns" version="4.12.2" release="22.el9_7.1" epoch="0" arch="noarch" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-server-dns-4.12.2-22.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">34b4aad3b8138a4f5014ff60709ef7627eca3ac2b0b42e86df6c0b94431e574c</sum>
        </package>
        <package name="ipa-selinux-luna" version="4.12.2" release="22.el9_7.1" epoch="0" arch="noarch" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-selinux-luna-4.12.2-22.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">3df260b9ce022fdaee1ddd9c42ea1feb17463f75e4b2afbf9cc455c8c9b4daf9</sum>
        </package>
        <package name="python3-ipalib" version="4.12.2" release="22.el9_7.1" epoch="0" arch="noarch" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>python3-ipalib-4.12.2-22.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">50a1e2661bd2a523ebe11023e509896359521a5af77ecd35060cdf75d2c4543e</sum>
        </package>
        <package name="ipa-server" version="4.12.2" release="22.el9_7.1" epoch="0" arch="s390x" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-server-4.12.2-22.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">5ed5e7443a868da6f4b3e65ee5d711075faab61682448ddc8a2dd354cc47cb9a</sum>
        </package>
        <package name="ipa-client-common" version="4.12.2" release="22.el9_7.1" epoch="0" arch="noarch" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-client-common-4.12.2-22.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">6181ebdc401e594ea9f842731031548ce3d0552f6a91587ffcdf2aca37217a9d</sum>
        </package>
        <package name="ipa-client-epn" version="4.12.2" release="22.el9_7.1" epoch="0" arch="s390x" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-client-epn-4.12.2-22.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">6f57d0d5701fbecd05c56572464e000df6951f390dc67a3306f7ce3723f8e82b</sum>
        </package>
        <package name="ipa-selinux" version="4.12.2" release="22.el9_7.1" epoch="0" arch="noarch" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-selinux-4.12.2-22.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">7b155f0c86a36d68c0b3bed0c5157afe056d23fc3df22ec6f31257ec957835d6</sum>
        </package>
        <package name="ipa-server-common" version="4.12.2" release="22.el9_7.1" epoch="0" arch="noarch" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-server-common-4.12.2-22.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">988c777fb46e11f835b19d497070a6c61bc338ea0b4275aed4206668f0e9bb38</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.12.2" release="22.el9_7.1" epoch="0" arch="s390x" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-server-trust-ad-4.12.2-22.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">a2da593b97552011b198c5a2dc1e483680537d4d34754d50beb0f7bf42584aa5</sum>
        </package>
        <package name="ipa-selinux-nfast" version="4.12.2" release="22.el9_7.1" epoch="0" arch="noarch" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-selinux-nfast-4.12.2-22.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">b72932cb1ba38cfcbcde3cb0f3262cde848c6796030169e08d2bea75671ae3a9</sum>
        </package>
        <package name="ipa-server-encrypted-dns" version="4.12.2" release="22.el9_7.1" epoch="0" arch="s390x" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-server-encrypted-dns-4.12.2-22.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">b772f24790de9822a9b438b31524d8ccd8cfa5ef88bf255d423b831ecf7923b0</sum>
        </package>
        <package name="ipa-client" version="4.12.2" release="22.el9_7.1" epoch="0" arch="s390x" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-client-4.12.2-22.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">cce692baf0a0507495af20b5b3a3e868bcd708c7aca7d42e2387a7c680e0b709</sum>
        </package>
        <package name="python3-ipaserver" version="4.12.2" release="22.el9_7.1" epoch="0" arch="noarch" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>python3-ipaserver-4.12.2-22.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">dfa31aad064c014fb03cb03084e0a51da7fada5fca5418221a15a584114ceee1</sum>
        </package>
        <package name="ipa-client-encrypted-dns" version="4.12.2" release="22.el9_7.1" epoch="0" arch="s390x" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>ipa-client-encrypted-dns-4.12.2-22.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">fdfff79347c1ac098ec0919b005d2d502226e8bfb624db3340e21047ff836011</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20935</id>
    <title>Important: squid security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:24:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.  

Security Fix(es):  

  * squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20935" id="RHSA-2025:20935" type="rhsa" title="RHSA-2025:20935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62168" id="CVE-2025-62168" type="cve" title="CVE-2025-62168"/>
      <reference href="https://bugzilla.redhat.com/2404736" id="2404736" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20935.html" id="ALSA-2025:20935" type="self" title="ALSA-2025:20935"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="squid" version="5.5" release="22.el9_7.1" epoch="7" arch="s390x" src="squid-5.5-22.el9_7.1.src.rpm">
          <filename>squid-5.5-22.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">69cc6023a7c9426708c85b05c04d73c4831c1155f7512e6b0abca90903c1829b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20936</id>
    <title>Important: sqlite security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:25:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.  

Security Fix(es):  

  * sqlite: Integer Truncation in SQLite (CVE-2025-6965)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20936" id="RHSA-2025:20936" type="rhsa" title="RHSA-2025:20936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6965" id="CVE-2025-6965" type="cve" title="CVE-2025-6965"/>
      <reference href="https://bugzilla.redhat.com/2380149" id="2380149" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20936.html" id="ALSA-2025:20936" type="self" title="ALSA-2025:20936"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="sqlite" version="3.34.1" release="9.el9_7" epoch="0" arch="s390x" src="sqlite-3.34.1-9.el9_7.src.rpm">
          <filename>sqlite-3.34.1-9.el9_7.s390x.rpm</filename>
          <sum type="sha256">86196d084f23ff4d3ed135d4a18d25b47242435e4f88316ea0805aa1d6640860</sum>
        </package>
        <package name="sqlite-devel" version="3.34.1" release="9.el9_7" epoch="0" arch="s390x" src="sqlite-3.34.1-9.el9_7.src.rpm">
          <filename>sqlite-devel-3.34.1-9.el9_7.s390x.rpm</filename>
          <sum type="sha256">cb78ed5dd6511940ab3090991952c41cf2a43d714413d6b4c33b2ac2a9a3de3a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20943</id>
    <title>Moderate: libssh security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:28:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  

Security Fix(es):  

  * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20943" id="RHSA-2025:20943" type="rhsa" title="RHSA-2025:20943"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5318" id="CVE-2025-5318" type="cve" title="CVE-2025-5318"/>
      <reference href="https://bugzilla.redhat.com/2369131" id="2369131" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20943.html" id="ALSA-2025:20943" type="self" title="ALSA-2025:20943"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libssh-devel" version="0.10.4" release="15.el9_7" epoch="0" arch="s390x" src="libssh-0.10.4-15.el9_7.src.rpm">
          <filename>libssh-devel-0.10.4-15.el9_7.s390x.rpm</filename>
          <sum type="sha256">0387728c7467aa854bb415e49bb15aa17cd4d10577cde1bb9dcf744f7193d072</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20945</id>
    <title>Moderate: vim security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:26:43"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim path traversal (CVE-2025-53906)
  * vim: Vim path traversial (CVE-2025-53905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20945" id="RHSA-2025:20945" type="rhsa" title="RHSA-2025:20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53905" id="CVE-2025-53905" type="cve" title="CVE-2025-53905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53906" id="CVE-2025-53906" type="cve" title="CVE-2025-53906"/>
      <reference href="https://bugzilla.redhat.com/2380360" id="2380360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380362" id="2380362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20945.html" id="ALSA-2025:20945" type="self" title="ALSA-2025:20945"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="vim-enhanced" version="8.2.2637" release="23.el9_7" epoch="2" arch="s390x" src="vim-8.2.2637-23.el9_7.src.rpm">
          <filename>vim-enhanced-8.2.2637-23.el9_7.s390x.rpm</filename>
          <sum type="sha256">7fe6c9e6a5e7281ecbc031754d8aad65c94879bf7fc6b49ce64e88a70532495c</sum>
        </package>
        <package name="vim-X11" version="8.2.2637" release="23.el9_7" epoch="2" arch="s390x" src="vim-8.2.2637-23.el9_7.src.rpm">
          <filename>vim-X11-8.2.2637-23.el9_7.s390x.rpm</filename>
          <sum type="sha256">d4d197d7fc8dec4eb6ca04b9fa4363f9953396c00906a64a39908e23f203246a</sum>
        </package>
        <package name="vim-common" version="8.2.2637" release="23.el9_7" epoch="2" arch="s390x" src="vim-8.2.2637-23.el9_7.src.rpm">
          <filename>vim-common-8.2.2637-23.el9_7.s390x.rpm</filename>
          <sum type="sha256">f0bb41d2c4c2081f2b30c317e5424303f5d5257ffc081967083a15b8a8ab92be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20954</id>
    <title>Important: sssd security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-12-01 08:12:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.  

Security Fix(es):  

  * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20954" id="RHSA-2025:20954" type="rhsa" title="RHSA-2025:20954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11561" id="CVE-2025-11561" type="cve" title="CVE-2025-11561"/>
      <reference href="https://bugzilla.redhat.com/2402727" id="2402727" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20954.html" id="ALSA-2025:20954" type="self" title="ALSA-2025:20954"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="sssd-idp" version="2.9.7" release="4.el9_7.1" epoch="0" arch="s390x" src="sssd-2.9.7-4.el9_7.1.src.rpm">
          <filename>sssd-idp-2.9.7-4.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">2c0c8a7493261a072965f1a3e6e3f4167f4a52ad77b3a5e41b675794b02c7aa7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20955</id>
    <title>Important: redis:7 security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:42:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis:7 security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)
  * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)
  * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)
  * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20955" id="RHSA-2025:20955" type="rhsa" title="RHSA-2025:20955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46817" id="CVE-2025-46817" type="cve" title="CVE-2025-46817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46818" id="CVE-2025-46818" type="cve" title="CVE-2025-46818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46819" id="CVE-2025-46819" type="cve" title="CVE-2025-46819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49844" id="CVE-2025-49844" type="cve" title="CVE-2025-49844"/>
      <reference href="https://bugzilla.redhat.com/2401258" id="2401258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401292" id="2401292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401322" id="2401322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401324" id="2401324" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20955.html" id="ALSA-2025:20955" type="self" title="ALSA-2025:20955"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="redis" stream="7" version="9060020251030145517" context="8cf767d6" arch="s390x"/>
        <package name="redis" version="7.2.11" release="1.module_el9.6.0+188+92104ce8" epoch="0" arch="s390x" src="redis-7.2.11-1.module_el9.6.0+188+92104ce8.src.rpm">
          <filename>redis-7.2.11-1.module_el9.6.0+188+92104ce8.s390x.rpm</filename>
          <sum type="sha256">0224c646e556c5d4ae9d33f72d7dd4d2cc38e87fda59245ad6b6f937b646a39d</sum>
        </package>
        <package name="redis-devel" version="7.2.11" release="1.module_el9.6.0+188+92104ce8" epoch="0" arch="s390x" src="redis-7.2.11-1.module_el9.6.0+188+92104ce8.src.rpm">
          <filename>redis-devel-7.2.11-1.module_el9.6.0+188+92104ce8.s390x.rpm</filename>
          <sum type="sha256">5712cf06b3a42c187c13116b38a9ae8c2a72f01ece80177e6180b2617e1d495c</sum>
        </package>
        <package name="redis-doc" version="7.2.11" release="1.module_el9.6.0+188+92104ce8" epoch="0" arch="noarch" src="redis-7.2.11-1.module_el9.6.0+188+92104ce8.src.rpm">
          <filename>redis-doc-7.2.11-1.module_el9.6.0+188+92104ce8.noarch.rpm</filename>
          <sum type="sha256">e0e782684f21c859ef6e2be5a9e350696716b68b6e68ae9e6070eaae7a7881f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20956</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:30:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176)
  * libtiff: Libtiff Write-What-Where (CVE-2025-9900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20956" id="RHSA-2025:20956" type="rhsa" title="RHSA-2025:20956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8176" id="CVE-2025-8176" type="cve" title="CVE-2025-8176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900"/>
      <reference href="https://bugzilla.redhat.com/2383598" id="2383598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2392784" id="2392784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20956.html" id="ALSA-2025:20956" type="self" title="ALSA-2025:20956"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libtiff-devel" version="4.4.0" release="15.el9_7.2" epoch="0" arch="s390x" src="libtiff-4.4.0-15.el9_7.2.src.rpm">
          <filename>libtiff-devel-4.4.0-15.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">8bf9dfce146e5a7fd2bc955fb2d0471b337131bf11af79823f482fe3f91f19b7</sum>
        </package>
        <package name="libtiff" version="4.4.0" release="15.el9_7.2" epoch="0" arch="s390x" src="libtiff-4.4.0-15.el9_7.2.src.rpm">
          <filename>libtiff-4.4.0-15.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">b1548cbc448da17ebe6e5b10a5c7b24cb103d6a4b14d6d413fc80c964e29a30c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20957</id>
    <title>Important: runc security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:31:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>runc security update</summary>
    <description>The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.  

Security Fix(es):  

  * runc: container escape via 'masked path' abuse due to mount race conditions (CVE-2025-31133)
  * runc: container escape with malicious config due to /dev/console mount and related races (CVE-2025-52565)
  * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20957" id="RHSA-2025:20957" type="rhsa" title="RHSA-2025:20957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31133" id="CVE-2025-31133" type="cve" title="CVE-2025-31133"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52565" id="CVE-2025-52565" type="cve" title="CVE-2025-52565"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52881" id="CVE-2025-52881" type="cve" title="CVE-2025-52881"/>
      <reference href="https://bugzilla.redhat.com/2404705" id="2404705" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404708" id="2404708" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404715" id="2404715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20957.html" id="ALSA-2025:20957" type="self" title="ALSA-2025:20957"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="runc" version="1.3.0" release="4.el9_7" epoch="4" arch="s390x" src="runc-1.3.0-4.el9_7.src.rpm">
          <filename>runc-1.3.0-4.el9_7.s390x.rpm</filename>
          <sum type="sha256">0904a896fa1c91bc77fefe70ddc7f615af685cc1a0bd0b5dc0f79a97fd2d2a8f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20958</id>
    <title>Important: tigervnc security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-12-01 08:10:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20958" id="RHSA-2025:20958" type="rhsa" title="RHSA-2025:20958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20958.html" id="ALSA-2025:20958" type="self" title="ALSA-2025:20958"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="tigervnc-server-module" version="1.15.0" release="6.el9_7" epoch="0" arch="s390x" src="tigervnc-1.15.0-6.el9_7.src.rpm">
          <filename>tigervnc-server-module-1.15.0-6.el9_7.s390x.rpm</filename>
          <sum type="sha256">07061fa108749a2ec5b712b7cbd1e093096928b390abe0d9509832ec286800bc</sum>
        </package>
        <package name="tigervnc" version="1.15.0" release="6.el9_7" epoch="0" arch="s390x" src="tigervnc-1.15.0-6.el9_7.src.rpm">
          <filename>tigervnc-1.15.0-6.el9_7.s390x.rpm</filename>
          <sum type="sha256">0d9c2924fca8ea5bc4337c2c0a9c83bbfbca28cfc29b6c1bab7473260d8995ed</sum>
        </package>
        <package name="tigervnc-server" version="1.15.0" release="6.el9_7" epoch="0" arch="s390x" src="tigervnc-1.15.0-6.el9_7.src.rpm">
          <filename>tigervnc-server-1.15.0-6.el9_7.s390x.rpm</filename>
          <sum type="sha256">2f47dc395b95cb60a7fc375bc52a58fd0c0aa97c37829864c5e76013f08db02e</sum>
        </package>
        <package name="tigervnc-icons" version="1.15.0" release="6.el9_7" epoch="0" arch="noarch" src="tigervnc-1.15.0-6.el9_7.src.rpm">
          <filename>tigervnc-icons-1.15.0-6.el9_7.noarch.rpm</filename>
          <sum type="sha256">333e5482a205d8828f969fd977ba876027c9287c32583387abe4e1afe2e10988</sum>
        </package>
        <package name="tigervnc-license" version="1.15.0" release="6.el9_7" epoch="0" arch="noarch" src="tigervnc-1.15.0-6.el9_7.src.rpm">
          <filename>tigervnc-license-1.15.0-6.el9_7.noarch.rpm</filename>
          <sum type="sha256">6a077ef5a28e02370391b2ec36e908423de2be14111b20041afd23a52841bb48</sum>
        </package>
        <package name="tigervnc-selinux" version="1.15.0" release="6.el9_7" epoch="0" arch="noarch" src="tigervnc-1.15.0-6.el9_7.src.rpm">
          <filename>tigervnc-selinux-1.15.0-6.el9_7.noarch.rpm</filename>
          <sum type="sha256">c52e4f99f0d4b4fb6120119a5e00ddca550bcdd994420eff7b665b995582fa44</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.15.0" release="6.el9_7" epoch="0" arch="s390x" src="tigervnc-1.15.0-6.el9_7.src.rpm">
          <filename>tigervnc-server-minimal-1.15.0-6.el9_7.s390x.rpm</filename>
          <sum type="sha256">d4276b47cec7f01bb8ac59a4e66bc5d59c30d94d4ecc3941706f2342af05172f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20959</id>
    <title>Important: libsoup security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:32:27"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)
  * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20959" id="RHSA-2025:20959" type="rhsa" title="RHSA-2025:20959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11021" id="CVE-2025-11021" type="cve" title="CVE-2025-11021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4945" id="CVE-2025-4945" type="cve" title="CVE-2025-4945"/>
      <reference href="https://bugzilla.redhat.com/2367175" id="2367175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2399627" id="2399627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20959.html" id="ALSA-2025:20959" type="self" title="ALSA-2025:20959"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libsoup" version="2.72.0" release="12.el9_7.1" epoch="0" arch="s390x" src="libsoup-2.72.0-12.el9_7.1.src.rpm">
          <filename>libsoup-2.72.0-12.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">bf7b69aeaf7aedfda372130c6de4100a22ca0c23d903bdf035d59343b1c8cf66</sum>
        </package>
        <package name="libsoup-devel" version="2.72.0" release="12.el9_7.1" epoch="0" arch="s390x" src="libsoup-2.72.0-12.el9_7.1.src.rpm">
          <filename>libsoup-devel-2.72.0-12.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">f77b8a5c14e3139c86cadd263a0e50933c1b94cdb45493a0e3e7ff72e0744c48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20960</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:34:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20960" id="RHSA-2025:20960" type="rhsa" title="RHSA-2025:20960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20960.html" id="ALSA-2025:20960" type="self" title="ALSA-2025:20960"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="xorg-x11-server-Xwayland" version="23.2.7" release="5.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-23.2.7-5.el9_7.src.rpm">
          <filename>xorg-x11-server-Xwayland-23.2.7-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">534a9a9e01660868e998cd4bf71a35f28f32f881e6de946bb3904f948c782b01</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20961</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:36:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20961" id="RHSA-2025:20961" type="rhsa" title="RHSA-2025:20961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20961.html" id="ALSA-2025:20961" type="self" title="ALSA-2025:20961"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="32.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-32.el9_7.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-32.el9_7.s390x.rpm</filename>
          <sum type="sha256">18264e8e2efb5651f5f6a33ede83a73410c9214723273dd86b8ceba512316f15</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="32.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-32.el9_7.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-32.el9_7.s390x.rpm</filename>
          <sum type="sha256">1cfbf6379f4e62a3d5bd81e6337901edecc5b3d5b82d6b6eb7d7e3aa5e08e837</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="32.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-32.el9_7.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-32.el9_7.s390x.rpm</filename>
          <sum type="sha256">79f31d8fc49f16d1454bf8cdfc4204cdabf5cb08e3c472477af10313c1b028b4</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="32.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-32.el9_7.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-32.el9_7.s390x.rpm</filename>
          <sum type="sha256">c4c4d4e8616b9fa0ba2ddfff23be701d578f7922d835fecded2c2ea638374561</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="32.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-32.el9_7.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-32.el9_7.s390x.rpm</filename>
          <sum type="sha256">c650b8f46984d410e2709d01156143148bffb5a587801a0a3365a8c3427f535b</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="32.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-32.el9_7.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-32.el9_7.s390x.rpm</filename>
          <sum type="sha256">e1548d7b4e16845a3d3570e16f0783a8b5f559783e0d5ae6b983061965a94c56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20963</id>
    <title>Moderate: qt5-qt3d security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:37:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5-qt3d security update</summary>
    <description>Qt 3D provides functionality for near-realtime simulation systems with support for 2D and 3D rendering in both Qt C++ and Qt Quick applications).  

Security Fix(es):  

  * assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow (CVE-2025-11277)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20963" id="RHSA-2025:20963" type="rhsa" title="RHSA-2025:20963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11277" id="CVE-2025-11277" type="cve" title="CVE-2025-11277"/>
      <reference href="https://bugzilla.redhat.com/2401622" id="2401622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20963.html" id="ALSA-2025:20963" type="self" title="ALSA-2025:20963"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="qt5-qt3d-examples" version="5.15.9" release="2.el9_7.1" epoch="0" arch="s390x" src="qt5-qt3d-5.15.9-2.el9_7.1.src.rpm">
          <filename>qt5-qt3d-examples-5.15.9-2.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">26031f5518d19e204161574d58c1a84fcce64ce78a01b8b82048a4a227fcdb8d</sum>
        </package>
        <package name="qt5-qt3d-devel" version="5.15.9" release="2.el9_7.1" epoch="0" arch="s390x" src="qt5-qt3d-5.15.9-2.el9_7.1.src.rpm">
          <filename>qt5-qt3d-devel-5.15.9-2.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">93b7ff477c60fffcff2e0a0de6770ac860f7e9d3351c88fa3f9429bb993677d4</sum>
        </package>
        <package name="qt5-qt3d" version="5.15.9" release="2.el9_7.1" epoch="0" arch="s390x" src="qt5-qt3d-5.15.9-2.el9_7.1.src.rpm">
          <filename>qt5-qt3d-5.15.9-2.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">e7cc006ed07b73f9096ea2926dbc3d3b72792b9805d7cf6a6b95d7aae8f346f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21110</id>
    <title>Important: bind security update</title>
    <issued date="2025-11-12 00:00:00"/>
    <updated date="2025-11-19 09:39:10"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21110" id="RHSA-2025:21110" type="rhsa" title="RHSA-2025:21110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40778" id="CVE-2025-40778" type="cve" title="CVE-2025-40778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40780" id="CVE-2025-40780" type="cve" title="CVE-2025-40780"/>
      <reference href="https://bugzilla.redhat.com/2405827" id="2405827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405829" id="2405829" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21110.html" id="ALSA-2025:21110" type="self" title="ALSA-2025:21110"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="bind-dnssec-doc" version="9.16.23" release="34.el9_7.1" epoch="32" arch="noarch" src="bind-9.16.23-34.el9_7.1.src.rpm">
          <filename>bind-dnssec-doc-9.16.23-34.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">01202e152d255eb11f041616ddc8bf4a92beb4878e8d813cdac5dd73bda4879c</sum>
        </package>
        <package name="bind-chroot" version="9.16.23" release="34.el9_7.1" epoch="32" arch="s390x" src="bind-9.16.23-34.el9_7.1.src.rpm">
          <filename>bind-chroot-9.16.23-34.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">23c49b05854679b2c0d28f955dc11dab3bb7ae57361d5d05345d0603408297c7</sum>
        </package>
        <package name="bind-utils" version="9.16.23" release="34.el9_7.1" epoch="32" arch="s390x" src="bind-9.16.23-34.el9_7.1.src.rpm">
          <filename>bind-utils-9.16.23-34.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">7a9717fae1e6b5d6f21014389dc33109f93cd3eab4ae471853c57e1d93b69109</sum>
        </package>
        <package name="bind-license" version="9.16.23" release="34.el9_7.1" epoch="32" arch="noarch" src="bind-9.16.23-34.el9_7.1.src.rpm">
          <filename>bind-license-9.16.23-34.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">8b79c2a0da87e5408f01dc70ce99df4db338803b1bb3399cc8f02cfcec16d2c6</sum>
        </package>
        <package name="bind-dnssec-utils" version="9.16.23" release="34.el9_7.1" epoch="32" arch="s390x" src="bind-9.16.23-34.el9_7.1.src.rpm">
          <filename>bind-dnssec-utils-9.16.23-34.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">a9ebba4ead308310c23a3e83ade23c9dd2398561960d75a903070d18c27b53d3</sum>
        </package>
        <package name="bind-libs" version="9.16.23" release="34.el9_7.1" epoch="32" arch="s390x" src="bind-9.16.23-34.el9_7.1.src.rpm">
          <filename>bind-libs-9.16.23-34.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">bba5dfcdd584d4bf690929f3b3a67d99a67c5ff2c43ad57b26ade76ce1dfaf42</sum>
        </package>
        <package name="bind" version="9.16.23" release="34.el9_7.1" epoch="32" arch="s390x" src="bind-9.16.23-34.el9_7.1.src.rpm">
          <filename>bind-9.16.23-34.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">e4d2e10d9d602c3147b3a13fb7a7c6c8898c04c489e3e51d6b8945e786109664</sum>
        </package>
        <package name="python3-bind" version="9.16.23" release="34.el9_7.1" epoch="32" arch="noarch" src="bind-9.16.23-34.el9_7.1.src.rpm">
          <filename>python3-bind-9.16.23-34.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">f54c8d1c3f0185e2016e2ebc757362ec803f466533c6fc01423a2e3b783f8c30</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21111</id>
    <title>Important: bind9.18 security update</title>
    <issued date="2025-11-12 00:00:00"/>
    <updated date="2025-12-01 08:06:29"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.18 security update</summary>
    <description>BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  

Security Fix(es):  

  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21111" id="RHSA-2025:21111" type="rhsa" title="RHSA-2025:21111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40778" id="CVE-2025-40778" type="cve" title="CVE-2025-40778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40780" id="CVE-2025-40780" type="cve" title="CVE-2025-40780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8677" id="CVE-2025-8677" type="cve" title="CVE-2025-8677"/>
      <reference href="https://bugzilla.redhat.com/2405827" id="2405827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405829" id="2405829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405830" id="2405830" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21111.html" id="ALSA-2025:21111" type="self" title="ALSA-2025:21111"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="bind9.18-chroot" version="9.18.29" release="5.el9_7.2" epoch="32" arch="s390x" src="bind9.18-9.18.29-5.el9_7.2.src.rpm">
          <filename>bind9.18-chroot-9.18.29-5.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">24ef0fab894466f48c42d8cd01b660e3f8e5b5d076856d864df68fb5303361c6</sum>
        </package>
        <package name="bind9.18-utils" version="9.18.29" release="5.el9_7.2" epoch="32" arch="s390x" src="bind9.18-9.18.29-5.el9_7.2.src.rpm">
          <filename>bind9.18-utils-9.18.29-5.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">3a9aacf252c4b2cbdef60601ba7081ad139c9352de15e721b1a6c964832935df</sum>
        </package>
        <package name="bind9.18-libs" version="9.18.29" release="5.el9_7.2" epoch="32" arch="s390x" src="bind9.18-9.18.29-5.el9_7.2.src.rpm">
          <filename>bind9.18-libs-9.18.29-5.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">4be2a5c9fbc4791ab0e36ad1fce73d05f8d2f93dda840f6ef84672435763f9c7</sum>
        </package>
        <package name="bind9.18-dnssec-utils" version="9.18.29" release="5.el9_7.2" epoch="32" arch="s390x" src="bind9.18-9.18.29-5.el9_7.2.src.rpm">
          <filename>bind9.18-dnssec-utils-9.18.29-5.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">e285b63704ca10b113a55547892fff0de0623da5ac5178aec88741beff903749</sum>
        </package>
        <package name="bind9.18" version="9.18.29" release="5.el9_7.2" epoch="32" arch="s390x" src="bind9.18-9.18.29-5.el9_7.2.src.rpm">
          <filename>bind9.18-9.18.29-5.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">ec6a2b0befe15257ced0422e1804c178afdd97e1fd755e594861f280ae242aef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21139</id>
    <title>Important: python-kdcproxy security update</title>
    <issued date="2025-11-12 00:00:00"/>
    <updated date="2025-11-19 09:41:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-kdcproxy security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV (CVE-2025-59088)
  * python-kdcproxy: Remote DoS via unbounded TCP upstream buffering (CVE-2025-59089)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21139" id="RHSA-2025:21139" type="rhsa" title="RHSA-2025:21139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59088" id="CVE-2025-59088" type="cve" title="CVE-2025-59088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59089" id="CVE-2025-59089" type="cve" title="CVE-2025-59089"/>
      <reference href="https://bugzilla.redhat.com/2393955" id="2393955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393958" id="2393958" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21139.html" id="ALSA-2025:21139" type="self" title="ALSA-2025:21139"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3-kdcproxy" version="1.0.0" release="9.el9_7" epoch="0" arch="noarch" src="python-kdcproxy-1.0.0-9.el9_7.src.rpm">
          <filename>python3-kdcproxy-1.0.0-9.el9_7.noarch.rpm</filename>
          <sum type="sha256">a5240be876da3db142c1b8feb2c4ad0a98c79ec8dffdf4295e4747f75df84f12</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21255</id>
    <title>Moderate: openssl security update</title>
    <issued date="2025-11-13 00:00:00"/>
    <updated date="2025-12-01 08:04:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap (CVE-2025-9230)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21255" id="RHSA-2025:21255" type="rhsa" title="RHSA-2025:21255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9230" id="CVE-2025-9230" type="cve" title="CVE-2025-9230"/>
      <reference href="https://bugzilla.redhat.com/2396054" id="2396054" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21255.html" id="ALSA-2025:21255" type="self" title="ALSA-2025:21255"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="openssl-perl" version="3.5.1" release="4.el9_7" epoch="1" arch="s390x" src="openssl-3.5.1-4.el9_7.src.rpm">
          <filename>openssl-perl-3.5.1-4.el9_7.s390x.rpm</filename>
          <sum type="sha256">0856453e7ac72bb66adcbc4bdd4d18d4f2309a1b9ae2aaa630211d7b5eea66d9</sum>
        </package>
        <package name="openssl-devel" version="3.5.1" release="4.el9_7" epoch="1" arch="s390x" src="openssl-3.5.1-4.el9_7.src.rpm">
          <filename>openssl-devel-3.5.1-4.el9_7.s390x.rpm</filename>
          <sum type="sha256">df2fad1d4f8389149b542482d4ffb49d76ea1295a0fd9e5943d84ec06ab40e7a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21280</id>
    <title>Important: firefox security update</title>
    <issued date="2025-11-13 00:00:00"/>
    <updated date="2025-11-24 12:36:14"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)
  * firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)
  * firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)
  * firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)
  * firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)
  * firefox: Race condition in the Graphics component (CVE-2025-13012)
  * firefox: Spoofing issue in Firefox (CVE-2025-13015)
  * firefox: Mitigation bypass in the DOM: Core &amp; HTML component (CVE-2025-13013)
  * firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21280" id="RHSA-2025:21280" type="rhsa" title="RHSA-2025:21280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13012" id="CVE-2025-13012" type="cve" title="CVE-2025-13012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13013" id="CVE-2025-13013" type="cve" title="CVE-2025-13013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13014" id="CVE-2025-13014" type="cve" title="CVE-2025-13014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13015" id="CVE-2025-13015" type="cve" title="CVE-2025-13015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13016" id="CVE-2025-13016" type="cve" title="CVE-2025-13016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13017" id="CVE-2025-13017" type="cve" title="CVE-2025-13017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13018" id="CVE-2025-13018" type="cve" title="CVE-2025-13018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13019" id="CVE-2025-13019" type="cve" title="CVE-2025-13019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13020" id="CVE-2025-13020" type="cve" title="CVE-2025-13020"/>
      <reference href="https://bugzilla.redhat.com/2414079" id="2414079" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414080" id="2414080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414083" id="2414083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414084" id="2414084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414085" id="2414085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414086" id="2414086" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414090" id="2414090" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414091" id="2414091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414092" id="2414092" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21280.html" id="ALSA-2025:21280" type="self" title="ALSA-2025:21280"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="firefox" version="140.5.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.5.0-1.el9_7.alma.1.src.rpm">
          <filename>firefox-140.5.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">085cd1d3dfcddc2349da2bf0c568d4c63dc26f9e6415ce1a03125dce9fca07dc</sum>
        </package>
        <package name="firefox-x11" version="140.5.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.5.0-1.el9_7.alma.1.src.rpm">
          <filename>firefox-x11-140.5.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">c3397b2cbc2c2ba14de2a25debd940738af2eb4b015c227fee560dd4ee432aaf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21462</id>
    <title>Critical: lasso security update</title>
    <issued date="2025-11-17 00:00:00"/>
    <updated date="2025-11-19 09:40:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>lasso security update</summary>
    <description>The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.  

Security Fix(es):  

  * lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21462" id="RHSA-2025:21462" type="rhsa" title="RHSA-2025:21462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47151" id="CVE-2025-47151" type="cve" title="CVE-2025-47151"/>
      <reference href="https://bugzilla.redhat.com/2412739" id="2412739" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21462.html" id="ALSA-2025:21462" type="self" title="ALSA-2025:21462"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3-lasso" version="2.7.0" release="11.el9_7.3" epoch="0" arch="s390x" src="lasso-2.7.0-11.el9_7.3.src.rpm">
          <filename>python3-lasso-2.7.0-11.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">1462c2d662947c86c379aa3d1a22e37455ebbe1fff53c660d65c08d770cc770b</sum>
        </package>
        <package name="lasso" version="2.7.0" release="11.el9_7.3" epoch="0" arch="s390x" src="lasso-2.7.0-11.el9_7.3.src.rpm">
          <filename>lasso-2.7.0-11.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">3860b5fca2bff0ee4ac3f61f981d6d417c2a8f5f6a300135b452fd1e32a8ba3b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21693</id>
    <title>Important: haproxy security update</title>
    <issued date="2025-11-18 00:00:00"/>
    <updated date="2025-11-19 10:52:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>haproxy security update</summary>
    <description>The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.  

Security Fix(es):  

  * haproxy: denial of service vulnerability in HAProxy mjson library (CVE-2025-11230)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21693" id="RHSA-2025:21693" type="rhsa" title="RHSA-2025:21693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11230" id="CVE-2025-11230" type="cve" title="CVE-2025-11230"/>
      <reference href="https://bugzilla.redhat.com/2413003" id="2413003" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21693.html" id="ALSA-2025:21693" type="self" title="ALSA-2025:21693"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="haproxy" version="2.8.14" release="1.el9_7.1" epoch="0" arch="s390x" src="haproxy-2.8.14-1.el9_7.1.src.rpm">
          <filename>haproxy-2.8.14-1.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">911206ffc56495c0c4aa9db0c362162194289ba8616ffa0d4b81898326abfd96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21702</id>
    <title>Important: podman security update</title>
    <issued date="2025-11-18 00:00:00"/>
    <updated date="2025-11-19 10:51:29"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21702" id="RHSA-2025:21702" type="rhsa" title="RHSA-2025:21702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52881" id="CVE-2025-52881" type="cve" title="CVE-2025-52881"/>
      <reference href="https://bugzilla.redhat.com/2404715" id="2404715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21702.html" id="ALSA-2025:21702" type="self" title="ALSA-2025:21702"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="podman-docker" version="5.6.0" release="7.el9_7" epoch="6" arch="noarch" src="podman-5.6.0-7.el9_7.src.rpm">
          <filename>podman-docker-5.6.0-7.el9_7.noarch.rpm</filename>
          <sum type="sha256">5ffaa4b5065f4581a201082263dba24dcf7721b66b01e4b26013a6002c9ff0ac</sum>
        </package>
        <package name="podman-tests" version="5.6.0" release="7.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-7.el9_7.src.rpm">
          <filename>podman-tests-5.6.0-7.el9_7.s390x.rpm</filename>
          <sum type="sha256">84d36f150aa8db9ccb2bcb6fd698b1f34cceb2d10962d9a769a69e18eb0ba2dd</sum>
        </package>
        <package name="podman-plugins" version="5.6.0" release="7.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-7.el9_7.src.rpm">
          <filename>podman-plugins-5.6.0-7.el9_7.s390x.rpm</filename>
          <sum type="sha256">8720ccb2f68e1ad6222498a09907216e7fd2571c8c77da462a5596d0f992062c</sum>
        </package>
        <package name="podman" version="5.6.0" release="7.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-7.el9_7.src.rpm">
          <filename>podman-5.6.0-7.el9_7.s390x.rpm</filename>
          <sum type="sha256">c578bb63fbadf75c09f2e4f5ceb5b0a2f705eb0835d35eadbd91239229492341</sum>
        </package>
        <package name="podman-remote" version="5.6.0" release="7.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-7.el9_7.src.rpm">
          <filename>podman-remote-5.6.0-7.el9_7.s390x.rpm</filename>
          <sum type="sha256">f4c65c889f6ebcdc2d05f1deb910dcc51287778113bfa571aae49375c8125132</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21815</id>
    <title>Moderate: delve and golang security update</title>
    <issued date="2025-11-20 00:00:00"/>
    <updated date="2025-11-20 10:59:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>delve and golang security update</summary>
    <description>The Go Programming Language.  

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21815" id="RHSA-2025:21815" type="rhsa" title="RHSA-2025:21815"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21815.html" id="ALSA-2025:21815" type="self" title="ALSA-2025:21815"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="go-toolset" version="1.25.3" release="1.el9_7" epoch="0" arch="s390x" src="golang-1.25.3-1.el9_7.src.rpm">
          <filename>go-toolset-1.25.3-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">2475e49248d2887f858c9eeeee5e80c33fe8e18d04d117e459dfed22139c7079</sum>
        </package>
        <package name="golang-misc" version="1.25.3" release="1.el9_7" epoch="0" arch="noarch" src="golang-1.25.3-1.el9_7.src.rpm">
          <filename>golang-misc-1.25.3-1.el9_7.noarch.rpm</filename>
          <sum type="sha256">29dc87ada9847e965337c7d04c5912ce35737fa694be7a8d712294d52cbc68d4</sum>
        </package>
        <package name="golang-docs" version="1.25.3" release="1.el9_7" epoch="0" arch="noarch" src="golang-1.25.3-1.el9_7.src.rpm">
          <filename>golang-docs-1.25.3-1.el9_7.noarch.rpm</filename>
          <sum type="sha256">466316b7b9d8f2ccd3b3f368d520adaf50fc1224d8c3321018587e8779415ef8</sum>
        </package>
        <package name="golang-src" version="1.25.3" release="1.el9_7" epoch="0" arch="noarch" src="golang-1.25.3-1.el9_7.src.rpm">
          <filename>golang-src-1.25.3-1.el9_7.noarch.rpm</filename>
          <sum type="sha256">6f31240e6b2dde0527af7d6993e4beb7bb946941c9abb03ecbcced59bd1e6cba</sum>
        </package>
        <package name="golang" version="1.25.3" release="1.el9_7" epoch="0" arch="s390x" src="golang-1.25.3-1.el9_7.src.rpm">
          <filename>golang-1.25.3-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">759cdded914e306b40d1d1b9c2960f3ce4e45b49edab93654313984246b51b87</sum>
        </package>
        <package name="golang-bin" version="1.25.3" release="1.el9_7" epoch="0" arch="s390x" src="golang-1.25.3-1.el9_7.src.rpm">
          <filename>golang-bin-1.25.3-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">b5449dfa6dff203e0785a70000c027a23dd2eb2ff55c63121ae30b5d8dd27245</sum>
        </package>
        <package name="golang-tests" version="1.25.3" release="1.el9_7" epoch="0" arch="noarch" src="golang-1.25.3-1.el9_7.src.rpm">
          <filename>golang-tests-1.25.3-1.el9_7.noarch.rpm</filename>
          <sum type="sha256">e4397826207622fc908c1ef7c2da0ab2cb58e830e8c48e13eff9af88576a56aa</sum>
        </package>
        <package name="golang-race" version="1.25.3" release="1.el9_7" epoch="0" arch="s390x" src="golang-1.25.3-1.el9_7.src.rpm">
          <filename>golang-race-1.25.3-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">fc7a9acaa8430b66166fc9888fa4538b30bf39d35e578b2c53df25aab07d506a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21916</id>
    <title>Important: valkey security update</title>
    <issued date="2025-11-24 00:00:00"/>
    <updated date="2025-12-01 08:02:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>valkey security update</summary>
    <description>Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also.  

Security Fix(es):  

  * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)
  * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)
  * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)
  * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21916" id="RHSA-2025:21916" type="rhsa" title="RHSA-2025:21916"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46817" id="CVE-2025-46817" type="cve" title="CVE-2025-46817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46818" id="CVE-2025-46818" type="cve" title="CVE-2025-46818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46819" id="CVE-2025-46819" type="cve" title="CVE-2025-46819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49844" id="CVE-2025-49844" type="cve" title="CVE-2025-49844"/>
      <reference href="https://bugzilla.redhat.com/2401258" id="2401258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401292" id="2401292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401322" id="2401322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401324" id="2401324" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21916.html" id="ALSA-2025:21916" type="self" title="ALSA-2025:21916"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="valkey" version="8.0.6" release="2.el9_7" epoch="0" arch="s390x" src="valkey-8.0.6-2.el9_7.src.rpm">
          <filename>valkey-8.0.6-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">8b4306c739bf562898bbf3ba445087761574fbd43bca897845cd9026b4f72433</sum>
        </package>
        <package name="valkey-devel" version="8.0.6" release="2.el9_7" epoch="0" arch="s390x" src="valkey-8.0.6-2.el9_7.src.rpm">
          <filename>valkey-devel-8.0.6-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">b0455464ba489f132cf0796cc81a64c3688c110a64087c3516f10b35ed71880a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21926</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-24 00:00:00"/>
    <updated date="2025-12-01 08:01:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: mm: slub: avoid wake up kswapd in set_track_prepare (CVE-2025-39843)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21926" id="RHSA-2025:21926" type="rhsa" title="RHSA-2025:21926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39843" id="CVE-2025-39843" type="cve" title="CVE-2025-39843"/>
      <reference href="https://bugzilla.redhat.com/2396941" id="2396941" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21926.html" id="ALSA-2025:21926" type="self" title="ALSA-2025:21926"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="perf" version="5.14.0" release="611.9.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.9.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.9.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">0152e54ba33fb742f22a9522cba97c4b686ece0dbf72ceec08c17bfe4d835d36</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.9.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.9.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.9.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">042f80d90aef8eb19779291b63076ce025a5c3a79934200c6d4425f7a2673b39</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.9.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.9.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.9.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">0e012d61194b17708665c91385434a68015976c5432d7e63885f7f7fb4a4f49f</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.9.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.9.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.9.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">2ffb71b03066b0b0444854f6504a311fbe41923fbff9c871085907619334e9a4</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.9.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.9.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.9.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">36186011178ee25a3950a5a6536bb7fecfc83fcf3ae4cee74082e294ccd30d2f</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.9.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.9.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.9.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">3f1dfa1427aa39d094ad37ee1b6725424a9137cc36ce2e3f9e49f1697b596ad1</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.9.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.9.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.9.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4162e418e5976532d121e1ecb37ac2d4d67b11f595ffae7a1afe6e769e0da7c8</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.9.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.9.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.9.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4e44e4cc01587e7bfa52fa54b5f5835fa38410c6168865dc8e5542af2d375665</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.9.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.9.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.9.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">8eb478bfa451dffecde01328c0e858ea55e4559b6580f0a2953d59f577645ef6</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.9.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.9.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.9.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">b5597dd3868285314008e5c174f039e9e8863f40e60f192db8e9a652e4fb3971</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.9.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.9.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.9.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">bd6fecee07a0ea981bd10737696dbc6a146aeca1272d47d3feb110e5716d9a06</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.9.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.9.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.9.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">bed903fa32082f1cbda49733e90e81f0df8b86fe3e5dd62e97d435087272fb94</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22005</id>
    <title>Moderate: go-rpm-macros security update</title>
    <issued date="2025-11-25 00:00:00"/>
    <updated date="2025-11-25 10:51:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>go-rpm-macros security update</summary>
    <description>This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only.  

Security Fix(es):  

  * os/exec: Unexpected paths returned from LookPath in os/exec (CVE-2025-47906)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22005" id="RHSA-2025:22005" type="rhsa" title="RHSA-2025:22005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47906" id="CVE-2025-47906" type="cve" title="CVE-2025-47906"/>
      <reference href="https://bugzilla.redhat.com/2396546" id="2396546" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22005.html" id="ALSA-2025:22005" type="self" title="ALSA-2025:22005"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="go-rpm-templates" version="3.6.0" release="12.el9_7" epoch="0" arch="noarch" src="go-rpm-macros-3.6.0-12.el9_7.src.rpm">
          <filename>go-rpm-templates-3.6.0-12.el9_7.noarch.rpm</filename>
          <sum type="sha256">5df16bf1a95fd8dec209732a313a1928038f1421239bc3836023d10e3b70dddb</sum>
        </package>
        <package name="go-srpm-macros" version="3.6.0" release="12.el9_7" epoch="0" arch="noarch" src="go-rpm-macros-3.6.0-12.el9_7.src.rpm">
          <filename>go-srpm-macros-3.6.0-12.el9_7.noarch.rpm</filename>
          <sum type="sha256">71a78aefe4eda55b51e42c5913d78d3da0a21013a367f506725518b235a131c3</sum>
        </package>
        <package name="go-rpm-macros" version="3.6.0" release="12.el9_7" epoch="0" arch="s390x" src="go-rpm-macros-3.6.0-12.el9_7.src.rpm">
          <filename>go-rpm-macros-3.6.0-12.el9_7.s390x.rpm</filename>
          <sum type="sha256">8b2d02e0df8330c30231c6ee810a4b37138ce57c51e9081e5f6e5d7475f760c9</sum>
        </package>
        <package name="go-filesystem" version="3.6.0" release="12.el9_7" epoch="0" arch="s390x" src="go-rpm-macros-3.6.0-12.el9_7.src.rpm">
          <filename>go-filesystem-3.6.0-12.el9_7.s390x.rpm</filename>
          <sum type="sha256">b5463a4b8f35e7cc256266c413ea67d8b12878380bbcecd5e8d54fe272a9ef65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22011</id>
    <title>Important: buildah security update</title>
    <issued date="2025-11-25 00:00:00"/>
    <updated date="2025-11-25 12:06:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.   

Security Fix(es):  

  * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)
  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22011" id="RHSA-2025:22011" type="rhsa" title="RHSA-2025:22011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52881" id="CVE-2025-52881" type="cve" title="CVE-2025-52881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2404715" id="2404715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22011.html" id="ALSA-2025:22011" type="self" title="ALSA-2025:22011"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="buildah-tests" version="1.41.6" release="1.el9_7" epoch="2" arch="s390x" src="buildah-1.41.6-1.el9_7.src.rpm">
          <filename>buildah-tests-1.41.6-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5a435807c6c8154157d908e4a598172691b307a6f87ac86cfb80ca90f6861c2a</sum>
        </package>
        <package name="buildah" version="1.41.6" release="1.el9_7" epoch="2" arch="s390x" src="buildah-1.41.6-1.el9_7.src.rpm">
          <filename>buildah-1.41.6-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">8aeede3fe23558e31dda979f7bd61d50e2fd9a58e60c2bcb77468f299d99599a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22175</id>
    <title>Important: expat security update</title>
    <issued date="2025-11-26 00:00:00"/>
    <updated date="2025-12-03 12:07:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.  

Security Fix(es):  

  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22175" id="RHSA-2025:22175" type="rhsa" title="RHSA-2025:22175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59375" id="CVE-2025-59375" type="cve" title="CVE-2025-59375"/>
      <reference href="https://bugzilla.redhat.com/2395108" id="2395108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22175.html" id="ALSA-2025:22175" type="self" title="ALSA-2025:22175"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="expat-devel" version="2.5.0" release="5.el9_7.1" epoch="0" arch="s390x" src="expat-2.5.0-5.el9_7.1.src.rpm">
          <filename>expat-devel-2.5.0-5.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">424f59a8df256cf2e8fa62350633f1297674714955be52f763dd4585ff8b88fd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22376</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-03 12:03:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (CVE-2025-9714)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22376" id="RHSA-2025:22376" type="rhsa" title="RHSA-2025:22376"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9714" id="CVE-2025-9714" type="cve" title="CVE-2025-9714"/>
      <reference href="https://bugzilla.redhat.com/2392605" id="2392605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22376.html" id="ALSA-2025:22376" type="self" title="ALSA-2025:22376"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libxml2-devel" version="2.9.13" release="14.el9_7" epoch="0" arch="s390x" src="libxml2-2.9.13-14.el9_7.src.rpm">
          <filename>libxml2-devel-2.9.13-14.el9_7.s390x.rpm</filename>
          <sum type="sha256">bbfc0f033911832a88fe5383727d9f93149a4d8ccb6d201d848c55f977db5ae5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22405</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-08 12:22:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
  * kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864)
  * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
  * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918)
  * kernel: tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect() (CVE-2025-39955)
  * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
  * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22405" id="RHSA-2025:22405" type="rhsa" title="RHSA-2025:22405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38724" id="CVE-2025-38724" type="cve" title="CVE-2025-38724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39864" id="CVE-2025-39864" type="cve" title="CVE-2025-39864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39898" id="CVE-2025-39898" type="cve" title="CVE-2025-39898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39918" id="CVE-2025-39918" type="cve" title="CVE-2025-39918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39955" id="CVE-2025-39955" type="cve" title="CVE-2025-39955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39981" id="CVE-2025-39981" type="cve" title="CVE-2025-39981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40058" id="CVE-2025-40058" type="cve" title="CVE-2025-40058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40185" id="CVE-2025-40185" type="cve" title="CVE-2025-40185"/>
      <reference href="https://bugzilla.redhat.com/2393172" id="2393172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396934" id="2396934" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400598" id="2400598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400628" id="2400628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402699" id="2402699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404105" id="2404105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406776" id="2406776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414741" id="2414741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22405.html" id="ALSA-2025:22405" type="self" title="ALSA-2025:22405"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="kernel-debug-devel" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.11.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">25be8c7de68be629e6eaac85abb5b8060bfe14c3cbd7fa799549003326f395d9</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.11.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">25ed839295694a557f9dfcdc33b0cf462f1c59d1cb03d504846438039d2d5ea7</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.11.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">33894f8f2bcfdf06aec61215951559115a5bee01b03e9c65f6371003e36e9cc6</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.11.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">53190fbc50e9939dedf42d4f04a3377d47268c35c3e0c041e7b220fe0b98e376</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.11.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">55f90da3aac2928efb2b2a037468b311b15842e3d5c5994ebde750d04d83dcb1</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.11.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5c5405089f5fd38b28c1dbdcd81d2d372cad9ad38f8a39b2eba50c93a69f8158</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.11.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5f597c2249667b6b6cf8a6ca41a881e2ec2044732c8580ddd5a591c98678c47e</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.11.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">6409b567d72d011de801e68d85cdbd10d0f573f39b2c6e31f1bded746a70b12a</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.11.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">cf0c7bb8779d0ff270e7697e36120ffc9c1a0b8e52aeffb6f06df97c8f50d4e3</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.11.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">e27f17ac62eba4c511084447e99ca315c942049d90340b94d4f7f70d301cf793</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.11.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">e49c03092e154cbfc2e1e72a46a399b1616c8841d0a56943a0fcb1f4ab053777</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.11.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">faad28f1a11395dd618720af2dbae4bd02797a28aa23331fb7edd031b31f74e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22660</id>
    <title>Moderate: systemd security update</title>
    <issued date="2025-12-03 00:00:00"/>
    <updated date="2025-12-04 13:25:16"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>systemd security update</summary>
    <description>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.  

Security Fix(es):  

  * systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (CVE-2025-4598)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22660" id="RHSA-2025:22660" type="rhsa" title="RHSA-2025:22660"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4598" id="CVE-2025-4598" type="cve" title="CVE-2025-4598"/>
      <reference href="https://bugzilla.redhat.com/2369242" id="2369242" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22660.html" id="ALSA-2025:22660" type="self" title="ALSA-2025:22660"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="systemd-devel" version="252" release="55.el9_7.7.alma.1" epoch="0" arch="s390x" src="systemd-252-55.el9_7.7.alma.1.src.rpm">
          <filename>systemd-devel-252-55.el9_7.7.alma.1.s390x.rpm</filename>
          <sum type="sha256">0ce352f5f1e3b932aba5c450b59d6505c0e6aeb82aacf3a09cc0144a7a8c526f</sum>
        </package>
        <package name="systemd-journal-remote" version="252" release="55.el9_7.7.alma.1" epoch="0" arch="s390x" src="systemd-252-55.el9_7.7.alma.1.src.rpm">
          <filename>systemd-journal-remote-252-55.el9_7.7.alma.1.s390x.rpm</filename>
          <sum type="sha256">852edbdf9512525a4da01e3a00ac9e9cba26f07f93994e8fa1e4508276d0cac9</sum>
        </package>
        <package name="systemd-ukify" version="252" release="55.el9_7.7.alma.1" epoch="0" arch="noarch" src="systemd-252-55.el9_7.7.alma.1.src.rpm">
          <filename>systemd-ukify-252-55.el9_7.7.alma.1.noarch.rpm</filename>
          <sum type="sha256">d0bbd8f92a0ece392027ad9c47865654ea3554926aed9ed76c1d85cf4f6a303e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22790</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-12-08 00:00:00"/>
    <updated date="2025-12-08 14:01:27"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)
  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2023-43000)
  * webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)
  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43419)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)
  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)
  * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-43480)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)
  * webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22790" id="RHSA-2025:22790" type="rhsa" title="RHSA-2025:22790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43000" id="CVE-2023-43000" type="cve" title="CVE-2023-43000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13502" id="CVE-2025-13502" type="cve" title="CVE-2025-13502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13947" id="CVE-2025-13947" type="cve" title="CVE-2025-13947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43392" id="CVE-2025-43392" type="cve" title="CVE-2025-43392"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43419" id="CVE-2025-43419" type="cve" title="CVE-2025-43419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43421" id="CVE-2025-43421" type="cve" title="CVE-2025-43421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43425" id="CVE-2025-43425" type="cve" title="CVE-2025-43425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43427" id="CVE-2025-43427" type="cve" title="CVE-2025-43427"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43429" id="CVE-2025-43429" type="cve" title="CVE-2025-43429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43430" id="CVE-2025-43430" type="cve" title="CVE-2025-43430"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43431" id="CVE-2025-43431" type="cve" title="CVE-2025-43431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43432" id="CVE-2025-43432" type="cve" title="CVE-2025-43432"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43434" id="CVE-2025-43434" type="cve" title="CVE-2025-43434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43440" id="CVE-2025-43440" type="cve" title="CVE-2025-43440"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43443" id="CVE-2025-43443" type="cve" title="CVE-2025-43443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43458" id="CVE-2025-43458" type="cve" title="CVE-2025-43458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43480" id="CVE-2025-43480" type="cve" title="CVE-2025-43480"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66287" id="CVE-2025-66287" type="cve" title="CVE-2025-66287"/>
      <reference href="https://bugzilla.redhat.com/2416300" id="2416300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416324" id="2416324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416325" id="2416325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416326" id="2416326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416327" id="2416327" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416329" id="2416329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416330" id="2416330" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416331" id="2416331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416332" id="2416332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416334" id="2416334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416335" id="2416335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416336" id="2416336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416337" id="2416337" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416338" id="2416338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416355" id="2416355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418576" id="2418576" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418855" id="2418855" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418857" id="2418857" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22790.html" id="ALSA-2025:22790" type="self" title="ALSA-2025:22790"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="webkit2gtk3-jsc" version="2.50.3" release="1.el9_7" epoch="0" arch="s390x" src="webkit2gtk3-2.50.3-1.el9_7.src.rpm">
          <filename>webkit2gtk3-jsc-2.50.3-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">2f48914e021a2a2ed16f7fcdf9deb5d31e92b338891868282ac8cbf1f90b96d0</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.50.3" release="1.el9_7" epoch="0" arch="s390x" src="webkit2gtk3-2.50.3-1.el9_7.src.rpm">
          <filename>webkit2gtk3-devel-2.50.3-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4bfe88fcf88ef33ef4ba66b2e955ddc0156cbe80e81efa3d53f0d30a45300302</sum>
        </package>
        <package name="webkit2gtk3" version="2.50.3" release="1.el9_7" epoch="0" arch="s390x" src="webkit2gtk3-2.50.3-1.el9_7.src.rpm">
          <filename>webkit2gtk3-2.50.3-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">b5e2b3d16438ddbb7e3174b2b137c82120ab13379635bebff640d6c459df8351</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.50.3" release="1.el9_7" epoch="0" arch="s390x" src="webkit2gtk3-2.50.3-1.el9_7.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.50.3-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">f52bee46f33a08b2ccef9a383f0f9c783b5c60d3e1724e7240790c78f2d32c99</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22865</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-08 00:00:00"/>
    <updated date="2025-12-17 11:46:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925)
  * kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22865" id="RHSA-2025:22865" type="rhsa" title="RHSA-2025:22865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39925" id="CVE-2025-39925" type="cve" title="CVE-2025-39925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39979" id="CVE-2025-39979" type="cve" title="CVE-2025-39979"/>
      <reference href="https://bugzilla.redhat.com/2400629" id="2400629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404109" id="2404109" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22865.html" id="ALSA-2025:22865" type="self" title="ALSA-2025:22865"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="perf" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.13.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">00a041646b50b0db0d746fa65cef41cef26ab352968ee4a5015f09cea1d54ce8</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.13.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">1d4245c50d3c05922045d4cacaf2ab0ee64b81f7f36088892626d15e2f5293b4</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.13.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">1f11ae59b528372967f6d2111c1b1c92fc2c40a4e7d12116854dd2ce01e714d9</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.13.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">242a04f72583363b1fbf5cb0e5d7113dae4e1cb3fca5d80d0c707b96a08a1eab</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.13.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">2f07c06aa6b502375bdbf1390635924c3d12b182e571b9cf8f743ea7f247432d</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.13.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">3077453230b56a9024c6386e3a382237cfd64a275450898b612c5739bdb21c8d</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.13.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5f0bd58d2eecbca32109a837e95188f4d4ad3745d40f2097a00a7ac60efb95cc</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.13.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5f1ef34cbfcf578a94bc0cf88bbe75e666315c9cd3bfc0d3fd8c86ee4732dcad</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.13.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">a4d19822b3f05e550787d3d44bf91982258b0b799dd64049578e4dc899a08ac7</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.13.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">a5645cf2f12d83dc7cf5d54eaf71e8f7fe73877f9707a09ab1d1b21e1942773b</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.13.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">acb331567540d3a14f07567fa8f5e8aab335e4d00e52200346866b4a3925972e</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.13.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">eb7081dc491e3317594eb597fc2b47a5351879b1b825fd5941797a1ef22a706c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23034</id>
    <title>Important: firefox security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2025-12-12 10:14:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 (CVE-2025-14333)
  * firefox: Use-after-free in the WebRTC: Signaling component (CVE-2025-14321)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14325)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2025-14322)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14328)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14329)
  * firefox: Same-origin policy bypass in the Request Handling component (CVE-2025-14331)
  * firefox: Privilege escalation in the DOM: Notifications component (CVE-2025-14323)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14330)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14324)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23034" id="RHSA-2025:23034" type="rhsa" title="RHSA-2025:23034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14321" id="CVE-2025-14321" type="cve" title="CVE-2025-14321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14322" id="CVE-2025-14322" type="cve" title="CVE-2025-14322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14323" id="CVE-2025-14323" type="cve" title="CVE-2025-14323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14324" id="CVE-2025-14324" type="cve" title="CVE-2025-14324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14325" id="CVE-2025-14325" type="cve" title="CVE-2025-14325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14328" id="CVE-2025-14328" type="cve" title="CVE-2025-14328"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14329" id="CVE-2025-14329" type="cve" title="CVE-2025-14329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14330" id="CVE-2025-14330" type="cve" title="CVE-2025-14330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14331" id="CVE-2025-14331" type="cve" title="CVE-2025-14331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14333" id="CVE-2025-14333" type="cve" title="CVE-2025-14333"/>
      <reference href="https://bugzilla.redhat.com/2420502" id="2420502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420503" id="2420503" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420504" id="2420504" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420506" id="2420506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420508" id="2420508" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420509" id="2420509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420512" id="2420512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420513" id="2420513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420516" id="2420516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420517" id="2420517" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23034.html" id="ALSA-2025:23034" type="self" title="ALSA-2025:23034"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="firefox" version="140.6.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.6.0-1.el9_7.alma.1.src.rpm">
          <filename>firefox-140.6.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">3756e3cd2834f4abb4ab1b345b40832fcd21082371c5e4ecf3215f6f9011559b</sum>
        </package>
        <package name="firefox-x11" version="140.6.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.6.0-1.el9_7.alma.1.src.rpm">
          <filename>firefox-x11-140.6.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">967084870f398dc3defa2f6a6b0ce155670feb273ff80a5890a86418d28e5c49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23049</id>
    <title>Important: tomcat security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2025-12-17 11:42:14"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.  

Security Fix(es):  

  * tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)
  * tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23049" id="RHSA-2025:23049" type="rhsa" title="RHSA-2025:23049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31651" id="CVE-2025-31651" type="cve" title="CVE-2025-31651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55752" id="CVE-2025-55752" type="cve" title="CVE-2025-55752"/>
      <reference href="https://bugzilla.redhat.com/2362782" id="2362782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406591" id="2406591" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23049.html" id="ALSA-2025:23049" type="self" title="ALSA-2025:23049"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="tomcat-webapps" version="9.0.87" release="6.el9_7.1" epoch="1" arch="noarch" src="tomcat-9.0.87-6.el9_7.1.src.rpm">
          <filename>tomcat-webapps-9.0.87-6.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">042554fe7afabe09276b1305abf50e78f75a9609f790479647d629d727a576dc</sum>
        </package>
        <package name="tomcat" version="9.0.87" release="6.el9_7.1" epoch="1" arch="noarch" src="tomcat-9.0.87-6.el9_7.1.src.rpm">
          <filename>tomcat-9.0.87-6.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">743c7841f36b95beb9dbcde26837da06819a5019f6670219fc7a646489448e11</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.87" release="6.el9_7.1" epoch="1" arch="noarch" src="tomcat-9.0.87-6.el9_7.1.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.87-6.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">76cb4ffb4eb97a09c9cef86ca036e2b88d29aa94ada18ce6635fffda4ecaa81c</sum>
        </package>
        <package name="tomcat-lib" version="9.0.87" release="6.el9_7.1" epoch="1" arch="noarch" src="tomcat-9.0.87-6.el9_7.1.src.rpm">
          <filename>tomcat-lib-9.0.87-6.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">942047935da08addb54d45219557320d0cd24f1482b6925cbdda4a2b046e6a90</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.87" release="6.el9_7.1" epoch="1" arch="noarch" src="tomcat-9.0.87-6.el9_7.1.src.rpm">
          <filename>tomcat-docs-webapp-9.0.87-6.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">c5697771592ec914240d11f052f4c535546182c352a02e37d58cba7c4ba44b4f</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.87" release="6.el9_7.1" epoch="1" arch="noarch" src="tomcat-9.0.87-6.el9_7.1.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.87-6.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">de3401154ba76a426408986737cced54f5d01cabf3f2f49fa8bde03b7b4ef6a0</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.87" release="6.el9_7.1" epoch="1" arch="noarch" src="tomcat-9.0.87-6.el9_7.1.src.rpm">
          <filename>tomcat-admin-webapps-9.0.87-6.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">e54e22787bbfa9c1bc1183daf0620641e601542ab4e10dd85c4c2209a923f831</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.87" release="6.el9_7.1" epoch="1" arch="noarch" src="tomcat-9.0.87-6.el9_7.1.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.87-6.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">ed13f327020324dcc7aaef5dd4512d55cbf108e9c69b959a3aa63f1de6fb189b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23063</id>
    <title>Moderate: ruby:3.3 security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2026-01-05 20:38:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.3 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * resolv: Denial of Service in resolv gem (CVE-2025-24294)
  * rexml: REXML denial of service (CVE-2025-58767)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23063" id="RHSA-2025:23063" type="rhsa" title="RHSA-2025:23063"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24294" id="CVE-2025-24294" type="cve" title="CVE-2025-24294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58767" id="CVE-2025-58767" type="cve" title="CVE-2025-58767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61594" id="CVE-2025-61594" type="cve" title="CVE-2025-61594"/>
      <reference href="https://bugzilla.redhat.com/2379684" id="2379684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396186" id="2396186" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23063.html" id="ALSA-2025:23063" type="self" title="ALSA-2025:23063"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="ruby" stream="3.3" version="9070020251211084025" context="8cf767d6" arch="s390x"/>
        <package name="rubygem-typeprof" version="0.21.9" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-typeprof-0.21.9-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">1e76d470f5e813888cc11c835f5e419f511c7ac78693e9b3c08858c596f2ea07</sum>
        </package>
        <package name="rubygem-minitest" version="5.20.0" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-minitest-5.20.0-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">2052f90946637d56bd57f83b078bd2341398c9a763d7524f0b90a24e2f9829ed</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.5" release="3.module_el9.7.0+184+e2e36072" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.5-3.module_el9.7.0+184+e2e36072.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.5-3.module_el9.7.0+184+e2e36072.noarch.rpm</filename>
          <sum type="sha256">21f1801fd8a58bec713c01b5661fe7aed2e6bc230490ea9becb419513f7ab5a0</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.5" release="5.module_el9.7.0+193+58179166" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-bigdecimal-3.1.5-5.module_el9.7.0+193+58179166.s390x.rpm</filename>
          <sum type="sha256">335bbd931f6475e6bc6ab78824eb66a5b2739c14c2854c771a09f58ee4e353c1</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.5.4" release="1.module_el9.4.0+75+1a8fe981" epoch="0" arch="noarch" src="rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.src.rpm">
          <filename>rubygem-pg-doc-1.5.4-1.module_el9.4.0+75+1a8fe981.noarch.rpm</filename>
          <sum type="sha256">37ef36e0456b9c62427f8dd08442c622c134e026ded1488b8fd55487b69d2a58</sum>
        </package>
        <package name="rubygem-rake" version="13.1.0" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-rake-13.1.0-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">3938cce7107976d8cbe1413d03d0e737bd5ca448616dd660afe7813c6691195a</sum>
        </package>
        <package name="rubygem-json" version="2.7.2" release="5.module_el9.7.0+193+58179166" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-json-2.7.2-5.module_el9.7.0+193+58179166.s390x.rpm</filename>
          <sum type="sha256">443618a515f91f165caf673b4e3db60e6ada2bc2c46652a207ec0da8ec05ef78</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.5" release="3.module_el9.7.0+184+e2e36072" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.5-3.module_el9.7.0+184+e2e36072.src.rpm">
          <filename>rubygem-mysql2-0.5.5-3.module_el9.7.0+184+e2e36072.s390x.rpm</filename>
          <sum type="sha256">4866939ab52aa8d02863557cdaf8e3af45c043a8c7136082318eabfec4ab8150</sum>
        </package>
        <package name="ruby-doc" version="3.3.10" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>ruby-doc-3.3.10-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">610e56f3b59c67e8a1178ee3ad905ebadd573336f958888a908bbce106bc09fa</sum>
        </package>
        <package name="rubygem-rdoc" version="6.6.3.1" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-rdoc-6.6.3.1-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">7074e1adb6c6faf5bab68fc5c16bbe5c111202286c60288f85487369b87c2cb5</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.3" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-power_assert-2.0.3-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">79cbcd945ae37bfa66d064c77f72a6df45999b4f652ced8c6a16c366355e0d43</sum>
        </package>
        <package name="rubygems" version="3.5.22" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygems-3.5.22-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">812ca5c06c6b0d1175ebf4c20f101a63513a6812ecae5091376de5647439fabd</sum>
        </package>
        <package name="ruby" version="3.3.10" release="5.module_el9.7.0+193+58179166" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>ruby-3.3.10-5.module_el9.7.0+193+58179166.s390x.rpm</filename>
          <sum type="sha256">90da80bf75b2cf20d3a434e30a2166071a1b4d38190ae7263eed5a9ce1536d16</sum>
        </package>
        <package name="rubygem-bundler" version="2.5.22" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-bundler-2.5.22-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">9782600a3b69a18d97c2fb7acf77f6a210286d7e5122c532164cdaafca096f10</sum>
        </package>
        <package name="rubygem-rbs" version="3.4.0" release="5.module_el9.7.0+193+58179166" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-rbs-3.4.0-5.module_el9.7.0+193+58179166.s390x.rpm</filename>
          <sum type="sha256">995e8f0b4c2b19b9fbb27352ab3a74f8665828dd6c1ab93007c49a5318d7f252</sum>
        </package>
        <package name="ruby-libs" version="3.3.10" release="5.module_el9.7.0+193+58179166" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>ruby-libs-3.3.10-5.module_el9.7.0+193+58179166.s390x.rpm</filename>
          <sum type="sha256">a212d076a41228be262b1a8969fa89e43faa175b486cef067856f430275626b9</sum>
        </package>
        <package name="rubygem-pg" version="1.5.4" release="1.module_el9.4.0+75+1a8fe981" epoch="0" arch="s390x" src="rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.src.rpm">
          <filename>rubygem-pg-1.5.4-1.module_el9.4.0+75+1a8fe981.s390x.rpm</filename>
          <sum type="sha256">a81354cf449ea715f53abe583ed241f40275e30991a4a7bafc454729c2c75cc0</sum>
        </package>
        <package name="rubygem-irb" version="1.13.1" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-irb-1.13.1-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">b1c8d93726b425d9ad2ddeeeba96dc077bbbbb37ae080a7f6041f30aab2651a2</sum>
        </package>
        <package name="rubygem-rss" version="0.3.1" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-rss-0.3.1-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">b74756b8a04eab9e7df55084a0f6b6bb79a6e186e381983069d8189293eaeb8e</sum>
        </package>
        <package name="rubygem-racc" version="1.7.3" release="5.module_el9.7.0+193+58179166" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-racc-1.7.3-5.module_el9.7.0+193+58179166.s390x.rpm</filename>
          <sum type="sha256">b7d193e8db3f8535a66c4e12e5ee8eeaadd66b8fdfff757df601c22757eb0577</sum>
        </package>
        <package name="rubygems-devel" version="3.5.22" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygems-devel-3.5.22-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">bcb8bc87ed9dd4970b9742da89a2b03d27cb84ac9f5da6a5979ab6250035ea24</sum>
        </package>
        <package name="ruby-devel" version="3.3.10" release="5.module_el9.7.0+193+58179166" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>ruby-devel-3.3.10-5.module_el9.7.0+193+58179166.s390x.rpm</filename>
          <sum type="sha256">d0274a9d24b85a282f12bf059ddaf4072db195ea6b87596b377fcda0a36af3a3</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.3.10" release="5.module_el9.7.0+193+58179166" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>ruby-bundled-gems-3.3.10-5.module_el9.7.0+193+58179166.s390x.rpm</filename>
          <sum type="sha256">e5075f25a26221b6ae3da5bd99e3d8a064292d93ae21cded1eaaed4240a41e1e</sum>
        </package>
        <package name="rubygem-psych" version="5.1.2" release="5.module_el9.7.0+193+58179166" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-psych-5.1.2-5.module_el9.7.0+193+58179166.s390x.rpm</filename>
          <sum type="sha256">e52023054954e3106e3542b13425ba4ace9447f0f7685ddb6c2d6b2825f507ab</sum>
        </package>
        <package name="ruby-default-gems" version="3.3.10" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>ruby-default-gems-3.3.10-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">e6cd1a0e3eb42817f1358cd42bde2590af86393d2ce25e72a45530f6ec03bf11</sum>
        </package>
        <package name="rubygem-io-console" version="0.7.1" release="5.module_el9.7.0+193+58179166" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-io-console-0.7.1-5.module_el9.7.0+193+58179166.s390x.rpm</filename>
          <sum type="sha256">eb8cf54bd8beacc2a5e3eb81a5c5a5167c650fc3c7ae53832a1e93bb61f77891</sum>
        </package>
        <package name="rubygem-rexml" version="3.4.4" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-rexml-3.4.4-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">f01bed34c9e3e79763cf8bbb096c8d80c29d92e5ae03c20b4114aff309a11a5a</sum>
        </package>
        <package name="rubygem-test-unit" version="3.6.1" release="5.module_el9.7.0+193+58179166" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el9.7.0+193+58179166.src.rpm">
          <filename>rubygem-test-unit-3.6.1-5.module_el9.7.0+193+58179166.noarch.rpm</filename>
          <sum type="sha256">f1dd25f4182864b03b7f5f27a736a87f19132bdd9c1e662564c09a8349d05bf9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23087</id>
    <title>Moderate: grafana security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-15 12:37:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23087" id="RHSA-2025:23087" type="rhsa" title="RHSA-2025:23087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23087.html" id="ALSA-2025:23087" type="self" title="ALSA-2025:23087"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="grafana-selinux" version="10.2.6" release="17.el9_7" epoch="0" arch="s390x" src="grafana-10.2.6-17.el9_7.src.rpm">
          <filename>grafana-selinux-10.2.6-17.el9_7.s390x.rpm</filename>
          <sum type="sha256">3e76418cb62ac760283b1c593ae3f22aaa40397a080bd566fd5493bd223c558b</sum>
        </package>
        <package name="grafana" version="10.2.6" release="17.el9_7" epoch="0" arch="s390x" src="grafana-10.2.6-17.el9_7.src.rpm">
          <filename>grafana-10.2.6-17.el9_7.s390x.rpm</filename>
          <sum type="sha256">55052147ef4c9bb8837a5e120d9e2bb6244e8196c2732edf468456626fb9f9cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23109</id>
    <title>Moderate: mysql security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-12 10:21:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
  * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23109" id="RHSA-2025:23109" type="rhsa" title="RHSA-2025:23109"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53040" id="CVE-2025-53040" type="cve" title="CVE-2025-53040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53042" id="CVE-2025-53042" type="cve" title="CVE-2025-53042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53044" id="CVE-2025-53044" type="cve" title="CVE-2025-53044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53045" id="CVE-2025-53045" type="cve" title="CVE-2025-53045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53053" id="CVE-2025-53053" type="cve" title="CVE-2025-53053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53054" id="CVE-2025-53054" type="cve" title="CVE-2025-53054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53062" id="CVE-2025-53062" type="cve" title="CVE-2025-53062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53069" id="CVE-2025-53069" type="cve" title="CVE-2025-53069"/>
      <reference href="https://bugzilla.redhat.com/2405486" id="2405486" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405491" id="2405491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405511" id="2405511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405514" id="2405514" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405523" id="2405523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405534" id="2405534" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405541" id="2405541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405544" id="2405544" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23109.html" id="ALSA-2025:23109" type="self" title="ALSA-2025:23109"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="mysql-errmsg" version="8.0.44" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.44-1.el9_7.src.rpm">
          <filename>mysql-errmsg-8.0.44-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">01041aa3650686e6ba2f4513b1ea71d224f4264a6a388e17eded482b7cc1d552</sum>
        </package>
        <package name="mysql-libs" version="8.0.44" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.44-1.el9_7.src.rpm">
          <filename>mysql-libs-8.0.44-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">67aaf2f6ab2f26fbe15240fbf14970a969eeca79d6d08d67e00f29a01c31a052</sum>
        </package>
        <package name="mysql-server" version="8.0.44" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.44-1.el9_7.src.rpm">
          <filename>mysql-server-8.0.44-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">8473094c0aa9873e82e79c5df76d28b8b1ab7631cb11ff3e89de82182ea96c7f</sum>
        </package>
        <package name="mysql-common" version="8.0.44" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.44-1.el9_7.src.rpm">
          <filename>mysql-common-8.0.44-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">f29b60721d211ee5a24f90457d011b532b4decfca6123eeb50f1069675c957c4</sum>
        </package>
        <package name="mysql" version="8.0.44" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.44-1.el9_7.src.rpm">
          <filename>mysql-8.0.44-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">f2ec42003dfccbde1980c1b5ff25e6343248f15ca79f8c0bcef7c9ac2389d704</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23111</id>
    <title>Moderate: mysql:8.4 security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-17 11:32:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
  * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23111" id="RHSA-2025:23111" type="rhsa" title="RHSA-2025:23111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53040" id="CVE-2025-53040" type="cve" title="CVE-2025-53040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53042" id="CVE-2025-53042" type="cve" title="CVE-2025-53042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53044" id="CVE-2025-53044" type="cve" title="CVE-2025-53044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53045" id="CVE-2025-53045" type="cve" title="CVE-2025-53045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53053" id="CVE-2025-53053" type="cve" title="CVE-2025-53053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53054" id="CVE-2025-53054" type="cve" title="CVE-2025-53054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53062" id="CVE-2025-53062" type="cve" title="CVE-2025-53062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53069" id="CVE-2025-53069" type="cve" title="CVE-2025-53069"/>
      <reference href="https://bugzilla.redhat.com/2405486" id="2405486" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405491" id="2405491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405511" id="2405511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405514" id="2405514" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405523" id="2405523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405534" id="2405534" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405541" id="2405541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405544" id="2405544" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23111.html" id="ALSA-2025:23111" type="self" title="ALSA-2025:23111"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="mysql" stream="8.4" version="9070020251215093906" context="8cf767d6" arch="s390x"/>
        <package name="mysql-devel" version="8.4.7" release="1.module_el9.7.0+194+73a02de8" epoch="0" arch="s390x" src="mysql-8.4.7-1.module_el9.7.0+194+73a02de8.src.rpm">
          <filename>mysql-devel-8.4.7-1.module_el9.7.0+194+73a02de8.s390x.rpm</filename>
          <sum type="sha256">14fe8af05fb774a5950c43cc7d1cc161c618eadb969c58c363f1a7caf442571b</sum>
        </package>
        <package name="mysql-libs" version="8.4.7" release="1.module_el9.7.0+194+73a02de8" epoch="0" arch="s390x" src="mysql-8.4.7-1.module_el9.7.0+194+73a02de8.src.rpm">
          <filename>mysql-libs-8.4.7-1.module_el9.7.0+194+73a02de8.s390x.rpm</filename>
          <sum type="sha256">3a0d08e53077d020665073c56a28fe7a2bc438f38477dff65365c0ff9234cfbe</sum>
        </package>
        <package name="mysql-errmsg" version="8.4.7" release="1.module_el9.7.0+194+73a02de8" epoch="0" arch="noarch" src="mysql-8.4.7-1.module_el9.7.0+194+73a02de8.src.rpm">
          <filename>mysql-errmsg-8.4.7-1.module_el9.7.0+194+73a02de8.noarch.rpm</filename>
          <sum type="sha256">3ad51682b9f603e97ed5a3aa480c7158bc9cabfe52683821efe134f777c4ace8</sum>
        </package>
        <package name="mysql-server" version="8.4.7" release="1.module_el9.7.0+194+73a02de8" epoch="0" arch="s390x" src="mysql-8.4.7-1.module_el9.7.0+194+73a02de8.src.rpm">
          <filename>mysql-server-8.4.7-1.module_el9.7.0+194+73a02de8.s390x.rpm</filename>
          <sum type="sha256">5b4aa9b9a660c20c1696a1aa9d36ace239c86706c7814e66223c47328466e693</sum>
        </package>
        <package name="mysql" version="8.4.7" release="1.module_el9.7.0+194+73a02de8" epoch="0" arch="s390x" src="mysql-8.4.7-1.module_el9.7.0+194+73a02de8.src.rpm">
          <filename>mysql-8.4.7-1.module_el9.7.0+194+73a02de8.s390x.rpm</filename>
          <sum type="sha256">5eddbf895a1a11434d37f15d5f1890d25193ec5165d774a7a145e61dee2e288e</sum>
        </package>
        <package name="mecab" version="0.996" release="3.module_el9.6.0+152+8cbce00c.4" epoch="0" arch="s390x" src="mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.src.rpm">
          <filename>mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm</filename>
          <sum type="sha256">69e976d54c4bc862ea946aa1957a4af06ba625136f6734651e78787b4180585a</sum>
        </package>
        <package name="rapidjson-devel" version="1.1.0" release="19.module_el9.6.0+152+8cbce00c" epoch="0" arch="s390x" src="rapidjson-1.1.0-19.module_el9.6.0+152+8cbce00c.src.rpm">
          <filename>rapidjson-devel-1.1.0-19.module_el9.6.0+152+8cbce00c.s390x.rpm</filename>
          <sum type="sha256">8c0a757ea82924ecf340e621f29cb6d7322ebd996c0b7e05116c51486e2b6c37</sum>
        </package>
        <package name="mysql-test" version="8.4.7" release="1.module_el9.7.0+194+73a02de8" epoch="0" arch="s390x" src="mysql-8.4.7-1.module_el9.7.0+194+73a02de8.src.rpm">
          <filename>mysql-test-8.4.7-1.module_el9.7.0+194+73a02de8.s390x.rpm</filename>
          <sum type="sha256">9df718e5482a642abcaf17f219ade551c7f09b177ff0c4db4dd2eafeb1968e46</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="24.module_el9.6.0+152+8cbce00c" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm</filename>
          <sum type="sha256">a6a291c26e1b08f26ceec3afe3bb4650cb21e203ce04cff2350db34cbd12e24d</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="24.module_el9.6.0+152+8cbce00c" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm</filename>
          <sum type="sha256">bad50cf06e6ea4327ddfa8063a98361e493a8fe7dcf921be55ba12177dac540e</sum>
        </package>
        <package name="mecab-devel" version="0.996" release="3.module_el9.6.0+152+8cbce00c.4" epoch="0" arch="s390x" src="mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.src.rpm">
          <filename>mecab-devel-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm</filename>
          <sum type="sha256">ce7c078f962fd614387a5a86f7b229eb57758d44e95f0f1ad2cd522019019b61</sum>
        </package>
        <package name="mysql-common" version="8.4.7" release="1.module_el9.7.0+194+73a02de8" epoch="0" arch="noarch" src="mysql-8.4.7-1.module_el9.7.0+194+73a02de8.src.rpm">
          <filename>mysql-common-8.4.7-1.module_el9.7.0+194+73a02de8.noarch.rpm</filename>
          <sum type="sha256">ea7bda08f9b88e34fcd82a2d963e392746bbb510fc8ff007779208a1d35ba1c5</sum>
        </package>
        <package name="mysql-test-data" version="8.4.7" release="1.module_el9.7.0+194+73a02de8" epoch="0" arch="noarch" src="mysql-8.4.7-1.module_el9.7.0+194+73a02de8.src.rpm">
          <filename>mysql-test-data-8.4.7-1.module_el9.7.0+194+73a02de8.noarch.rpm</filename>
          <sum type="sha256">ec4fa0f0561aa7f6a57fe7d16c58c6d9049765f2d3c2b178c8ae8e956895d960</sum>
        </package>
        <package name="rapidjson-doc" version="1.1.0" release="19.module_el9.6.0+152+8cbce00c" epoch="0" arch="noarch" src="rapidjson-1.1.0-19.module_el9.6.0+152+8cbce00c.src.rpm">
          <filename>rapidjson-doc-1.1.0-19.module_el9.6.0+152+8cbce00c.noarch.rpm</filename>
          <sum type="sha256">f8ffc9a3a68b1ff128217cd41887db70007c1f69467c915cb92a8c754102e0d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23142</id>
    <title>Important: wireshark security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-12 10:27:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.  

Security Fix(es):  

  * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23142" id="RHSA-2025:23142" type="rhsa" title="RHSA-2025:23142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13499" id="CVE-2025-13499" type="cve" title="CVE-2025-13499"/>
      <reference href="https://bugzilla.redhat.com/2416293" id="2416293" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23142.html" id="ALSA-2025:23142" type="self" title="ALSA-2025:23142"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="wireshark" version="3.4.10" release="8.el9_7.1" epoch="1" arch="s390x" src="wireshark-3.4.10-8.el9_7.1.src.rpm">
          <filename>wireshark-3.4.10-8.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">bae359f48d35c6c1ff8b4ff63678537f51e023bc974ae7b87f759fe3a9f68876</sum>
        </package>
        <package name="wireshark-cli" version="3.4.10" release="8.el9_7.1" epoch="1" arch="s390x" src="wireshark-3.4.10-8.el9_7.1.src.rpm">
          <filename>wireshark-cli-3.4.10-8.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">c0abb018d5e009c49adbed34f0df2d0cb04f2b45f0c098605c467a63389e907d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23210</id>
    <title>Important: keylime security update</title>
    <issued date="2025-12-15 00:00:00"/>
    <updated date="2025-12-17 13:58:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>keylime security update</summary>
    <description>Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.  

Security Fix(es):  

  * keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration (CVE-2025-13609)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23210" id="RHSA-2025:23210" type="rhsa" title="RHSA-2025:23210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13609" id="CVE-2025-13609" type="cve" title="CVE-2025-13609"/>
      <reference href="https://bugzilla.redhat.com/2416761" id="2416761" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23210.html" id="ALSA-2025:23210" type="self" title="ALSA-2025:23210"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="keylime-tenant" version="7.12.1" release="11.el9_7.3" epoch="0" arch="s390x" src="keylime-7.12.1-11.el9_7.3.src.rpm">
          <filename>keylime-tenant-7.12.1-11.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">4772069bfecc6aff83aebc8289f3c64cb690b219d2ce6facf287cc273c91328e</sum>
        </package>
        <package name="keylime" version="7.12.1" release="11.el9_7.3" epoch="0" arch="s390x" src="keylime-7.12.1-11.el9_7.3.src.rpm">
          <filename>keylime-7.12.1-11.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">6c2b4d357a9941348b8e79d8f784f2388d9da395d298d6f1b4e72f40f2efa02f</sum>
        </package>
        <package name="keylime-verifier" version="7.12.1" release="11.el9_7.3" epoch="0" arch="s390x" src="keylime-7.12.1-11.el9_7.3.src.rpm">
          <filename>keylime-verifier-7.12.1-11.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">6c7bba3bc359415763663e9f222d7d53701c3899e369c8d3f49e216359642084</sum>
        </package>
        <package name="keylime-registrar" version="7.12.1" release="11.el9_7.3" epoch="0" arch="s390x" src="keylime-7.12.1-11.el9_7.3.src.rpm">
          <filename>keylime-registrar-7.12.1-11.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">73452d4cf05c6b425761651b6709fd011cd287007f8783d70851d2336ece2461</sum>
        </package>
        <package name="keylime-base" version="7.12.1" release="11.el9_7.3" epoch="0" arch="s390x" src="keylime-7.12.1-11.el9_7.3.src.rpm">
          <filename>keylime-base-7.12.1-11.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">8cdb5b6bdf3adf980bffca7749f4a2df8fd4dae26132997012d60acb4b8f463d</sum>
        </package>
        <package name="keylime-selinux" version="7.12.1" release="11.el9_7.3" epoch="0" arch="noarch" src="keylime-7.12.1-11.el9_7.3.src.rpm">
          <filename>keylime-selinux-7.12.1-11.el9_7.3.noarch.rpm</filename>
          <sum type="sha256">dcd62073eeca23c4ecae679315d947a18542766de1fa33068f399f691fe3f626</sum>
        </package>
        <package name="python3-keylime" version="7.12.1" release="11.el9_7.3" epoch="0" arch="s390x" src="keylime-7.12.1-11.el9_7.3.src.rpm">
          <filename>python3-keylime-7.12.1-11.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">ff852aef816f30299209ed889b74d2137362b36df286fd63a818954d23677ba0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23241</id>
    <title>Important: kernel security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2026-01-05 20:29:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499)
  * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966)
  * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23241" id="RHSA-2025:23241" type="rhsa" title="RHSA-2025:23241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38499" id="CVE-2025-38499" type="cve" title="CVE-2025-38499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39966" id="CVE-2025-39966" type="cve" title="CVE-2025-39966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40176" id="CVE-2025-40176" type="cve" title="CVE-2025-40176"/>
      <reference href="https://bugzilla.redhat.com/2387670" id="2387670" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404107" id="2404107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414524" id="2414524" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23241.html" id="ALSA-2025:23241" type="self" title="ALSA-2025:23241"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="kernel-debug-devel" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.16.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">1df4af2974c1b44162750809be5cbf60901a769f4de6d617bbcdb2d79fcbf46a</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.16.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">203925d1a5160877fdd41837dedf38ff8a76297a8c73da44fb2aaf2cbd4b780b</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.16.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">47ad33d74698c9cf7358fcd43e32b7463417b4f640d51c3b2cdfc38e6a68e7cd</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.16.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5a3ee891156dd875252bc0abfc58ee0f4f874fea858d2fb7aa4599efa09e9937</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.16.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">74d85b4b9179cbb5dd2d17e1554ed477861ced8dcd30f9a48f12ef4699c44f51</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.16.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">77d3f0aa9824d277d96e5aa405147cf73493666b3aed16e845ffbc0694e4c5db</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.16.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">89740db1aa9f0bb9ce092cbfce6e221d3e0ba7bea8a0af586cc0c58fcadb4cce</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.16.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">a90ac19d238b5f645c1f88b935ebe8457079617f74bd25a0d5a4b5cb4d5e3d96</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.16.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">daee9eae01b47868a7716192a1df5af0369a0d71198aa306471aff54fb838879</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.16.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">dfd770da851feaefe7bafbce3fa97b7a478377c33398b95f940ee926342abf7b</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.16.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">f6a2a3a0ae148ae161fc330ee02e5f5f3566f21b928d9cd217d8b3f7cac9f750</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.16.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">fde31bf59fc5a39ed7741f5e2b53dbda51319cf44f7d34c52d0047b8e1e471d8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23309</id>
    <title>Moderate: php:8.3 security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:55:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:8.3 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: pgsql extension does not check for errors during escaping (CVE-2025-1735)
  * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491)
  * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23309" id="RHSA-2025:23309" type="rhsa" title="RHSA-2025:23309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1220" id="CVE-2025-1220" type="cve" title="CVE-2025-1220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1735" id="CVE-2025-1735" type="cve" title="CVE-2025-1735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6491" id="CVE-2025-6491" type="cve" title="CVE-2025-6491"/>
      <reference href="https://bugzilla.redhat.com/2378689" id="2378689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378690" id="2378690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379792" id="2379792" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23309.html" id="ALSA-2025:23309" type="self" title="ALSA-2025:23309"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="php" stream="8.3" version="9060020250317151939" context="8cf767d6" arch="s390x"/>
        <package name="php-cli" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-cli-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">000bd4d06a764adb8a61b40124b826172f27c1f8d1bf5dfec88bb091da38694c</sum>
        </package>
        <package name="php-opcache" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-opcache-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">0d6312c48400c8c34b9a34aef6ecfa610b2eac63f89ffee416bafcf4b4d90d8d</sum>
        </package>
        <package name="php-ffi" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-ffi-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">0ec8f1fe5a504162d826e687075d03a36d62a1146cc0688125508bccfcfbf862</sum>
        </package>
        <package name="php-pecl-zip" version="1.22.3" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">2c10a6a3ff7e5ab1e236819a29a6fd7e9817b8632a6bc09864e5b4f635d83552</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.23" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">2d91df18463f7e5cd5a771f760d2dae331ad870672e519b72976b7b1e308de4b</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.23" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">2e6d69933e316fd47fb94a2c937bbdd1aa9468b2ff581671b71042a7b07a002f</sum>
        </package>
        <package name="php-ldap" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-ldap-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">320986993313f88d7957c9dc969c151d34c8270c97a626c3a68aa2b16bd78583</sum>
        </package>
        <package name="php-dba" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-dba-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">3c4312e28e3c5b5af450fd11ab514a760adc73d02ce90cf854add6712f6f406a</sum>
        </package>
        <package name="php-common" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-common-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">4035205db136f9265507e961f84a8bd4c2d46284ed89eac23f156a813529a7a4</sum>
        </package>
        <package name="apcu-panel" version="5.1.23" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm</filename>
          <sum type="sha256">43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033</sum>
        </package>
        <package name="php-odbc" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-odbc-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">447139eec2eba0718ab2c4d34292c92e94092a8938e669d219ab2679f2862ab8</sum>
        </package>
        <package name="php-process" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-process-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">54bea720f81d7265858df5a6251e8e88a2bac81a951ff77a5c078b847ced72ec</sum>
        </package>
        <package name="php-mbstring" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-mbstring-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">587b5a4aa9b83701f0624cfc2f323a9e735b22324863f26ba33e3097e441f922</sum>
        </package>
        <package name="php-gmp" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-gmp-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">6219878f28c63e0c523e808c43e1bb862d77bface5fab031f15f4e6243e7978a</sum>
        </package>
        <package name="php-bcmath" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-bcmath-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">63c856667b8d6edc22f91f4bb86af81efc639a68d2bfe63106d59e149abe9d03</sum>
        </package>
        <package name="php-fpm" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-fpm-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">70db76052fa97f9f86ea766c0c3e1da1f9364a5a73d2a56dd9fae14fada969d9</sum>
        </package>
        <package name="php-enchant" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-enchant-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">72aa1cd56aa5d36b933ef1f7a8f9db07fa5532e419e7056e2f309c7ee405ec77</sum>
        </package>
        <package name="php-pgsql" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-pgsql-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">78a960cd1d8f125fa70097ef012ab417f545e1d64a191c7f72dde2343417f114</sum>
        </package>
        <package name="php-gd" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-gd-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">82b64639716b8e209f7d177105b328ecb4c64e5904ac8bb79d234c69fde01083</sum>
        </package>
        <package name="php-devel" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-devel-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">8dca559a6a51f5204d9932cdf05626a70d640e40066debfd5bae6beac5f90f46</sum>
        </package>
        <package name="php-xml" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-xml-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">955b026fbf1bf475ba579ae730c5fce001fc323b81aae13ead55b2c990528c86</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="4.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">9692a81f8b31d7f3d9d3e90990ab08a2b9825346ca6ff7072a897086d61630d2</sum>
        </package>
        <package name="php" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">96a3dc526427c85c3147c2ad000d1caf24ea0ce1747ad12c6e52113ffa9c85ee</sum>
        </package>
        <package name="php-mysqlnd" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-mysqlnd-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">a790c6b2cf48e656b0a6d0fd584e3c9f1edd0d641d09f317bf8c03251cae9063</sum>
        </package>
        <package name="php-embedded" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-embedded-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">ac8f65a6fc923c38b684303750d517cc65b4580dc06fb4f137cb574a8b9a629e</sum>
        </package>
        <package name="php-pdo" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-pdo-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">aecfddcd1673b642335acac892115ad8b7109286aa89dbdc6c4008ce56dca008</sum>
        </package>
        <package name="php-intl" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-intl-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">b98068fea808e436c63f8ed79c14ea09c7b27c1260c6c57dc2b1f00f75424df5</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.3.1" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">cd0acae21cca91d1423ac7f37f561db326c1d3f12144b462e729b1bb11349f22</sum>
        </package>
        <package name="php-pecl-redis6" version="6.1.0" release="2.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">daddebb79dcabf2b21e7db723448b62a2c6d9941272af21949a665d7b0e9e11e</sum>
        </package>
        <package name="php-snmp" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-snmp-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">dc3f06cf80cdeef70d8d007320201019f62044862234a3ed2fbfe58e04e9797f</sum>
        </package>
        <package name="php-dbg" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-dbg-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">e449c5ee09ee2cc4c2b39ffaabe8715654e0e92d36bbb54e9f6fd0a7b132f281</sum>
        </package>
        <package name="php-soap" version="8.3.26" release="1.module_el9.7.0+197+324afee8" epoch="0" arch="s390x" src="php-8.3.26-1.module_el9.7.0+197+324afee8.src.rpm">
          <filename>php-soap-8.3.26-1.module_el9.7.0+197+324afee8.s390x.rpm</filename>
          <sum type="sha256">ed5639ffa59c9b1eb2f2650745bb61b026833c49624f44199a68f006c04cb61d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23323</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:52:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23323" id="RHSA-2025:23323" type="rhsa" title="RHSA-2025:23323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23323.html" id="ALSA-2025:23323" type="self" title="ALSA-2025:23323"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3.12" version="3.12.12" release="1.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el9_7.src.rpm">
          <filename>python3.12-3.12.12-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">1eb8f5f50eadb07aec538b76e09bc4d00eec502f08e5f5c21c90ea2ca2c84aa6</sum>
        </package>
        <package name="python3.12-libs" version="3.12.12" release="1.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el9_7.src.rpm">
          <filename>python3.12-libs-3.12.12-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">2f3cfc75172ab951b83c4fe4a073de51ba4fb685a39fe328b10cfdf584988e73</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.12" release="1.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el9_7.src.rpm">
          <filename>python3.12-tkinter-3.12.12-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">45926440dfdd6c502195d584d229d07e597b14a3e932ae986933cfa08d128dd9</sum>
        </package>
        <package name="python3.12-devel" version="3.12.12" release="1.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el9_7.src.rpm">
          <filename>python3.12-devel-3.12.12-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d3779be3f46eb8a76a7e7cd1ff1c0ff21bab1176a2202fc733f5e1fbdbe11924</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23325</id>
    <title>Moderate: podman security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:50:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23325" id="RHSA-2025:23325" type="rhsa" title="RHSA-2025:23325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23325.html" id="ALSA-2025:23325" type="self" title="ALSA-2025:23325"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="podman" version="5.6.0" release="9.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-9.el9_7.src.rpm">
          <filename>podman-5.6.0-9.el9_7.s390x.rpm</filename>
          <sum type="sha256">420c8dd312a938fdc2055f5e3068abf429c823f91f359cb15ddb4effed640c7d</sum>
        </package>
        <package name="podman-tests" version="5.6.0" release="9.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-9.el9_7.src.rpm">
          <filename>podman-tests-5.6.0-9.el9_7.s390x.rpm</filename>
          <sum type="sha256">4e4fc87adab2c6d66c3eb9454001a9e521cf1583298eca4f6ba103306aa2df29</sum>
        </package>
        <package name="podman-remote" version="5.6.0" release="9.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-9.el9_7.src.rpm">
          <filename>podman-remote-5.6.0-9.el9_7.s390x.rpm</filename>
          <sum type="sha256">5b40520dfd581f430dd1fcf6a5a816589cd742449d8b3fab8f4e38fe3ae7584a</sum>
        </package>
        <package name="podman-plugins" version="5.6.0" release="9.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-9.el9_7.src.rpm">
          <filename>podman-plugins-5.6.0-9.el9_7.s390x.rpm</filename>
          <sum type="sha256">5fb895c028f9cfaf1f3ceee0204a9a573a6d0513e99052762f86fd4a33a5b171</sum>
        </package>
        <package name="podman-docker" version="5.6.0" release="9.el9_7" epoch="6" arch="noarch" src="podman-5.6.0-9.el9_7.src.rpm">
          <filename>podman-docker-5.6.0-9.el9_7.noarch.rpm</filename>
          <sum type="sha256">95acb44516014fa7cb6e321e1aa10afa1e39fdd85dc4578f6aab3e7d0059ec7c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23326</id>
    <title>Moderate: skopeo security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:49:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>skopeo security update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.   

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23326" id="RHSA-2025:23326" type="rhsa" title="RHSA-2025:23326"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23326.html" id="ALSA-2025:23326" type="self" title="ALSA-2025:23326"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="skopeo" version="1.20.0" release="2.el9_7" epoch="2" arch="s390x" src="skopeo-1.20.0-2.el9_7.src.rpm">
          <filename>skopeo-1.20.0-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">50642c325e96bfb68e2d684030d2eeaacaf101370e1f2bd91506bdc2b21e00d4</sum>
        </package>
        <package name="skopeo-tests" version="1.20.0" release="2.el9_7" epoch="2" arch="s390x" src="skopeo-1.20.0-2.el9_7.src.rpm">
          <filename>skopeo-tests-1.20.0-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">68db768357917f6f741fab43429562bb28307661698c8b17b4b00c2f85549622</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23336</id>
    <title>Moderate: gcc-toolset-13-binutils security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:43:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc-toolset-13-binutils security update</summary>
    <description>Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line).  

Security Fix(es):  

  * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23336" id="RHSA-2025:23336" type="rhsa" title="RHSA-2025:23336"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11083" id="CVE-2025-11083" type="cve" title="CVE-2025-11083"/>
      <reference href="https://bugzilla.redhat.com/2399948" id="2399948" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23336.html" id="ALSA-2025:23336" type="self" title="ALSA-2025:23336"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="gcc-toolset-13-binutils-devel" version="2.40" release="21.el9_7.1" epoch="0" arch="s390x" src="gcc-toolset-13-binutils-2.40-21.el9_7.1.src.rpm">
          <filename>gcc-toolset-13-binutils-devel-2.40-21.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">3cf24a1e656e3904c6159fbb5f59f76026b6e9da4c7afda2275e86dcb156119b</sum>
        </package>
        <package name="gcc-toolset-13-binutils" version="2.40" release="21.el9_7.1" epoch="0" arch="s390x" src="gcc-toolset-13-binutils-2.40-21.el9_7.1.src.rpm">
          <filename>gcc-toolset-13-binutils-2.40-21.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">8cb1c3ca7a4eebc154746cc709b474ce9aea1a1f7d5ab3b866fb3dd4727b4bab</sum>
        </package>
        <package name="gcc-toolset-13-binutils-gold" version="2.40" release="21.el9_7.1" epoch="0" arch="s390x" src="gcc-toolset-13-binutils-2.40-21.el9_7.1.src.rpm">
          <filename>gcc-toolset-13-binutils-gold-2.40-21.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">a5cfbbce3ce0bb8e7980f1cd710e1a9e54a8a2216f64120c5cc569d4a990633e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23342</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:45:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642)
  * cpython: Python HTMLParser quadratic complexity (CVE-2025-6069)
  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)
  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23342" id="RHSA-2025:23342" type="rhsa" title="RHSA-2025:23342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5642" id="CVE-2024-5642" type="cve" title="CVE-2024-5642"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6069" id="CVE-2025-6069" type="cve" title="CVE-2025-6069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6075" id="CVE-2025-6075" type="cve" title="CVE-2025-6075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2294682" id="2294682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373234" id="2373234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2408891" id="2408891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23342.html" id="ALSA-2025:23342" type="self" title="ALSA-2025:23342"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3-devel" version="3.9.25" release="2.el9_7" epoch="0" arch="s390x" src="python3.9-3.9.25-2.el9_7.src.rpm">
          <filename>python3-devel-3.9.25-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">75d5ca79186ed6867c31e221405664dba9db530141664eb1ee59e5b83f76ff79</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.25" release="2.el9_7" epoch="0" arch="noarch" src="python3.9-3.9.25-2.el9_7.src.rpm">
          <filename>python-unversioned-command-3.9.25-2.el9_7.noarch.rpm</filename>
          <sum type="sha256">9cd4004b4ee5d78dced922fbddc7341790a38a8869cf3252a6585ed620f412d8</sum>
        </package>
        <package name="python3-tkinter" version="3.9.25" release="2.el9_7" epoch="0" arch="s390x" src="python3.9-3.9.25-2.el9_7.src.rpm">
          <filename>python3-tkinter-3.9.25-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">f363a3a3fa95fdd22a5c5b6925d8f950446a0df7603dee4f019bc727097b6473</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23343</id>
    <title>Moderate: binutils security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:47:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>binutils security update</summary>
    <description>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.  

Security Fix(es):  

  * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23343" id="RHSA-2025:23343" type="rhsa" title="RHSA-2025:23343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11083" id="CVE-2025-11083" type="cve" title="CVE-2025-11083"/>
      <reference href="https://bugzilla.redhat.com/2399948" id="2399948" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23343.html" id="ALSA-2025:23343" type="self" title="ALSA-2025:23343"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="binutils-devel" version="2.35.2" release="67.el9_7.1" epoch="0" arch="s390x" src="binutils-2.35.2-67.el9_7.1.src.rpm">
          <filename>binutils-devel-2.35.2-67.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">548e1f222bfeb1516bf79ab9db4c36c0d505260c44a54be90e850956824beb85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23480</id>
    <title>Moderate: openssh security update</title>
    <issued date="2025-12-17 00:00:00"/>
    <updated date="2025-12-21 20:03:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  

Security Fix(es):  

  * openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984)
  * openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23480" id="RHSA-2025:23480" type="rhsa" title="RHSA-2025:23480"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61984" id="CVE-2025-61984" type="cve" title="CVE-2025-61984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61985" id="CVE-2025-61985" type="cve" title="CVE-2025-61985"/>
      <reference href="https://bugzilla.redhat.com/2401960" id="2401960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401962" id="2401962" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23480.html" id="ALSA-2025:23480" type="self" title="ALSA-2025:23480"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="pam_ssh_agent_auth" version="0.10.4" release="5.47.el9_7.alma.1" epoch="0" arch="s390x" src="openssh-8.7p1-47.el9_7.alma.1.src.rpm">
          <filename>pam_ssh_agent_auth-0.10.4-5.47.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">aa4433f46d9e31efcd7df4a6f3678a4b64d6ee74f95d7b8108e7af7849428c75</sum>
        </package>
        <package name="openssh-askpass" version="8.7p1" release="47.el9_7.alma.1" epoch="0" arch="s390x" src="openssh-8.7p1-47.el9_7.alma.1.src.rpm">
          <filename>openssh-askpass-8.7p1-47.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">c44c256238f81b8585231fc3e031b3d9da8c66c7e22f2af70a1e51a94fcccd66</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23483</id>
    <title>Moderate: libssh security update</title>
    <issued date="2025-12-17 00:00:00"/>
    <updated date="2025-12-21 19:54:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  

Security Fix(es):  

  * libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend (CVE-2025-5987)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23483" id="RHSA-2025:23483" type="rhsa" title="RHSA-2025:23483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5987" id="CVE-2025-5987" type="cve" title="CVE-2025-5987"/>
      <reference href="https://bugzilla.redhat.com/2376219" id="2376219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23483.html" id="ALSA-2025:23483" type="self" title="ALSA-2025:23483"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libssh-devel" version="0.10.4" release="17.el9_7" epoch="0" arch="s390x" src="libssh-0.10.4-17.el9_7.src.rpm">
          <filename>libssh-devel-0.10.4-17.el9_7.s390x.rpm</filename>
          <sum type="sha256">5f26fa71d6e03936f3754f96576726d9747c35fd7aedf0b3c4f295b3abda4c3f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2359</id>
    <title>Important: firefox security update</title>
    <issued date="2025-03-05 00:00:00"/>
    <updated date="2025-03-21 12:18:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Use-after-free in WebTransportChild (CVE-2025-1931)
  * firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process (CVE-2025-1930)
  * firefox: Unexpected GC during RegExp bailout processing (CVE-2025-1934)
  * firefox: Clickjacking the registerProtocolHandler info-bar Reporter (CVE-2025-1935)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1938)
  * firefox: JIT corruption of WASM i32 return values on 64-bit CPUs (CVE-2025-1933)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1937)
  * firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access (CVE-2025-1932)
  * firefox: Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents (CVE-2025-1936)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2359" id="RHSA-2025:2359" type="rhsa" title="RHSA-2025:2359"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1930" id="CVE-2025-1930" type="cve" title="CVE-2025-1930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1931" id="CVE-2025-1931" type="cve" title="CVE-2025-1931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1932" id="CVE-2025-1932" type="cve" title="CVE-2025-1932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1933" id="CVE-2025-1933" type="cve" title="CVE-2025-1933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1934" id="CVE-2025-1934" type="cve" title="CVE-2025-1934"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1935" id="CVE-2025-1935" type="cve" title="CVE-2025-1935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1936" id="CVE-2025-1936" type="cve" title="CVE-2025-1936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1937" id="CVE-2025-1937" type="cve" title="CVE-2025-1937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1938" id="CVE-2025-1938" type="cve" title="CVE-2025-1938"/>
      <reference href="https://bugzilla.redhat.com/2349786" id="2349786" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349787" id="2349787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349790" id="2349790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349792" id="2349792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349793" id="2349793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349794" id="2349794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349795" id="2349795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349796" id="2349796" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349797" id="2349797" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2359.html" id="ALSA-2025:2359" type="self" title="ALSA-2025:2359"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="firefox-x11" version="128.8.0" release="1.el9_5" epoch="0" arch="s390x" src="firefox-128.8.0-1.el9_5.src.rpm">
          <filename>firefox-x11-128.8.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">594fde7f1473c457085d4c7eac138d5eb38ac868abe9b5526fee2cf18af3d4fa</sum>
        </package>
        <package name="firefox" version="128.8.0" release="1.el9_5" epoch="0" arch="s390x" src="firefox-128.8.0-1.el9_5.src.rpm">
          <filename>firefox-128.8.0-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">8a4168b4bcbfafbe8a9be0d3dd2fa39811bce51dfaf43829c88feaeb6d627a4e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23700</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-12-18 00:00:00"/>
    <updated date="2025-12-22 13:39:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: webkitgtk: Use-after-free due to improper memory management (CVE-2025-43529)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43501)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43531)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43535)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43536)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43541)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23700" id="RHSA-2025:23700" type="rhsa" title="RHSA-2025:23700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43501" id="CVE-2025-43501" type="cve" title="CVE-2025-43501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43529" id="CVE-2025-43529" type="cve" title="CVE-2025-43529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43531" id="CVE-2025-43531" type="cve" title="CVE-2025-43531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43535" id="CVE-2025-43535" type="cve" title="CVE-2025-43535"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43536" id="CVE-2025-43536" type="cve" title="CVE-2025-43536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43541" id="CVE-2025-43541" type="cve" title="CVE-2025-43541"/>
      <reference href="https://bugzilla.redhat.com/2423166" id="2423166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423185" id="2423185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423187" id="2423187" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423188" id="2423188" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423190" id="2423190" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423191" id="2423191" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23700.html" id="ALSA-2025:23700" type="self" title="ALSA-2025:23700"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="webkit2gtk3" version="2.50.4" release="1.el9_7" epoch="0" arch="s390x" src="webkit2gtk3-2.50.4-1.el9_7.src.rpm">
          <filename>webkit2gtk3-2.50.4-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">05a1fd6d3385f9a6a089c44ed60d87af7db8912a95a3b946ce0b3bc368079a15</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.50.4" release="1.el9_7" epoch="0" arch="s390x" src="webkit2gtk3-2.50.4-1.el9_7.src.rpm">
          <filename>webkit2gtk3-jsc-2.50.4-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">1d2a4c68a7494cf5d5bd653f81b89df274172478045f1c4398689b2f4b245321</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.50.4" release="1.el9_7" epoch="0" arch="s390x" src="webkit2gtk3-2.50.4-1.el9_7.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.50.4-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">664775c94a93a556aca88aff5c3cf81e979668198e8780a6ec134243a8935498</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.50.4" release="1.el9_7" epoch="0" arch="s390x" src="webkit2gtk3-2.50.4-1.el9_7.src.rpm">
          <filename>webkit2gtk3-devel-2.50.4-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">e358948a972c9985c91bc5a5d1620baa4f89c6828f76438fd3342e4905b7ec6e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23729</id>
    <title>Important: opentelemetry-collector security update</title>
    <issued date="2025-12-21 00:00:00"/>
    <updated date="2025-12-23 13:07:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>opentelemetry-collector security update</summary>
    <description>Collector with the supported components for a AlmaLinux build of OpenTelemetry  

Security Fix(es):  

  * github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation (CVE-2025-68156)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23729" id="RHSA-2025:23729" type="rhsa" title="RHSA-2025:23729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68156" id="CVE-2025-68156" type="cve" title="CVE-2025-68156"/>
      <reference href="https://bugzilla.redhat.com/2422891" id="2422891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23729.html" id="ALSA-2025:23729" type="self" title="ALSA-2025:23729"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="opentelemetry-collector" version="0.135.0" release="2.el9_7" epoch="0" arch="s390x" src="opentelemetry-collector-0.135.0-2.el9_7.src.rpm">
          <filename>opentelemetry-collector-0.135.0-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">26e589f29ce990263b1d71c8cfc0f1f4018d6bc1ee5ff4bb4ca8d8b8ed509737</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23739</id>
    <title>Important: mod_md security update</title>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2025-12-22 13:37:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mod_md security update</summary>
    <description>This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal.  

Security Fix(es):  

  * mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23739" id="RHSA-2025:23739" type="rhsa" title="RHSA-2025:23739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55753" id="CVE-2025-55753" type="cve" title="CVE-2025-55753"/>
      <reference href="https://bugzilla.redhat.com/2419140" id="2419140" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23739.html" id="ALSA-2025:23739" type="self" title="ALSA-2025:23739"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="mod_md" version="2.4.26" release="1.el9_7.1" epoch="1" arch="s390x" src="mod_md-2.4.26-1.el9_7.1.src.rpm">
          <filename>mod_md-2.4.26-1.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">00fe8ff6623dfd2b0349eb07fd7c5eb45167616dabd1efcfc42d77d75e43ccb8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23744</id>
    <title>Important: git-lfs security update</title>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2025-12-22 12:38:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * git-lfs: Git LFS may write to arbitrary files via crafted symlinks (CVE-2025-26625)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23744" id="RHSA-2025:23744" type="rhsa" title="RHSA-2025:23744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26625" id="CVE-2025-26625" type="cve" title="CVE-2025-26625"/>
      <reference href="https://bugzilla.redhat.com/2404720" id="2404720" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23744.html" id="ALSA-2025:23744" type="self" title="ALSA-2025:23744"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="git-lfs" version="3.6.1" release="4.el9_7" epoch="0" arch="s390x" src="git-lfs-3.6.1-4.el9_7.src.rpm">
          <filename>git-lfs-3.6.1-4.el9_7.s390x.rpm</filename>
          <sum type="sha256">4f8b70c9215326cd3130866fa2105ed6adad87ec7d0f6129a0a1d4378123defd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23856</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2025-12-23 16:45:01"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 (CVE-2025-14333)
  * firefox: Use-after-free in the WebRTC: Signaling component (CVE-2025-14321)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14325)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2025-14322)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14328)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14329)
  * firefox: Same-origin policy bypass in the Request Handling component (CVE-2025-14331)
  * firefox: Privilege escalation in the DOM: Notifications component (CVE-2025-14323)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14330)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14324)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23856" id="RHSA-2025:23856" type="rhsa" title="RHSA-2025:23856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14321" id="CVE-2025-14321" type="cve" title="CVE-2025-14321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14322" id="CVE-2025-14322" type="cve" title="CVE-2025-14322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14323" id="CVE-2025-14323" type="cve" title="CVE-2025-14323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14324" id="CVE-2025-14324" type="cve" title="CVE-2025-14324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14325" id="CVE-2025-14325" type="cve" title="CVE-2025-14325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14328" id="CVE-2025-14328" type="cve" title="CVE-2025-14328"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14329" id="CVE-2025-14329" type="cve" title="CVE-2025-14329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14330" id="CVE-2025-14330" type="cve" title="CVE-2025-14330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14331" id="CVE-2025-14331" type="cve" title="CVE-2025-14331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14333" id="CVE-2025-14333" type="cve" title="CVE-2025-14333"/>
      <reference href="https://bugzilla.redhat.com/2420502" id="2420502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420503" id="2420503" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420504" id="2420504" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420506" id="2420506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420508" id="2420508" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420509" id="2420509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420512" id="2420512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420513" id="2420513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420516" id="2420516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420517" id="2420517" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23856.html" id="ALSA-2025:23856" type="self" title="ALSA-2025:23856"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="thunderbird" version="140.6.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="thunderbird-140.6.0-1.el9_7.alma.1.src.rpm">
          <filename>thunderbird-140.6.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">32f5df1a9d1e5d3184c5506504c92aa70a7ef727c203da7a50139398cbfb5549</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23919</id>
    <title>Important: httpd security update</title>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2026-01-05 20:20:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>httpd security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  

Security Fix(es):  

  * httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
  * httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)
  * httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23919" id="RHSA-2025:23919" type="rhsa" title="RHSA-2025:23919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58098" id="CVE-2025-58098" type="cve" title="CVE-2025-58098"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65082" id="CVE-2025-65082" type="cve" title="CVE-2025-65082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66200" id="CVE-2025-66200" type="cve" title="CVE-2025-66200"/>
      <reference href="https://bugzilla.redhat.com/2419139" id="2419139" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419262" id="2419262" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419365" id="2419365" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23919.html" id="ALSA-2025:23919" type="self" title="ALSA-2025:23919"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="httpd-filesystem" version="2.4.62" release="7.el9_7.3" epoch="0" arch="noarch" src="httpd-2.4.62-7.el9_7.3.src.rpm">
          <filename>httpd-filesystem-2.4.62-7.el9_7.3.noarch.rpm</filename>
          <sum type="sha256">010cb3fee1896ff672703724018ae6fe479ebeef8cfe3509d6ed63c9552b2de5</sum>
        </package>
        <package name="mod_ssl" version="2.4.62" release="7.el9_7.3" epoch="1" arch="s390x" src="httpd-2.4.62-7.el9_7.3.src.rpm">
          <filename>mod_ssl-2.4.62-7.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">126b0b83b302973a885b1578a11f0ac4eedffdb61d76616a9c133b8dfba8bfcd</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.62" release="7.el9_7.3" epoch="1" arch="s390x" src="httpd-2.4.62-7.el9_7.3.src.rpm">
          <filename>mod_proxy_html-2.4.62-7.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">463368368bda616e04c4d0d890b2bbfe7324bd5aea4c4e9d9e2db910b6dea32a</sum>
        </package>
        <package name="mod_session" version="2.4.62" release="7.el9_7.3" epoch="0" arch="s390x" src="httpd-2.4.62-7.el9_7.3.src.rpm">
          <filename>mod_session-2.4.62-7.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">5990fbc1e53a8c399552f3a55dd929ff1ada2e3aa84c2c806a397b7159cbf7ac</sum>
        </package>
        <package name="httpd-manual" version="2.4.62" release="7.el9_7.3" epoch="0" arch="noarch" src="httpd-2.4.62-7.el9_7.3.src.rpm">
          <filename>httpd-manual-2.4.62-7.el9_7.3.noarch.rpm</filename>
          <sum type="sha256">8e21f57b8d986cfef0ebc680e4d3a7b6ecf794d2a233dbcc47db3fbf25cb6534</sum>
        </package>
        <package name="mod_ldap" version="2.4.62" release="7.el9_7.3" epoch="0" arch="s390x" src="httpd-2.4.62-7.el9_7.3.src.rpm">
          <filename>mod_ldap-2.4.62-7.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">9247af13014ca1062627ad9990e7fa17f8fcb661bb112797715223e1b4d00164</sum>
        </package>
        <package name="mod_lua" version="2.4.62" release="7.el9_7.3" epoch="0" arch="s390x" src="httpd-2.4.62-7.el9_7.3.src.rpm">
          <filename>mod_lua-2.4.62-7.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">a5d9f3b824d61e96e49da67624567cd0d3bcafec647f359b537c16cc0a62a5b7</sum>
        </package>
        <package name="httpd-core" version="2.4.62" release="7.el9_7.3" epoch="0" arch="s390x" src="httpd-2.4.62-7.el9_7.3.src.rpm">
          <filename>httpd-core-2.4.62-7.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">aba3e98003994a5950032293e64c6aa10627782e77a75d4400a0e3c5a91b317c</sum>
        </package>
        <package name="httpd" version="2.4.62" release="7.el9_7.3" epoch="0" arch="s390x" src="httpd-2.4.62-7.el9_7.3.src.rpm">
          <filename>httpd-2.4.62-7.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">caf742edefccb5461b26d3177955224e9412042c1eac2f888326fbfc0551de95</sum>
        </package>
        <package name="httpd-tools" version="2.4.62" release="7.el9_7.3" epoch="0" arch="s390x" src="httpd-2.4.62-7.el9_7.3.src.rpm">
          <filename>httpd-tools-2.4.62-7.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">ec287e212f067845017da7f4e9a08c3d513bdc5ff28fd54dcfa703a351131c70</sum>
        </package>
        <package name="httpd-devel" version="2.4.62" release="7.el9_7.3" epoch="0" arch="s390x" src="httpd-2.4.62-7.el9_7.3.src.rpm">
          <filename>httpd-devel-2.4.62-7.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">ed5d0b92d8eeaa5cf975790f2bc35fd7f75fe8c52198d6a6b1fd54540f94aa58</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2500</id>
    <title>Important: tigervnc security update</title>
    <issued date="2025-03-10 00:00:00"/>
    <updated date="2025-03-17 22:11:27"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.  

Security Fix(es):  

  * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)
  * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)
  * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)
  * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)
  * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)
  * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)
  * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)
  * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2500" id="RHSA-2025:2500" type="rhsa" title="RHSA-2025:2500"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26594" id="CVE-2025-26594" type="cve" title="CVE-2025-26594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26595" id="CVE-2025-26595" type="cve" title="CVE-2025-26595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26596" id="CVE-2025-26596" type="cve" title="CVE-2025-26596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26597" id="CVE-2025-26597" type="cve" title="CVE-2025-26597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26598" id="CVE-2025-26598" type="cve" title="CVE-2025-26598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26599" id="CVE-2025-26599" type="cve" title="CVE-2025-26599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26600" id="CVE-2025-26600" type="cve" title="CVE-2025-26600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26601" id="CVE-2025-26601" type="cve" title="CVE-2025-26601"/>
      <reference href="https://bugzilla.redhat.com/2345248" id="2345248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345251" id="2345251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345252" id="2345252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345253" id="2345253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345254" id="2345254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345255" id="2345255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345256" id="2345256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345257" id="2345257" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2500.html" id="ALSA-2025:2500" type="self" title="ALSA-2025:2500"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="tigervnc-icons" version="1.14.1" release="1.el9_5.1" epoch="0" arch="noarch" src="tigervnc-1.14.1-1.el9_5.1.src.rpm">
          <filename>tigervnc-icons-1.14.1-1.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">08eb0fe289f4792b3cb6f77177d607bba5e069938e4aad36532be1b959990086</sum>
        </package>
        <package name="tigervnc-license" version="1.14.1" release="1.el9_5.1" epoch="0" arch="noarch" src="tigervnc-1.14.1-1.el9_5.1.src.rpm">
          <filename>tigervnc-license-1.14.1-1.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">1c41e5a2911fdde16998225f599853ddd6c07baed42fcd070e0fbaa87ada968d</sum>
        </package>
        <package name="tigervnc-server" version="1.14.1" release="1.el9_5.1" epoch="0" arch="s390x" src="tigervnc-1.14.1-1.el9_5.1.src.rpm">
          <filename>tigervnc-server-1.14.1-1.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">38428f2f53d6666e0a04858ed55af545239fb111521c7fd114b9771813b8b04e</sum>
        </package>
        <package name="tigervnc-selinux" version="1.14.1" release="1.el9_5.1" epoch="0" arch="noarch" src="tigervnc-1.14.1-1.el9_5.1.src.rpm">
          <filename>tigervnc-selinux-1.14.1-1.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">8bbb425e9a5ea9fa0d133059e86420caee8ee3378b90ee9bf2a485fa73e92aee</sum>
        </package>
        <package name="tigervnc-server-module" version="1.14.1" release="1.el9_5.1" epoch="0" arch="s390x" src="tigervnc-1.14.1-1.el9_5.1.src.rpm">
          <filename>tigervnc-server-module-1.14.1-1.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">bb1676c53e612eaffd89293e3c5d6bce5e28c2c27a8feb0271521c48b339b138</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.14.1" release="1.el9_5.1" epoch="0" arch="s390x" src="tigervnc-1.14.1-1.el9_5.1.src.rpm">
          <filename>tigervnc-server-minimal-1.14.1-1.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">d6523d21bc612a54801c01d486fa2986d0bb5b5f479fc77f7a1fb681add83119</sum>
        </package>
        <package name="tigervnc" version="1.14.1" release="1.el9_5.1" epoch="0" arch="s390x" src="tigervnc-1.14.1-1.el9_5.1.src.rpm">
          <filename>tigervnc-1.14.1-1.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">fff60b2b77756540bf7ae6345b8988448ef4324a5f7ac4ed49f66e454025cbd5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2627</id>
    <title>Important: kernel security update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-14 09:33:01"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ACPI: extlog: fix NULL pointer dereference check (CVE-2023-52605)
  * kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans (CVE-2024-50264)
  * kernel: HID: core: zero-initialize the report buffer (CVE-2024-50302)
  * kernel: can: bcm: Fix UAF in bcm_proc_show() (CVE-2023-52922)
  * kernel: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CVE-2024-53113)
  * kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (CVE-2024-53197)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2627" id="RHSA-2025:2627" type="rhsa" title="RHSA-2025:2627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52605" id="CVE-2023-52605" type="cve" title="CVE-2023-52605"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52922" id="CVE-2023-52922" type="cve" title="CVE-2023-52922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50264" id="CVE-2024-50264" type="cve" title="CVE-2024-50264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50302" id="CVE-2024-50302" type="cve" title="CVE-2024-50302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53113" id="CVE-2024-53113" type="cve" title="CVE-2024-53113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53197" id="CVE-2024-53197" type="cve" title="CVE-2024-53197"/>
      <reference href="https://bugzilla.redhat.com/2268295" id="2268295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327168" id="2327168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327169" id="2327169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329370" id="2329370" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329924" id="2329924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334412" id="2334412" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2627.html" id="ALSA-2025:2627" type="self" title="ALSA-2025:2627"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-503.31.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">2f4b034f60e9281a51b58b30033aeae21c094354783b5dd732cc623e60d4102f</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-503.31.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">30cf4460c4bca7b473a7b2d0ce1160ebd5394a8a6f38ebdf8054761fb5bda901</sum>
        </package>
        <package name="rtla" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>rtla-5.14.0-503.31.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">4619e835bf087770e7a48ed71275d173705330bf3b1a06d7cd0d1a3cef08d96b</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-devel-matched-5.14.0-503.31.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">4e9a3d0d959490f6fe5c42ff68cb19b77433c677bdd7185d5ebcb897c2e29940</sum>
        </package>
        <package name="rv" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>rv-5.14.0-503.31.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">5444d59298c8a59d0e41da50863d17b953972dde7a1be87667c61f878bdb8f74</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-5.14.0-503.31.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">710391498f9a767e7999ff73493a62a932a86825479da54782ab29c3029ef3fd</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-headers-5.14.0-503.31.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">81e15b999c9ae8cfd2ce20d6e78c4073d321ae7e0972067304783d79a2337b3b</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-doc-5.14.0-503.31.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">8a1eaf2fefbe6ada09b979433a0adbbda098053bfdde0ca648b04202d3d9faf8</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-devel-5.14.0-503.31.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">af3f4083b1129d69743aba72377ec5e33557b1e5f656acc993a86a184589901c</sum>
        </package>
        <package name="perf" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>perf-5.14.0-503.31.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">b966b32c1c1600b291810f349c0fe241c555020b25e00bafb3e138a5f0a20ded</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-503.31.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">e8479549fbf8872cd8ae988e98fef02feff5a1f507a9f0cc70cc75e79ada46f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2668</id>
    <title>Important: .NET 9.0 security, bug fix, and enhancement update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-17 22:25:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.104 and .NET Runtime 9.0.3.Security Fix(es):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070)


Bug Fix(es) and Enhancement(s):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2668" id="RHSA-2025:2668" type="rhsa" title="RHSA-2025:2668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24070" id="CVE-2025-24070" type="cve" title="CVE-2025-24070"/>
      <reference href="https://bugzilla.redhat.com/2349733" id="2349733" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2668.html" id="ALSA-2025:2668" type="self" title="ALSA-2025:2668"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="dotnet-apphost-pack-9.0" version="9.0.3" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.3-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">13c50a42faeb348bfd11bfaf435843443098fb9babcdd3bcf6fff0cb1bf0a346</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.3" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.3-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">44020a5dd72308512bfbf0d346df6664c887a7eaf9bf38611caf7916e8847d49</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="9.0.104" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.104-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">57d6fb527a67bd78727d3d22720008bc688ac56f9498ab9b9c96f62561eaf824</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.3" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.3-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">659b51ad9a54204b342348f117ac256e8d76c223a7b893548fbd9bc0530833bc</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.3" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.3-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">861eb4eb68f2a04d91aaf94740c0a4b19a5f4235f3beec27de0a9b7274c09bd0</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.3" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.3-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">8de208938808113763db6e8a3f0f11061ef7b29a8c6d08bddb1ed4fe31e86d29</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.104" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.104-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">91a0a89ff6d65b3b3ca9778bd66b37ed0dfb35def554c7840a1e0d0254090c29</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.3" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.3-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">9bc8439ae041c7d7a3d8c0e7762b78ad66c1c61796cfc5ad1b364371ee2dffc8</sum>
        </package>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.3" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.3-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">ac789c43903655ee0276e11c0a71843c32fc573b408f3213a8bfcfda4e82fd9a</sum>
        </package>
        <package name="dotnet-host" version="9.0.3" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>dotnet-host-9.0.3-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">acdb8de0dedc222219fc6318ac600237987d3f53638a102e830135931f24b32a</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.3" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.3-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">b571f9b9c0a7246e97bf3a4d4d8380bd5a4749b4ed4618d59de0fa33759cc8b1</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.104" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.104-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">bac29f1214c70cae1daa6ff72bdc94b19f16d7d6a114fbc90b7d433b72950c5e</sum>
        </package>
        <package name="dotnet-templates-9.0" version="9.0.104" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>dotnet-templates-9.0-9.0.104-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">cd5db8b9f6fe0c78ce2bcc348962ec0504e7b942d1533815c6bb5dacd52bc764</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2669</id>
    <title>Important: .NET 8.0 security, bug fix, and enhancement update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-17 22:27:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime 8.0.14.Security Fix(es):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070)


Bug Fix(es) and Enhancement(s):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2669" id="RHSA-2025:2669" type="rhsa" title="RHSA-2025:2669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24070" id="CVE-2025-24070" type="cve" title="CVE-2025-24070"/>
      <reference href="https://bugzilla.redhat.com/2349733" id="2349733" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2669.html" id="ALSA-2025:2669" type="self" title="ALSA-2025:2669"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="dotnet-templates-8.0" version="8.0.114" release="1.el9_5" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el9_5.src.rpm">
          <filename>dotnet-templates-8.0-8.0.114-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">044da777c075205b586aa4f2d4f5d35fe9340204df2dd8869832fd9535106f39</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.114" release="1.el9_5" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el9_5.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.114-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">162727fb0d19c83bfcd5617a20137669242878a9eeb68e217d6a598fb5533dfc</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.14" release="1.el9_5" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el9_5.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.14-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">2eef41c43c2177b0d36a72233c89f2f5ad79bca81b6548488e0d6dfe857d7067</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.14" release="1.el9_5" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el9_5.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.14-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">2fd44c7f5b2117da3a86b7bad627d0b4fba50c8c90edf75db6776ae86b994ab0</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.14" release="1.el9_5" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el9_5.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.14-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">4282adfc4112090b284bc6dfc8bd95d989d213a29674d9a51637559b5803edb6</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.14" release="1.el9_5" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el9_5.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.14-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">450e21162d124643650b5c3f5557064da4dca3eff70ce8c865ed45f92bc193ce</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.14" release="1.el9_5" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el9_5.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.14-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">45c4023269fb13f5b3f7a86e984346da4384ca7ffdcba656ce49d7537206d5b8</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.114" release="1.el9_5" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el9_5.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.114-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">8d48eeca79f5da4ca66ab0cb01666d2382155785a04c9ef39497c9f924f43ae9</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.14" release="1.el9_5" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el9_5.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.14-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">b343774842bcedf4a0c9b9c789eb494e4c6381880cb16c8f967e7f21f9feb561</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.14" release="1.el9_5" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el9_5.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.14-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">ec18a88335e972a4abb5ced167318db6450ee4ad75d369978f176f5e5ea5e4cd</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.14" release="1.el9_5" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el9_5.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.14-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">f8b2247b942cd1c024930302977f7291bc11b14a8363e9ae219dfb02ae755b40</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2679</id>
    <title>Important: libxml2 security update</title>
    <issued date="2025-03-12 00:00:00"/>
    <updated date="2025-03-13 07:22:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml2: Use-After-Free in libxml2 (CVE-2024-56171)
  * libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2679" id="RHSA-2025:2679" type="rhsa" title="RHSA-2025:2679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56171" id="CVE-2024-56171" type="cve" title="CVE-2024-56171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24928" id="CVE-2025-24928" type="cve" title="CVE-2025-24928"/>
      <reference href="https://bugzilla.redhat.com/2346416" id="2346416" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346421" id="2346421" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2679.html" id="ALSA-2025:2679" type="self" title="ALSA-2025:2679"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="libxml2-devel" version="2.9.13" release="6.el9_5.2" epoch="0" arch="s390x" src="libxml2-2.9.13-6.el9_5.2.src.rpm">
          <filename>libxml2-devel-2.9.13-6.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">3c1f7c3ce01d4a556e8f059e9cc52556b2ee428cfd7efc2799f892005d089961</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2864</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-03-17 00:00:00"/>
    <updated date="2025-03-17 22:36:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: out-of-bounds write vulnerability (CVE-2025-24201)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2864" id="RHSA-2025:2864" type="rhsa" title="RHSA-2025:2864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24201" id="CVE-2025-24201" type="cve" title="CVE-2025-24201"/>
      <reference href="https://bugzilla.redhat.com/2351802" id="2351802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2864.html" id="ALSA-2025:2864" type="self" title="ALSA-2025:2864"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="webkit2gtk3-devel" version="2.46.6" release="2.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-2.el9_5.src.rpm">
          <filename>webkit2gtk3-devel-2.46.6-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">75a752ed90cb10a77d0aba6b8ac5cc5062dc2914b2e7d0554cf7f770d8a65f21</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.46.6" release="2.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-2.el9_5.src.rpm">
          <filename>webkit2gtk3-jsc-2.46.6-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">cc2fc0869074433c1d3a4e4d514225af67072d548ae4cb45219a50887bfb707e</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.46.6" release="2.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-2.el9_5.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.46.6-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">d29084f1f2485e48a7d19b4eb0e1db6da0e11dd002e96bd95b0a3bc1543af745</sum>
        </package>
        <package name="webkit2gtk3" version="2.46.6" release="2.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-2.el9_5.src.rpm">
          <filename>webkit2gtk3-2.46.6-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">d8b03e8d159e1b7a81ec0a132b0a41a824bc2ef756739345fe2e06a8c96f0ce5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2899</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-03-17 00:00:00"/>
    <updated date="2025-03-21 12:13:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1938)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1937)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2899" id="RHSA-2025:2899" type="rhsa" title="RHSA-2025:2899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1937" id="CVE-2025-1937" type="cve" title="CVE-2025-1937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1938" id="CVE-2025-1938" type="cve" title="CVE-2025-1938"/>
      <reference href="https://bugzilla.redhat.com/2349793" id="2349793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349795" id="2349795" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2899.html" id="ALSA-2025:2899" type="self" title="ALSA-2025:2899"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="thunderbird" version="128.8.0" release="2.el9_5.alma.1" epoch="0" arch="s390x" src="thunderbird-128.8.0-2.el9_5.alma.1.src.rpm">
          <filename>thunderbird-128.8.0-2.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">27cb131404d0c7415e739b8eeaea9967eeb95b3efc8b0050400acfdcb2382d35</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3107</id>
    <title>Important: libxslt security update</title>
    <issued date="2025-03-24 00:00:00"/>
    <updated date="2025-03-25 12:04:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxslt security update</summary>
    <description>libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.   

Security Fix(es):  

  * libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3107" id="RHSA-2025:3107" type="rhsa" title="RHSA-2025:3107"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24855" id="CVE-2025-24855" type="cve" title="CVE-2025-24855"/>
      <reference href="https://bugzilla.redhat.com/2352483" id="2352483" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3107.html" id="ALSA-2025:3107" type="self" title="ALSA-2025:3107"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="libxslt-devel" version="1.1.34" release="9.el9_5.1" epoch="0" arch="s390x" src="libxslt-1.1.34-9.el9_5.1.src.rpm">
          <filename>libxslt-devel-1.1.34-9.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">1982789b03f0d216afd761bbd65dc199ccd52fbf9f519a5aacfb23c56fc0ea71</sum>
        </package>
        <package name="libxslt" version="1.1.34" release="9.el9_5.1" epoch="0" arch="s390x" src="libxslt-1.1.34-9.el9_5.1.src.rpm">
          <filename>libxslt-1.1.34-9.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">efa882dfa3c90830e83964166d128a82d8faf1877601d2d2be6cbcb97b468bd7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3261</id>
    <title>Moderate: nginx:1.22 security update</title>
    <issued date="2025-03-26 00:00:00"/>
    <updated date="2025-03-30 09:27:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx:1.22 security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3261" id="RHSA-2025:3261" type="rhsa" title="RHSA-2025:3261"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7347" id="CVE-2024-7347" type="cve" title="CVE-2024-7347"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3261.html" id="ALSA-2025:3261" type="self" title="ALSA-2025:3261"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="nginx" stream="1.22" version="9050020250328124628" context="8cf767d6" arch="s390x"/>
        <package name="nginx-mod-http-xslt-filter" version="1.22.1" release="8.module_el9.5.0+153+8c633b18.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">03ba89365b528c50d160bbbfc24ebea820b014bf938110ca43f5151c414a7f3c</sum>
        </package>
        <package name="nginx-filesystem" version="1.22.1" release="8.module_el9.5.0+153+8c633b18.1.alma.1" epoch="1" arch="noarch" src="nginx-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.src.rpm">
          <filename>nginx-filesystem-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">20fecffac0847e519512ba8cd591edeba05bc8f264ca32b07bd073504cb74071</sum>
        </package>
        <package name="nginx-mod-mail" version="1.22.1" release="8.module_el9.5.0+153+8c633b18.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">31c3d24d23fd52e20c16e165808c4f489633270c1249fb0b1d664add77d9c520</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.22.1" release="8.module_el9.5.0+153+8c633b18.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">4030b059ed7f5536b33a2436d3f79a8d2b336a52f9f15aa41d04183a220a4b99</sum>
        </package>
        <package name="nginx" version="1.22.1" release="8.module_el9.5.0+153+8c633b18.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.src.rpm">
          <filename>nginx-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">7b7833d5c19c7512c7d920f4b6284d2ce0880d99fe57b45538d50aca745caca2</sum>
        </package>
        <package name="nginx-core" version="1.22.1" release="8.module_el9.5.0+153+8c633b18.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.src.rpm">
          <filename>nginx-core-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">7f290000957a51236ca5d6df9adb1325ada2558f18b1eb47846be01f4032f777</sum>
        </package>
        <package name="nginx-mod-devel" version="1.22.1" release="8.module_el9.5.0+153+8c633b18.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">8155e28ff674d744baecfed9998119d0f64a06dd297f20c040e3f49aefeb462c</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.22.1" release="8.module_el9.5.0+153+8c633b18.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">ac73a6425ad8dc4d79428d5dd63dac5e50ad64b4629d00d3ef77e2416d3f679a</sum>
        </package>
        <package name="nginx-all-modules" version="1.22.1" release="8.module_el9.5.0+153+8c633b18.1.alma.1" epoch="1" arch="noarch" src="nginx-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.src.rpm">
          <filename>nginx-all-modules-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">c35220600225a92c23b7364c22f0379078c76d410cf5f796f65ab44d08d8d20c</sum>
        </package>
        <package name="nginx-mod-stream" version="1.22.1" release="8.module_el9.5.0+153+8c633b18.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.22.1-8.module_el9.5.0+153+8c633b18.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">ea184baf0a879556fe89cdac1b952c5e7689497e9e97f547515347ccc745c70b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3262</id>
    <title>Moderate: nginx:1.24 security update</title>
    <issued date="2025-03-26 00:00:00"/>
    <updated date="2025-07-24 13:36:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx:1.24 security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3262" id="RHSA-2025:3262" type="rhsa" title="RHSA-2025:3262"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7347" id="CVE-2024-7347" type="cve" title="CVE-2024-7347"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3262.html" id="ALSA-2025:3262" type="self" title="ALSA-2025:3262"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <module name="nginx" stream="1.24" version="9050020250328124928" context="8cf767d6" arch="s390x"/>
        <package name="nginx-mod-devel" version="1.24.0" release="4.module_el9.5.0+154+722f94fd.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">3277c5ab82b457680bde4d0569cb2aff353073a29400d0ea3dd64e1e3604bd88</sum>
        </package>
        <package name="nginx-core" version="1.24.0" release="4.module_el9.5.0+154+722f94fd.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.src.rpm">
          <filename>nginx-core-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">380c6d3dc74670cf5c916235dc57bbd4ec52d83f3a3c20ce6d432a53e14e2dcb</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.24.0" release="4.module_el9.5.0+154+722f94fd.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">3ad2d22ed02dc47165009469a5077556389bf08dd2dea13ba0419eabd95d3e9c</sum>
        </package>
        <package name="nginx-filesystem" version="1.24.0" release="4.module_el9.5.0+154+722f94fd.1.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.src.rpm">
          <filename>nginx-filesystem-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">46aa379ab6b7efb4afe049d48dfc01743a009efbee327e06e2d394ecc2203a30</sum>
        </package>
        <package name="nginx" version="1.24.0" release="4.module_el9.5.0+154+722f94fd.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.src.rpm">
          <filename>nginx-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">4e758675c78016c81731aa14df67a67f26938e58a4088f8c92890be5a7b6bbc1</sum>
        </package>
        <package name="nginx-mod-stream" version="1.24.0" release="4.module_el9.5.0+154+722f94fd.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">7f1ed00e4f780670d69e5491da08fd39610db0ccba7a7d78c79e53803bc652a3</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.24.0" release="4.module_el9.5.0+154+722f94fd.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">8857aa3c85356de2225e581c373bb209ceac5ee4478f1d7b01347d1dd7ed8222</sum>
        </package>
        <package name="nginx-mod-mail" version="1.24.0" release="4.module_el9.5.0+154+722f94fd.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">b8a8ba422a38b0333d8507640117d5b956839d5a9d01f7b4091fbcbd8b424f40</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.24.0" release="4.module_el9.5.0+154+722f94fd.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">c17d41492298d9f0d3188b7af5449d70a7e8ba86bf70156a29d8679cf2cc7294</sum>
        </package>
        <package name="nginx-all-modules" version="1.24.0" release="4.module_el9.5.0+154+722f94fd.1.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.src.rpm">
          <filename>nginx-all-modules-1.24.0-4.module_el9.5.0+154+722f94fd.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">e5cb23709dc9450f3ab02e90d789ebaf48751c3726076dced63da2bd50d68f72</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3344</id>
    <title>Important: grafana security update</title>
    <issued date="2025-03-27 00:00:00"/>
    <updated date="2025-03-31 12:20:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3344" id="RHSA-2025:3344" type="rhsa" title="RHSA-2025:3344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30204" id="CVE-2025-30204" type="cve" title="CVE-2025-30204"/>
      <reference href="https://bugzilla.redhat.com/2354195" id="2354195" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3344.html" id="ALSA-2025:3344" type="self" title="ALSA-2025:3344"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="grafana" version="10.2.6" release="9.el9_5" epoch="0" arch="s390x" src="grafana-10.2.6-9.el9_5.src.rpm">
          <filename>grafana-10.2.6-9.el9_5.s390x.rpm</filename>
          <sum type="sha256">03c7a983550314707595946cc978aebe63827673c768a01f5af8436567835688</sum>
        </package>
        <package name="grafana-selinux" version="10.2.6" release="9.el9_5" epoch="0" arch="s390x" src="grafana-10.2.6-9.el9_5.src.rpm">
          <filename>grafana-selinux-10.2.6-9.el9_5.s390x.rpm</filename>
          <sum type="sha256">a85290b7b0ab9ec29e931ee26785481374a534539476145e3f49500d39600924</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3406</id>
    <title>Important: python-jinja2 security update</title>
    <issued date="2025-03-31 00:00:00"/>
    <updated date="2025-04-01 07:14:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-jinja2 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * jinja2: Jinja sandbox breakout through attr filter selecting format method (CVE-2025-27516)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3406" id="RHSA-2025:3406" type="rhsa" title="RHSA-2025:3406"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27516" id="CVE-2025-27516" type="cve" title="CVE-2025-27516"/>
      <reference href="https://bugzilla.redhat.com/2350190" id="2350190" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3406.html" id="ALSA-2025:3406" type="self" title="ALSA-2025:3406"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="python3-jinja2" version="2.11.3" release="8.el9_5" epoch="0" arch="noarch" src="python-jinja2-2.11.3-8.el9_5.src.rpm">
          <filename>python3-jinja2-2.11.3-8.el9_5.noarch.rpm</filename>
          <sum type="sha256">a1b063cfea59ae64cb44cf1fc0947b580d536a6a00da53384b132339c0dcf69b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3531</id>
    <title>Moderate: expat security update</title>
    <issued date="2025-04-02 00:00:00"/>
    <updated date="2025-04-02 22:20:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.  

Security Fix(es):  

  * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3531" id="RHSA-2025:3531" type="rhsa" title="RHSA-2025:3531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8176" id="CVE-2024-8176" type="cve" title="CVE-2024-8176"/>
      <reference href="https://bugzilla.redhat.com/2310137" id="2310137" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3531.html" id="ALSA-2025:3531" type="self" title="ALSA-2025:3531"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="expat-devel" version="2.5.0" release="3.el9_5.3" epoch="0" arch="s390x" src="expat-2.5.0-3.el9_5.3.src.rpm">
          <filename>expat-devel-2.5.0-3.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">57c8a407369a516723ac3790641c002bb487dd08005b0086b74c9b00f8256255</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3556</id>
    <title>Important: firefox security update</title>
    <issued date="2025-04-03 00:00:00"/>
    <updated date="2025-04-04 06:36:06"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters (CVE-2025-3029)
  * firefox: thunderbird: Use-after-free triggered by XSLTProcessor (CVE-2025-3028)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 (CVE-2025-3030)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3556" id="RHSA-2025:3556" type="rhsa" title="RHSA-2025:3556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3028" id="CVE-2025-3028" type="cve" title="CVE-2025-3028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3029" id="CVE-2025-3029" type="cve" title="CVE-2025-3029"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3030" id="CVE-2025-3030" type="cve" title="CVE-2025-3030"/>
      <reference href="https://bugzilla.redhat.com/2356556" id="2356556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356562" id="2356562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356563" id="2356563" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3556.html" id="ALSA-2025:3556" type="self" title="ALSA-2025:3556"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="firefox" version="128.9.0" release="2.el9_5" epoch="0" arch="s390x" src="firefox-128.9.0-2.el9_5.src.rpm">
          <filename>firefox-128.9.0-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">4f40cdfacff5e28ce711ba1f326891dcb3ee12ec7d4495325c34aaffdfe6a3d6</sum>
        </package>
        <package name="firefox-x11" version="128.9.0" release="2.el9_5" epoch="0" arch="s390x" src="firefox-128.9.0-2.el9_5.src.rpm">
          <filename>firefox-x11-128.9.0-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">e6431081994794e536dd549216ff4bd410e5217368565b8d8b22879f33801ab4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3617</id>
    <title>Important: gimp security update</title>
    <issued date="2025-04-07 00:00:00"/>
    <updated date="2025-04-07 14:05:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gimp security update</summary>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  

Security Fix(es):  

  * gimp: dds buffer overflow RCE (CVE-2023-44441)
  * gimp: PSD buffer overflow RCE (CVE-2023-44442)
  * gimp: psp integer overflow RCE (CVE-2023-44443)
  * gimp: psp off-by-one RCE (CVE-2023-44444)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3617" id="RHSA-2025:3617" type="rhsa" title="RHSA-2025:3617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44441" id="CVE-2023-44441" type="cve" title="CVE-2023-44441"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44442" id="CVE-2023-44442" type="cve" title="CVE-2023-44442"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44443" id="CVE-2023-44443" type="cve" title="CVE-2023-44443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44444" id="CVE-2023-44444" type="cve" title="CVE-2023-44444"/>
      <reference href="https://bugzilla.redhat.com/2249938" id="2249938" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249942" id="2249942" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249944" id="2249944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249946" id="2249946" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3617.html" id="ALSA-2025:3617" type="self" title="ALSA-2025:3617"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="gimp" version="2.99.8" release="4.el9_5" epoch="2" arch="s390x" src="gimp-2.99.8-4.el9_5.src.rpm">
          <filename>gimp-2.99.8-4.el9_5.s390x.rpm</filename>
          <sum type="sha256">49686d8f3cd96eabba6e2a70edea1f6a8a94d6ab812a2362bd1200e10eb2e87b</sum>
        </package>
        <package name="gimp-libs" version="2.99.8" release="4.el9_5" epoch="2" arch="s390x" src="gimp-2.99.8-4.el9_5.src.rpm">
          <filename>gimp-libs-2.99.8-4.el9_5.s390x.rpm</filename>
          <sum type="sha256">a9065f4182c54adb55c5a348f1a5e33d22de833ab20476e56d5b1b6dd35c2515</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3631</id>
    <title>Low: python3.12 security update</title>
    <issued date="2025-04-07 00:00:00"/>
    <updated date="2025-04-08 09:22:01"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: Uncontrolled CPU resource consumption when in http.cookies module (CVE-2024-7592)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3631" id="RHSA-2025:3631" type="rhsa" title="RHSA-2025:3631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7592" id="CVE-2024-7592" type="cve" title="CVE-2024-7592"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3631.html" id="ALSA-2025:3631" type="self" title="ALSA-2025:3631"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="python3.12-libs" version="3.12.5" release="2.el9_5.3" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.3.src.rpm">
          <filename>python3.12-libs-3.12.5-2.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">457c6dac0e6fd2c19d953c70b62af9b950b5c097f5d3717803c4633f964e4a80</sum>
        </package>
        <package name="python3.12" version="3.12.5" release="2.el9_5.3" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.3.src.rpm">
          <filename>python3.12-3.12.5-2.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">658bf4a3bbf2e2db90becdde282cdd531f32663d78c58c4d637cc6cf011fbc40</sum>
        </package>
        <package name="python3.12-devel" version="3.12.5" release="2.el9_5.3" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.3.src.rpm">
          <filename>python3.12-devel-3.12.5-2.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">6732b6892b11727821c631a456893946c931bd9d44e349813215569d30eb56a6</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.5" release="2.el9_5.3" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.3.src.rpm">
          <filename>python3.12-tkinter-3.12.5-2.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">e0e02eab203569d96ce9490b155e87a8ed3c5110ef0e83a39c8b19cf830aa3bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3634</id>
    <title>Low: python3.11 security update</title>
    <issued date="2025-04-07 00:00:00"/>
    <updated date="2025-04-08 09:24:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: Uncontrolled CPU resource consumption when in http.cookies module (CVE-2024-7592)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3634" id="RHSA-2025:3634" type="rhsa" title="RHSA-2025:3634"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7592" id="CVE-2024-7592" type="cve" title="CVE-2024-7592"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3634.html" id="ALSA-2025:3634" type="self" title="ALSA-2025:3634"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="python3.11" version="3.11.9" release="7.el9_5.3" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.3.src.rpm">
          <filename>python3.11-3.11.9-7.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">22f801946fb0be92004a74520d5dfbac4c4d0d217441f0f216952f15c6673bbd</sum>
        </package>
        <package name="python3.11-libs" version="3.11.9" release="7.el9_5.3" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.3.src.rpm">
          <filename>python3.11-libs-3.11.9-7.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">4a1c1df6ad825043f12046bf97aca33af6fcbaa80fedc92b6c318918389cc1d1</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.9" release="7.el9_5.3" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.3.src.rpm">
          <filename>python3.11-tkinter-3.11.9-7.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">d9c95cd61dc9fb6d84639aa286bccaed120389b8313d06638bf565a075b80584</sum>
        </package>
        <package name="python3.11-devel" version="3.11.9" release="7.el9_5.3" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.3.src.rpm">
          <filename>python3.11-devel-3.11.9-7.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">db356c177aa1893218701b8da6c8ce1b54f732d8067872aa83637f0392c8d1ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3645</id>
    <title>Moderate: tomcat security update</title>
    <issued date="2025-04-07 00:00:00"/>
    <updated date="2025-04-08 10:29:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.  

Security Fix(es):  

  * tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)
  * tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3645" id="RHSA-2025:3645" type="rhsa" title="RHSA-2025:3645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50379" id="CVE-2024-50379" type="cve" title="CVE-2024-50379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24813" id="CVE-2025-24813" type="cve" title="CVE-2025-24813"/>
      <reference href="https://bugzilla.redhat.com/2332817" id="2332817" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351129" id="2351129" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3645.html" id="ALSA-2025:3645" type="self" title="ALSA-2025:3645"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="tomcat-servlet-4.0-api" version="9.0.87" release="2.el9_5.1" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el9_5.1.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.87-2.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">729d9fbc08b043b7f408495a8c4e31143cddcef86f382900b746df29b1e93845</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.87" release="2.el9_5.1" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el9_5.1.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.87-2.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">79d5f8c42f520617044e5773b6665f862b66ebc476d0ab58f05c4056c355ca55</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.87" release="2.el9_5.1" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el9_5.1.src.rpm">
          <filename>tomcat-admin-webapps-9.0.87-2.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">8bb0639695bcd28987ad4137f5570be96942f2e9497acac6ed14dc1dbc1bac09</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.87" release="2.el9_5.1" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el9_5.1.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.87-2.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">95aa1c5351ece31f53442ce78dac002564770fd9748249534c060bb3669d79f8</sum>
        </package>
        <package name="tomcat-lib" version="9.0.87" release="2.el9_5.1" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el9_5.1.src.rpm">
          <filename>tomcat-lib-9.0.87-2.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">bf01263d71e29a5ed32248056bfd6293c60a73fda5a9393f9cb38bf18aa984ae</sum>
        </package>
        <package name="tomcat" version="9.0.87" release="2.el9_5.1" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el9_5.1.src.rpm">
          <filename>tomcat-9.0.87-2.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">ddd3e00b02bdd79ec60ddf015bc84916ca70641171ef7c77cd97b03484cbcb82</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.87" release="2.el9_5.1" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el9_5.1.src.rpm">
          <filename>tomcat-docs-webapp-9.0.87-2.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">f03f7aceb10d8eb675f094f375d2c231842873446c783170df1e3699c4f0b49d</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.87" release="2.el9_5.1" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el9_5.1.src.rpm">
          <filename>tomcat-webapps-9.0.87-2.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">fdb83b9e6370a484eba526ff08b0b8384e11c8654e28006300a8ba219191d33a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3713</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-04-08 00:00:00"/>
    <updated date="2025-04-09 08:21:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44192)
  * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-54467)
  * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2024-54551)
  * webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack (CVE-2025-24208)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24209)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-24216)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-30427)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3713" id="RHSA-2025:3713" type="rhsa" title="RHSA-2025:3713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44192" id="CVE-2024-44192" type="cve" title="CVE-2024-44192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54467" id="CVE-2024-54467" type="cve" title="CVE-2024-54467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54551" id="CVE-2024-54551" type="cve" title="CVE-2024-54551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24208" id="CVE-2025-24208" type="cve" title="CVE-2025-24208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24209" id="CVE-2025-24209" type="cve" title="CVE-2025-24209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24216" id="CVE-2025-24216" type="cve" title="CVE-2025-24216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30427" id="CVE-2025-30427" type="cve" title="CVE-2025-30427"/>
      <reference href="https://bugzilla.redhat.com/2353871" id="2353871" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2353872" id="2353872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357909" id="2357909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357910" id="2357910" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357911" id="2357911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357917" id="2357917" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357919" id="2357919" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3713.html" id="ALSA-2025:3713" type="self" title="ALSA-2025:3713"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="webkit2gtk3" version="2.48.1" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.48.1-1.el9_5.src.rpm">
          <filename>webkit2gtk3-2.48.1-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">1f33e2bd796aabf0ecb84249ffb063ca2ac256c03f4e953592a51946d39ad29d</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.48.1" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.48.1-1.el9_5.src.rpm">
          <filename>webkit2gtk3-devel-2.48.1-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">236f433ba9ab86ed1a7ad85a97b9f87272bfd7052b6b986be4fc7b814220b64a</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.48.1" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.48.1-1.el9_5.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.48.1-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">4625c145b3e114d29864895f1dda3ae6903591dd8e4c9df95daf1f7d3fb9b83c</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.48.1" release="1.el9_5" epoch="0" arch="s390x" src="webkit2gtk3-2.48.1-1.el9_5.src.rpm">
          <filename>webkit2gtk3-jsc-2.48.1-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">e7ff8f567b1f90999cf97459be849d5299ea4d558a903afaf7b7e0f3d7267a19</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3773</id>
    <title>Important: delve and golang security update</title>
    <issued date="2025-04-10 00:00:00"/>
    <updated date="2025-04-10 08:20:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>delve and golang security update</summary>
    <description>The Go Programming Language.  

Security Fix(es):  

  * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3773" id="RHSA-2025:3773" type="rhsa" title="RHSA-2025:3773"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3773.html" id="ALSA-2025:3773" type="self" title="ALSA-2025:3773"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="golang-misc" version="1.23.6" release="2.el9_5" epoch="0" arch="noarch" src="golang-1.23.6-2.el9_5.src.rpm">
          <filename>golang-misc-1.23.6-2.el9_5.noarch.rpm</filename>
          <sum type="sha256">15994156d65e498b48edce0a83f6fa539fd964b8c17c6bbd189dc36cf14a0f4b</sum>
        </package>
        <package name="golang" version="1.23.6" release="2.el9_5" epoch="0" arch="s390x" src="golang-1.23.6-2.el9_5.src.rpm">
          <filename>golang-1.23.6-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">3120dd9f68a13af1df981fda80c17d4abb934aaa444b2bccb91a3cb2add2433d</sum>
        </package>
        <package name="golang-tests" version="1.23.6" release="2.el9_5" epoch="0" arch="noarch" src="golang-1.23.6-2.el9_5.src.rpm">
          <filename>golang-tests-1.23.6-2.el9_5.noarch.rpm</filename>
          <sum type="sha256">8efc93285b11531f1481cc5986e5b4cd892a01b7595c1fb7d21198bd5bf388b2</sum>
        </package>
        <package name="golang-race" version="1.23.6" release="2.el9_5" epoch="0" arch="s390x" src="golang-1.23.6-2.el9_5.src.rpm">
          <filename>golang-race-1.23.6-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">9e9037ba5e6d86bd44f3ae2b1aced235fffaf771f599b9db70332927f41aa6d1</sum>
        </package>
        <package name="golang-bin" version="1.23.6" release="2.el9_5" epoch="0" arch="s390x" src="golang-1.23.6-2.el9_5.src.rpm">
          <filename>golang-bin-1.23.6-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">c6500db32b5f8c49efbf1bfdd1c41692dae8d6a52f4db60e70571c8d3292a14f</sum>
        </package>
        <package name="go-toolset" version="1.23.6" release="2.el9_5" epoch="0" arch="s390x" src="golang-1.23.6-2.el9_5.src.rpm">
          <filename>go-toolset-1.23.6-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">cf35be01e83a6f4e9a3b233bcb578e5525cce16f3814158a98fee05114542583</sum>
        </package>
        <package name="golang-src" version="1.23.6" release="2.el9_5" epoch="0" arch="noarch" src="golang-1.23.6-2.el9_5.src.rpm">
          <filename>golang-src-1.23.6-2.el9_5.noarch.rpm</filename>
          <sum type="sha256">e871ca30ed3abf4af1f8574f5b92738a5878ad2e8b54dffdbc9715a2ba9a7dd4</sum>
        </package>
        <package name="golang-docs" version="1.23.6" release="2.el9_5" epoch="0" arch="noarch" src="golang-1.23.6-2.el9_5.src.rpm">
          <filename>golang-docs-1.23.6-2.el9_5.noarch.rpm</filename>
          <sum type="sha256">ea7cc52ebdb704fd6d1a71b8bef45cb23b3c1d89c6b3a218fb425aa85a555057</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3833</id>
    <title>Important: gvisor-tap-vsock security update</title>
    <issued date="2025-04-14 00:00:00"/>
    <updated date="2025-04-15 14:12:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gvisor-tap-vsock security update</summary>
    <description>A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding.  

Security Fix(es):  

  * golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3833" id="RHSA-2025:3833" type="rhsa" title="RHSA-2025:3833"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22869" id="CVE-2025-22869" type="cve" title="CVE-2025-22869"/>
      <reference href="https://bugzilla.redhat.com/2348367" id="2348367" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3833.html" id="ALSA-2025:3833" type="self" title="ALSA-2025:3833"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="gvisor-tap-vsock" version="0.8.5" release="1.el9_5" epoch="6" arch="s390x" src="gvisor-tap-vsock-0.8.5-1.el9_5.src.rpm">
          <filename>gvisor-tap-vsock-0.8.5-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">9b2efd82d857b25fd7b1e4fcc78fdf4eb2a079a55679e86bbeaf4a5703c89659</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3845</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-04-22 08:16:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better TLS connection support (CVE-2025-21587)
  * JDK: Improve compiler transformations (CVE-2025-30691)
  * JDK: Enhance Buffered Image handling (CVE-2025-30698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3845" id="RHSA-2025:3845" type="rhsa" title="RHSA-2025:3845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21587" id="CVE-2025-21587" type="cve" title="CVE-2025-21587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30691" id="CVE-2025-30691" type="cve" title="CVE-2025-30691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30698" id="CVE-2025-30698" type="cve" title="CVE-2025-30698"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3845.html" id="ALSA-2025:3845" type="self" title="ALSA-2025:3845"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.452.b09" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.452.b09-2.el9.s390x.rpm</filename>
          <sum type="sha256">2bd5412bc0dd80aad645d2311d4343ed27af2cb198d868274115a105d6e54a70</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.452.b09" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.452.b09-2.el9.s390x.rpm</filename>
          <sum type="sha256">596b3687374d4d79faa0c44d8685d8fefd8b7648ab31d0476788b6fdbab48554</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.452.b09" release="2.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.452.b09-2.el9.noarch.rpm</filename>
          <sum type="sha256">5aae70336b95a3ce2b62fd90070d313f77ec051673846762fcbee3a435da2e3f</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.452.b09" release="2.el9" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.452.b09-2.el9.noarch.rpm</filename>
          <sum type="sha256">719d195031b98c6f1bf0113a57dbf7ecc25b912db67a3197174403bd3e9bd834</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.452.b09" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.452.b09-2.el9.s390x.rpm</filename>
          <sum type="sha256">7ae43602d580dfd1065bca97a1ba4bd8b14668563a5c02454619b64695910365</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.452.b09" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.452.b09-2.el9.s390x.rpm</filename>
          <sum type="sha256">8b669af870267ae5baac44208a211003650885a1a33b3c5553a5e327abeec282</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.452.b09" release="2.el9" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el9.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.452.b09-2.el9.s390x.rpm</filename>
          <sum type="sha256">cbda8fdf25554b0c469939fe2e9b661ab69035aff38dcf0d849a23f60102124d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3852</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-05-08 18:57:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better TLS connection support (CVE-2025-21587)
  * JDK: Improve compiler transformations (CVE-2025-30691)
  * JDK: Enhance Buffered Image handling (CVE-2025-30698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3852" id="RHSA-2025:3852" type="rhsa" title="RHSA-2025:3852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21587" id="CVE-2025-21587" type="cve" title="CVE-2025-21587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30691" id="CVE-2025-30691" type="cve" title="CVE-2025-30691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30698" id="CVE-2025-30698" type="cve" title="CVE-2025-30698"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3852.html" id="ALSA-2025:3852" type="self" title="ALSA-2025:3852"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">1b833734e165c9a296e41ce2b991435963dfaa8e88c9911e2228a921190c7b50</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">348369ae6582f481e290a12addb9f436e7d5be0f92714e59db07637348494481</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">3f367450cd29f3069dd482fe104073d3cbde7766a00e5b6c4c18811d4dc4ad84</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">48c3cdd3c7fae05bc0b459c677651dfcde85ca1595c49c81629b59f7df00d71b</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">90a6c53f110b77bad7fd3d23b721fab3f5789c33f69f5899bf68c4f340046a19</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">94c4917be95b785e6a74ce49e9a86a01baf8d89b8c779135f6246ba699356bba</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">bd3a5159d6010168d6b195938668255ab7df5615206c068fc978f70500e24c08</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">da94e35ce3786b7bed35364af918d0f7b8c6121763d5d6666007473f8b770bbc</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ee1e42ccca5d712f92f4d582fd0d4e2e1d569ba0492bfe436b37ece663ed1073</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3855</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-05-08 18:55:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better TLS connection support (CVE-2025-21587)
  * JDK: Improve compiler transformations (CVE-2025-30691)
  * JDK: Enhance Buffered Image handling (CVE-2025-30698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3855" id="RHSA-2025:3855" type="rhsa" title="RHSA-2025:3855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21587" id="CVE-2025-21587" type="cve" title="CVE-2025-21587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30691" id="CVE-2025-30691" type="cve" title="CVE-2025-30691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30698" id="CVE-2025-30698" type="cve" title="CVE-2025-30698"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3855.html" id="ALSA-2025:3855" type="self" title="ALSA-2025:3855"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">24d3dc068a84572910ae53eff6aa0156adb34795bcf50a81b60f8f31d9f8e157</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">2cbc2aaf1bf569c21ac1ed789f416317d59131eb0192ae2bcbb55f1b19981ff6</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">619fe290796de25af20d7aa7ba519d1537b65dd2eed2b6b6af1072da5c54e006</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">775ed5458cf04c0d2af8cdce8eabe3890de0ea1f64ab48b93fdad5e7b2855157</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a051bf78a1fd37916f2649683ec7555f24e25f6a2e49996bfb699a403ff5485d</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ac24aac635e17c81b730fc141c99942435896498fbc670dcc562f6bb9121f3a7</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c089b627750b0abcd8963f3a181f3eb3224334942c12788c1d1b652d23a8d5c6</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d7e55fdec28a9635ddb31c1828848ff5c3efd7afad86115b2916fba36b0b0b66</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">eaabda6311a7715912600bf5fefad96681806a3f2e7287fac72c51470970357a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3937</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-04-21 08:27:14"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (CVE-2024-53150)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3937" id="RHSA-2025:3937" type="rhsa" title="RHSA-2025:3937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53150" id="CVE-2024-53150" type="cve" title="CVE-2024-53150"/>
      <reference href="https://bugzilla.redhat.com/2333971" id="2333971" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3937.html" id="ALSA-2025:3937" type="self" title="ALSA-2025:3937"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="perf" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>perf-5.14.0-503.38.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">19ad65e2a4a4303daa2213b1d81ab838a3bef8cf5e5e053237c10f1b27777688</sum>
        </package>
        <package name="rv" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>rv-5.14.0-503.38.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">38e4450724c86a1cd0121674aabef9020ab445f64fa78c386fa72d67b9fe6474</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="noarch" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-doc-5.14.0-503.38.1.el9_5.noarch.rpm</filename>
          <sum type="sha256">426c12cb974a438d7ac3658c96a747eb7de56945b6f0936dd8c3e1b1e1654462</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>python3-perf-5.14.0-503.38.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">5b5e4602dc0ef30b79e66ee672c440c9db5756b9e1eff815f5732289b1e3253b</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-503.38.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">6449e5b38f34bf0653874c7c2f959da2ddb6d68f420b7a259c26f1699f331efb</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-devel-matched-5.14.0-503.38.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">65d1132ff05cebeeb7edd0a7e21c100b4859ecae02588aaade1c294b1192f35a</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-5.14.0-503.38.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">8886b72b6df3f769d05ca8d2a65f34b8f323ec412d1cb8284a38d3a3b0dc451f</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-headers-5.14.0-503.38.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">8b9c04c2d046d93f19690be0555d9584ceb162a6534e9e1ea9fdef81a57de015</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-503.38.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">940b4746db1249926fb2bd6b33fa0f33a123718c6b72a86ad64e6bf251d7ad4a</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-devel-5.14.0-503.38.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">a4d1fdadaf25ed5f7ff994b2c9cc0ff6a763f1514953f2c847aba908540cccbd</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-503.38.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">a65dec4fce0af17030f0f09771f4251aed01903b446d23aa2ca32fd805ec5918</sum>
        </package>
        <package name="rtla" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>rtla-5.14.0-503.38.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">e072c84ad633b7f51eda0f8a18be2f5e99439a334e138e180ead405db4982d01</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4025</id>
    <title>Important: libxslt security update</title>
    <issued date="2025-04-21 00:00:00"/>
    <updated date="2025-04-21 08:23:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxslt security update</summary>
    <description>libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.   

Security Fix(es):  

  * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4025" id="RHSA-2025:4025" type="rhsa" title="RHSA-2025:4025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-55549" id="CVE-2024-55549" type="cve" title="CVE-2024-55549"/>
      <reference href="https://bugzilla.redhat.com/2352484" id="2352484" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4025.html" id="ALSA-2025:4025" type="self" title="ALSA-2025:4025"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="libxslt-devel" version="1.1.34" release="9.el9_5.2" epoch="0" arch="s390x" src="libxslt-1.1.34-9.el9_5.2.src.rpm">
          <filename>libxslt-devel-1.1.34-9.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">2d04f40f2d18be8e55a82cf61018c3f9e16072770179399c7d87b437dac7c50b</sum>
        </package>
        <package name="libxslt" version="1.1.34" release="9.el9_5.2" epoch="0" arch="s390x" src="libxslt-1.1.34-9.el9_5.2.src.rpm">
          <filename>libxslt-1.1.34-9.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">7dc3ccd3226c98f5e78da81f1859c5d3ade84ff2af8a8b9e3046e34c38b58a0e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4169</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-04-24 00:00:00"/>
    <updated date="2025-04-25 11:06:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters (CVE-2025-3029)
  * firefox: thunderbird: Use-after-free triggered by XSLTProcessor (CVE-2025-3028)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 (CVE-2025-3030)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4169" id="RHSA-2025:4169" type="rhsa" title="RHSA-2025:4169"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3028" id="CVE-2025-3028" type="cve" title="CVE-2025-3028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3029" id="CVE-2025-3029" type="cve" title="CVE-2025-3029"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3030" id="CVE-2025-3030" type="cve" title="CVE-2025-3030"/>
      <reference href="https://bugzilla.redhat.com/2356556" id="2356556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356562" id="2356562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356563" id="2356563" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4169.html" id="ALSA-2025:4169" type="self" title="ALSA-2025:4169"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="thunderbird" version="128.9.0" release="2.el9_5.alma.1" epoch="0" arch="s390x" src="thunderbird-128.9.0-2.el9_5.alma.1.src.rpm">
          <filename>thunderbird-128.9.0-2.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">0033c6987dda85cfbf01d63a7e74a19c873097db2e50d353ad1b6b8c9aa47edb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4229</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-04-28 00:00:00"/>
    <updated date="2025-04-28 19:32:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * thunderbird: User Interface (UI) Misrepresentation of attachment URL (CVE-2025-3523)
  * thunderbird: Information Disclosure of /tmp directory listing (CVE-2025-2830)
  * thunderbird: Leak of hashed Window credentials via crafted attachment URL (CVE-2025-3522)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4229" id="RHSA-2025:4229" type="rhsa" title="RHSA-2025:4229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2830" id="CVE-2025-2830" type="cve" title="CVE-2025-2830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3522" id="CVE-2025-3522" type="cve" title="CVE-2025-3522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3523" id="CVE-2025-3523" type="cve" title="CVE-2025-3523"/>
      <reference href="https://bugzilla.redhat.com/2359786" id="2359786" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359789" id="2359789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359793" id="2359793" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4229.html" id="ALSA-2025:4229" type="self" title="ALSA-2025:4229"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="thunderbird" version="128.9.2" release="1.el9_5.alma.1" epoch="0" arch="s390x" src="thunderbird-128.9.2-1.el9_5.alma.1.src.rpm">
          <filename>thunderbird-128.9.2-1.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">136275cfbc69317abf03f9380c0f3e726c174086a4bae97c02f6028e40e85807</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4244</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-04-28 00:00:00"/>
    <updated date="2025-04-28 19:47:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: buffer overflow in the GNU C Library's assert() (CVE-2025-0395)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4244" id="RHSA-2025:4244" type="rhsa" title="RHSA-2025:4244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0395" id="CVE-2025-0395" type="cve" title="CVE-2025-0395"/>
      <reference href="https://bugzilla.redhat.com/2339460" id="2339460" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4244.html" id="ALSA-2025:4244" type="self" title="ALSA-2025:4244"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="glibc-doc" version="2.34" release="125.el9_5.8.alma.1" epoch="0" arch="noarch" src="glibc-2.34-125.el9_5.8.alma.1.src.rpm">
          <filename>glibc-doc-2.34-125.el9_5.8.alma.1.noarch.rpm</filename>
          <sum type="sha256">1f92177ee44e90eb47d1eb972273179aa8c388f9b77d0f3ce3eed51f72b7562c</sum>
        </package>
        <package name="glibc-locale-source" version="2.34" release="125.el9_5.8.alma.1" epoch="0" arch="s390x" src="glibc-2.34-125.el9_5.8.alma.1.src.rpm">
          <filename>glibc-locale-source-2.34-125.el9_5.8.alma.1.s390x.rpm</filename>
          <sum type="sha256">a8bd4e47c6e1a5aea0788df99a622377bedfe77fb261ccb2c3dfb05bb0764b4b</sum>
        </package>
        <package name="glibc-devel" version="2.34" release="125.el9_5.8.alma.1" epoch="0" arch="s390x" src="glibc-2.34-125.el9_5.8.alma.1.src.rpm">
          <filename>glibc-devel-2.34-125.el9_5.8.alma.1.s390x.rpm</filename>
          <sum type="sha256">b50fe1ffc31801e732afabad2f7a3630147306721d308a51dee4354ee907bda3</sum>
        </package>
        <package name="glibc-headers" version="2.34" release="125.el9_5.8.alma.1" epoch="0" arch="s390x" src="glibc-2.34-125.el9_5.8.alma.1.src.rpm">
          <filename>glibc-headers-2.34-125.el9_5.8.alma.1.s390x.rpm</filename>
          <sum type="sha256">d2188c627c579568192af0c25583b1bd442c39182a08c94391ccab2f727ecdf4</sum>
        </package>
        <package name="glibc-utils" version="2.34" release="125.el9_5.8.alma.1" epoch="0" arch="s390x" src="glibc-2.34-125.el9_5.8.alma.1.src.rpm">
          <filename>glibc-utils-2.34-125.el9_5.8.alma.1.s390x.rpm</filename>
          <sum type="sha256">d7096ab5e69a041ac76ef173f4cffdf92475e38886ecb348215c4d567c4c5997</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4263</id>
    <title>Moderate: php:8.1 security update</title>
    <issued date="2025-04-28 00:00:00"/>
    <updated date="2025-04-29 07:32:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:8.1 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929)
  * php: Single byte overread with convert.quoted-printable-decode filter (CVE-2024-11233)
  * php: Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVE-2024-11234)
  * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)
  * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)
  * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)
  * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)
  * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4263" id="RHSA-2025:4263" type="rhsa" title="RHSA-2025:4263"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11233" id="CVE-2024-11233" type="cve" title="CVE-2024-11233"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11234" id="CVE-2024-11234" type="cve" title="CVE-2024-11234"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8929" id="CVE-2024-8929" type="cve" title="CVE-2024-8929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1217" id="CVE-2025-1217" type="cve" title="CVE-2025-1217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1219" id="CVE-2025-1219" type="cve" title="CVE-2025-1219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1734" id="CVE-2025-1734" type="cve" title="CVE-2025-1734"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1736" id="CVE-2025-1736" type="cve" title="CVE-2025-1736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1861" id="CVE-2025-1861" type="cve" title="CVE-2025-1861"/>
      <reference href="https://bugzilla.redhat.com/2327960" id="2327960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328521" id="2328521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328523" id="2328523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2355917" id="2355917" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356041" id="2356041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356042" id="2356042" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356043" id="2356043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356046" id="2356046" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4263.html" id="ALSA-2025:4263" type="self" title="ALSA-2025:4263"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <module name="php" stream="8.1" version="9050020250428193106" context="8cf767d6" arch="s390x"/>
        <package name="php-devel" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-devel-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">10c4bd4736a8560347925ca5a89e10f1d353a6e1b74f5bc26499aca4af292377</sum>
        </package>
        <package name="php-intl" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-intl-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">1afb5eb6cc9bad833a66896e23aceec1b068248490353ddc760c4407fc3e549a</sum>
        </package>
        <package name="php-mbstring" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-mbstring-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">1f0cbd4c87d3df6928afdfb4099172344f9c7860c28fe36c06f795b1fd34b59a</sum>
        </package>
        <package name="php-bcmath" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-bcmath-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">34b66f3cc49c998b3a51bd10a9e038735cdf6331c3ff5e7e45d963a4080fbcab</sum>
        </package>
        <package name="php-mysqlnd" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-mysqlnd-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">475d241486c15415492f9d66a66f05fefc4b6668bb1c8aa5ce0dc8bcddf7e0fa</sum>
        </package>
        <package name="php-pdo" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-pdo-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">4f10ec9792ab052e135e1545ab3f8b12a7228dd552555d9fa9cad37e26aae9c7</sum>
        </package>
        <package name="php-snmp" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-snmp-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">5f7ffe61fd55d72e914ccb879dff6d6d5aed74a4391e533fee30dbeff056a390</sum>
        </package>
        <package name="php-pecl-zip" version="1.20.1" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-zip-1.20.1-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">6c89933d8e8153ed39764877e9c07501f556ba5057a9695bfefcfc75649f5734</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.21" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">74c41c08148fce005bb18c75bcfafc1e739cc84b6cac297b5ef955172eff0b69</sum>
        </package>
        <package name="php-common" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-common-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">839402ed14c8189e75f6f9de5bd3679be7e34980da2c8e7f78a9b8331481acfd</sum>
        </package>
        <package name="php-ldap" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-ldap-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">907326429f4d360088f7bf5fdc21f1ab5c23423bf062b627f1c8314655edfd35</sum>
        </package>
        <package name="php-ffi" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-ffi-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">93dc4ba9f6c417d87f6e4546b4d92abaa87b2fb80ad34e6a6feaa862571a6140</sum>
        </package>
        <package name="php-soap" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-soap-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">a23260fdceb7c8620d28e067a3ba4bf84dcd841018bcd3385f767f924bb45054</sum>
        </package>
        <package name="php-enchant" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-enchant-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">a27f33a1452ae6f17099e029e039529ce2f2c1cc5249faa15941c75e82ef82dc</sum>
        </package>
        <package name="php-odbc" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-odbc-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">a6d2cd404047887358b184a8f3d2ca535c9f39401b2d3662adc444b4696d7e2e</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.21" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">bd0093fac304470cea776e43f28256fbfa317c192bb6bd8762cc1ec00db6f9e1</sum>
        </package>
        <package name="php-process" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-process-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">bd1a09c588816a6afc1cc753d4d1fa2f28eb0f3770c0e70ca2f3a21a0467f19e</sum>
        </package>
        <package name="php-cli" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-cli-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">bfcc949a2aa4755ca5bd9f6e6edfd8590d2a6dfab218354fd57e1a0d60bf0c1d</sum>
        </package>
        <package name="php-dba" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-dba-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">c1d25ee914749cf83cb8703b40056f7bf0ba6ef1d394ada3526677b77c5581ce</sum>
        </package>
        <package name="php-pgsql" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-pgsql-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">d461ac7c0dcc9373552208df5f9d46d3a0cf0b642282946e4afee96cc26044fc</sum>
        </package>
        <package name="php" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">d6e184127425a1dda60bf0b726cf76ab5f35927aaebeba2515030177622f47b9</sum>
        </package>
        <package name="php-xml" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-xml-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">dd328c81f2d9262b0448fb080885c03147b8dcce1f510adda7011e49b6aecf8a</sum>
        </package>
        <package name="php-embedded" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-embedded-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">ddd00637255eae0d06650169d30bf080048bb1e71b4b1a4a5190010433992c43</sum>
        </package>
        <package name="php-gd" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-gd-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">e190567904117d91e7a444f262f17877a6c8197ba67320238065fb9e66aa1aaa</sum>
        </package>
        <package name="apcu-panel" version="5.1.21" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.21-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>apcu-panel-5.1.21-1.module_el9.1.0+15+94ba28e4.noarch.rpm</filename>
          <sum type="sha256">e27a86b0afd898fe4401096cadb01c89fd2b39150e0cbfb4ebd82bc9822a3cbf</sum>
        </package>
        <package name="php-opcache" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-opcache-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">e42796bb91e1a8ea6700310e1f5d0c5b2615d36f84186967a99189f94f7b9619</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.1.4" release="1.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-xdebug3-3.1.4-1.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">e97fdc0e54c4a5d2084a375f0ff31f551c9dc8c1f4c2012f2e453b1a031a1328</sum>
        </package>
        <package name="php-dbg" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-dbg-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">f86f55b9c0430d668c6d7f42a8f00c553ba7d9300ba28ceaa0393a33379a6f27</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="4.module_el9.1.0+15+94ba28e4" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-4.module_el9.1.0+15+94ba28e4.src.rpm">
          <filename>php-pecl-rrd-2.0.3-4.module_el9.1.0+15+94ba28e4.s390x.rpm</filename>
          <sum type="sha256">fa41ac765cb61c3ac39608e29ace6064489a59257504df4cac926a261c7d392b</sum>
        </package>
        <package name="php-fpm" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-fpm-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">fb30ce4e4ad82811f2d4306058940a7a7260251b1db9e800352311242241bd3f</sum>
        </package>
        <package name="php-gmp" version="8.1.32" release="1.module_el9.5.0+156+9f1cd3fd" epoch="0" arch="s390x" src="php-8.1.32-1.module_el9.5.0+156+9f1cd3fd.src.rpm">
          <filename>php-gmp-8.1.32-1.module_el9.5.0+156+9f1cd3fd.s390x.rpm</filename>
          <sum type="sha256">fe4c703d5f3e66e44a58bd46ae094bb129fcfd6850f53b7e886ffbb14614f73e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4443</id>
    <title>Important: firefox security update</title>
    <issued date="2025-05-05 00:00:00"/>
    <updated date="2025-05-12 11:08:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Privilege escalation in Firefox Updater (CVE-2025-2817)
  * firefox: thunderbird: Unsafe attribute access during XPath parsing (CVE-2025-4087)
  * firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames (CVE-2025-4083)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 (CVE-2025-4091)
  * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 (CVE-2025-4093)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4443" id="RHSA-2025:4443" type="rhsa" title="RHSA-2025:4443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2817" id="CVE-2025-2817" type="cve" title="CVE-2025-2817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4083" id="CVE-2025-4083" type="cve" title="CVE-2025-4083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4087" id="CVE-2025-4087" type="cve" title="CVE-2025-4087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4091" id="CVE-2025-4091" type="cve" title="CVE-2025-4091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4093" id="CVE-2025-4093" type="cve" title="CVE-2025-4093"/>
      <reference href="https://bugzilla.redhat.com/2362902" id="2362902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362904" id="2362904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362907" id="2362907" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362912" id="2362912" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362915" id="2362915" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4443.html" id="ALSA-2025:4443" type="self" title="ALSA-2025:4443"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="firefox" version="128.10.0" release="1.el9_5.alma.1" epoch="0" arch="s390x" src="firefox-128.10.0-1.el9_5.alma.1.src.rpm">
          <filename>firefox-128.10.0-1.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">4e8a8c19047a2d4f377a5a7f55afee2f09f5a2a9ee6d75f69eb49e1a96906744</sum>
        </package>
        <package name="firefox-x11" version="128.10.0" release="1.el9_5.alma.1" epoch="0" arch="s390x" src="firefox-128.10.0-1.el9_5.alma.1.src.rpm">
          <filename>firefox-x11-128.10.0-1.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">681433102f47df91e5e7a8e4840e74e3a1f53a33d2d478d6e24356c23069f30b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4460</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-05-05 00:00:00"/>
    <updated date="2025-05-12 11:09:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Privilege escalation in Firefox Updater (CVE-2025-2817)
  * firefox: thunderbird: Unsafe attribute access during XPath parsing (CVE-2025-4087)
  * firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames (CVE-2025-4083)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 (CVE-2025-4091)
  * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 (CVE-2025-4093)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4460" id="RHSA-2025:4460" type="rhsa" title="RHSA-2025:4460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2817" id="CVE-2025-2817" type="cve" title="CVE-2025-2817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4083" id="CVE-2025-4083" type="cve" title="CVE-2025-4083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4087" id="CVE-2025-4087" type="cve" title="CVE-2025-4087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4091" id="CVE-2025-4091" type="cve" title="CVE-2025-4091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4093" id="CVE-2025-4093" type="cve" title="CVE-2025-4093"/>
      <reference href="https://bugzilla.redhat.com/2362902" id="2362902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362904" id="2362904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362907" id="2362907" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362912" id="2362912" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362915" id="2362915" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4460.html" id="ALSA-2025:4460" type="self" title="ALSA-2025:4460"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="thunderbird" version="128.10.0" release="1.el9_5.alma.1" epoch="0" arch="s390x" src="thunderbird-128.10.0-1.el9_5.alma.1.src.rpm">
          <filename>thunderbird-128.10.0-1.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">729b08a993ebd1bc5048caa85f941793542a1fdbb0013d1713fbb6fcb7e1614c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4488</id>
    <title>Moderate: ruby:3.1 security update</title>
    <issued date="2025-05-06 00:00:00"/>
    <updated date="2025-05-06 14:32:01"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.1 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * rexml: DoS vulnerability in REXML (CVE-2024-39908)
  * rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, &gt;] and ]&gt; (CVE-2024-41123)
  * rexml: DoS vulnerability in REXML (CVE-2024-41946)
  * rexml: DoS vulnerability in REXML (CVE-2024-43398)
  * CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220)
  * CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219)
  * uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4488" id="RHSA-2025:4488" type="rhsa" title="RHSA-2025:4488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39908" id="CVE-2024-39908" type="cve" title="CVE-2024-39908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41123" id="CVE-2024-41123" type="cve" title="CVE-2024-41123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41946" id="CVE-2024-41946" type="cve" title="CVE-2024-41946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43398" id="CVE-2024-43398" type="cve" title="CVE-2024-43398"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27219" id="CVE-2025-27219" type="cve" title="CVE-2025-27219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27220" id="CVE-2025-27220" type="cve" title="CVE-2025-27220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27221" id="CVE-2025-27221" type="cve" title="CVE-2025-27221"/>
      <reference href="https://bugzilla.redhat.com/2298243" id="2298243" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302268" id="2302268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302272" id="2302272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307297" id="2307297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349696" id="2349696" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349699" id="2349699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349700" id="2349700" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4488.html" id="ALSA-2025:4488" type="self" title="ALSA-2025:4488"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="rubygem-mysql2-doc" version="0.5.4" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.4-1.module_el9.1.0+8+503f6fbd.noarch.rpm</filename>
          <sum type="sha256">47f8869c8adfe2b7eee506473440af3abe2bb171cf60cda4d0dec05db0bc3fb8</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.4" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-mysql2-0.5.4-1.module_el9.1.0+8+503f6fbd.s390x.rpm</filename>
          <sum type="sha256">49b1f8d15c4626c94dbdf369d69aa871b2e1b4909ae4718089f41d7de50396ee</sum>
        </package>
        <package name="rubygem-pg" version="1.3.5" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="s390x" src="rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.s390x.rpm</filename>
          <sum type="sha256">81af584c5f98cbff30e7733f802c0711cdfb921b4fc268dc21e6e002f4c9a292</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.3.5" release="1.module_el9.1.0+8+503f6fbd" epoch="0" arch="noarch" src="rubygem-pg-1.3.5-1.module_el9.1.0+8+503f6fbd.src.rpm">
          <filename>rubygem-pg-doc-1.3.5-1.module_el9.1.0+8+503f6fbd.noarch.rpm</filename>
          <sum type="sha256">c24489067c5c62f3bb8edd8f47b01171f766eaeb0e96991878c51e5ae4b1b3e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4491</id>
    <title>Moderate: 389-ds-base security update</title>
    <issued date="2025-05-06 00:00:00"/>
    <updated date="2025-05-07 16:35:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.  

Security Fix(es):  

  * 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4491" id="RHSA-2025:4491" type="rhsa" title="RHSA-2025:4491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2487" id="CVE-2025-2487" type="cve" title="CVE-2025-2487"/>
      <reference href="https://bugzilla.redhat.com/2353071" id="2353071" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4491.html" id="ALSA-2025:4491" type="self" title="ALSA-2025:4491"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="python3-lib389" version="2.5.2" release="9.el9_5" epoch="0" arch="noarch" src="389-ds-base-2.5.2-9.el9_5.src.rpm">
          <filename>python3-lib389-2.5.2-9.el9_5.noarch.rpm</filename>
          <sum type="sha256">19122786eab2f4bca09f45e362f1a09a08f2449a984d02e9a70607691dd520c6</sum>
        </package>
        <package name="389-ds-base" version="2.5.2" release="9.el9_5" epoch="0" arch="s390x" src="389-ds-base-2.5.2-9.el9_5.src.rpm">
          <filename>389-ds-base-2.5.2-9.el9_5.s390x.rpm</filename>
          <sum type="sha256">552e294e1881fd6fecfc0842b89634e4db2103c1cba9893ca07cc075d112a0ac</sum>
        </package>
        <package name="389-ds-base-snmp" version="2.5.2" release="9.el9_5" epoch="0" arch="s390x" src="389-ds-base-2.5.2-9.el9_5.src.rpm">
          <filename>389-ds-base-snmp-2.5.2-9.el9_5.s390x.rpm</filename>
          <sum type="sha256">584e6fd6b418bf51f240ca2e1b1d0fe62ebadb38d8eeff6d6c962615194879bf</sum>
        </package>
        <package name="389-ds-base-libs" version="2.5.2" release="9.el9_5" epoch="0" arch="s390x" src="389-ds-base-2.5.2-9.el9_5.src.rpm">
          <filename>389-ds-base-libs-2.5.2-9.el9_5.s390x.rpm</filename>
          <sum type="sha256">efb41bebf1f1582fb0a92b5dd6c89c80e05e2c1af5f57ade734630ad8755ff18</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4669</id>
    <title>Important: osbuild-composer security update</title>
    <issued date="2025-05-07 00:00:00"/>
    <updated date="2025-05-12 11:19:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4669" id="RHSA-2025:4669" type="rhsa" title="RHSA-2025:4669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30204" id="CVE-2025-30204" type="cve" title="CVE-2025-30204"/>
      <reference href="https://bugzilla.redhat.com/2354195" id="2354195" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4669.html" id="ALSA-2025:4669" type="self" title="ALSA-2025:4669"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="osbuild-composer" version="118.2" release="1.el9_5.alma.1" epoch="0" arch="s390x" src="osbuild-composer-118.2-1.el9_5.alma.1.src.rpm">
          <filename>osbuild-composer-118.2-1.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">2f24325cee471b9a417a98d5470cc8f7fa30cf940c1d149d7d5e8913fd08c494</sum>
        </package>
        <package name="osbuild-composer-core" version="118.2" release="1.el9_5.alma.1" epoch="0" arch="s390x" src="osbuild-composer-118.2-1.el9_5.alma.1.src.rpm">
          <filename>osbuild-composer-core-118.2-1.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">a0220e1f7a98a9f09cbb4dd2d1399cc74104548c887c1d611d80c9174c01c510</sum>
        </package>
        <package name="osbuild-composer-worker" version="118.2" release="1.el9_5.alma.1" epoch="0" arch="s390x" src="osbuild-composer-118.2-1.el9_5.alma.1.src.rpm">
          <filename>osbuild-composer-worker-118.2-1.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">ee673c3d365bce22bdfa4b6d96b6a21a9b2f551f43b219e6cc02d55796c649aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4787</id>
    <title>Moderate: emacs security update</title>
    <issued date="2025-05-12 00:00:00"/>
    <updated date="2025-05-12 08:20:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>emacs security update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.  

Security Fix(es):  

  * emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4787" id="RHSA-2025:4787" type="rhsa" title="RHSA-2025:4787"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53920" id="CVE-2024-53920" type="cve" title="CVE-2024-53920"/>
      <reference href="https://bugzilla.redhat.com/2329161" id="2329161" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4787.html" id="ALSA-2025:4787" type="self" title="ALSA-2025:4787"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_5_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_5_default</name>
        <package name="emacs-common" version="27.2" release="11.el9_5.2" epoch="1" arch="s390x" src="emacs-27.2-11.el9_5.2.src.rpm">
          <filename>emacs-common-27.2-11.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">57abcd8a8d1e3480f88af6e6bbd8ecfa8e24081089d22b8f97aa871e3ad81723</sum>
        </package>
        <package name="emacs-lucid" version="27.2" release="11.el9_5.2" epoch="1" arch="s390x" src="emacs-27.2-11.el9_5.2.src.rpm">
          <filename>emacs-lucid-27.2-11.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">65d2823a42b488fe27b0edbfd5c89a38d8935eb174bb355720a5bf896d68642f</sum>
        </package>
        <package name="emacs" version="27.2" release="11.el9_5.2" epoch="1" arch="s390x" src="emacs-27.2-11.el9_5.2.src.rpm">
          <filename>emacs-27.2-11.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">a2c93138dfc8fc4dc61b3896ce031146be2a7d32c3a2e7a43af202e889f5f5ef</sum>
        </package>
        <package name="emacs-filesystem" version="27.2" release="11.el9_5.2" epoch="1" arch="noarch" src="emacs-27.2-11.el9_5.2.src.rpm">
          <filename>emacs-filesystem-27.2-11.el9_5.2.noarch.rpm</filename>
          <sum type="sha256">c66aec7a35f086f4f8935f52262d21e1479526dc760c4bef3eaff0476b4ea81a</sum>
        </package>
        <package name="emacs-nox" version="27.2" release="11.el9_5.2" epoch="1" arch="s390x" src="emacs-27.2-11.el9_5.2.src.rpm">
          <filename>emacs-nox-27.2-11.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">e7ef24d327cd15df48468cd058bfb9236ec458ec106594d17b2ada7402e29ce7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:6977</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:51:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:6977" id="RHSA-2025:6977" type="rhsa" title="RHSA-2025:6977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938"/>
      <reference href="https://bugzilla.redhat.com/2343237" id="2343237" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-6977.html" id="ALSA-2025:6977" type="self" title="ALSA-2025:6977"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python-unversioned-command" version="3.9.21" release="2.el9" epoch="0" arch="noarch" src="python3.9-3.9.21-2.el9.src.rpm">
          <filename>python-unversioned-command-3.9.21-2.el9.noarch.rpm</filename>
          <sum type="sha256">16f608eb291f8dad2090c7c90b4e9aaaac867afdf3aac0b96e425b4be24c9368</sum>
        </package>
        <package name="python3-tkinter" version="3.9.21" release="2.el9" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9.src.rpm">
          <filename>python3-tkinter-3.9.21-2.el9.s390x.rpm</filename>
          <sum type="sha256">4fa26c158cc3a79e3025f10211eaa942245910151b849b6a9f1518c743822b39</sum>
        </package>
        <package name="python3-devel" version="3.9.21" release="2.el9" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9.src.rpm">
          <filename>python3-devel-3.9.21-2.el9.s390x.rpm</filename>
          <sum type="sha256">89bb8725f0d7df69f9b79f38b0173a8a6f738591e2ef77b5b51689d2d55e3782</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:6993</id>
    <title>Moderate: openssh security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-06-05 17:03:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  

Security Fix(es):  

  * openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled (CVE-2025-26465)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:6993" id="RHSA-2025:6993" type="rhsa" title="RHSA-2025:6993"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26465" id="CVE-2025-26465" type="cve" title="CVE-2025-26465"/>
      <reference href="https://bugzilla.redhat.com/2344780" id="2344780" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-6993.html" id="ALSA-2025:6993" type="self" title="ALSA-2025:6993"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="openssh-askpass" version="8.7p1" release="45.el9" epoch="0" arch="s390x" src="openssh-8.7p1-45.el9.src.rpm">
          <filename>openssh-askpass-8.7p1-45.el9.s390x.rpm</filename>
          <sum type="sha256">04251f93248498b52ad23997c42efc88b7462bf76fc143ec504e75c87c70c4b2</sum>
        </package>
        <package name="pam_ssh_agent_auth" version="0.10.4" release="5.45.el9" epoch="0" arch="s390x" src="openssh-8.7p1-45.el9.src.rpm">
          <filename>pam_ssh_agent_auth-0.10.4-5.45.el9.s390x.rpm</filename>
          <sum type="sha256">bda81030ed6b55b6ca8cc88243fb477eda9d3a5bd3a2d861d20e77b146425a12</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7049</id>
    <title>Moderate: python-requests security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:46:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-requests security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * requests: subsequent requests to the same host ignore cert verification (CVE-2024-35195)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7049" id="RHSA-2025:7049" type="rhsa" title="RHSA-2025:7049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35195" id="CVE-2024-35195" type="cve" title="CVE-2024-35195"/>
      <reference href="https://bugzilla.redhat.com/2282114" id="2282114" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7049.html" id="ALSA-2025:7049" type="self" title="ALSA-2025:7049"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3-requests+security" version="2.25.1" release="9.el9" epoch="0" arch="noarch" src="python-requests-2.25.1-9.el9.src.rpm">
          <filename>python3-requests+security-2.25.1-9.el9.noarch.rpm</filename>
          <sum type="sha256">39fdf07a55cb1155bff376088e22972d43c1fe701ed60ad845a799f7c9675768</sum>
        </package>
        <package name="python3-requests+socks" version="2.25.1" release="9.el9" epoch="0" arch="noarch" src="python-requests-2.25.1-9.el9.src.rpm">
          <filename>python3-requests+socks-2.25.1-9.el9.noarch.rpm</filename>
          <sum type="sha256">b63ae6449bd0d7789b885759466579381430772b987ded7c7423ddcc830c333b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7050</id>
    <title>Moderate: rsync security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:44:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rsync security update</summary>
    <description>The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.  

Security Fix(es):  

  * rsync: Path traversal vulnerability in rsync (CVE-2024-12087)
  * rsync: --safe-links option bypass leads to path traversal (CVE-2024-12088)
  * rsync: Race Condition in rsync Handling Symbolic Links (CVE-2024-12747)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7050" id="RHSA-2025:7050" type="rhsa" title="RHSA-2025:7050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12087" id="CVE-2024-12087" type="cve" title="CVE-2024-12087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12088" id="CVE-2024-12088" type="cve" title="CVE-2024-12088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12747" id="CVE-2024-12747" type="cve" title="CVE-2024-12747"/>
      <reference href="https://bugzilla.redhat.com/2330672" id="2330672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2330676" id="2330676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2332968" id="2332968" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7050.html" id="ALSA-2025:7050" type="self" title="ALSA-2025:7050"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="rsync-daemon" version="3.2.5" release="3.el9" epoch="0" arch="noarch" src="rsync-3.2.5-3.el9.src.rpm">
          <filename>rsync-daemon-3.2.5-3.el9.noarch.rpm</filename>
          <sum type="sha256">2fd37e5ea7af580d528c37cf5f398bcb366a912424c5a39416bfd18707881111</sum>
        </package>
        <package name="rsync-rrsync" version="3.2.5" release="3.el9" epoch="0" arch="noarch" src="rsync-3.2.5-3.el9.src.rpm">
          <filename>rsync-rrsync-3.2.5-3.el9.noarch.rpm</filename>
          <sum type="sha256">cbe2d5773743f194e3fb7118ac001560fb1c18e7bb2f3058c13086b829e9375b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7067</id>
    <title>Moderate: krb5 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:40:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).  

Security Fix(es):  

  * krb5: overflow when calculating ulog block size (CVE-2025-24528)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7067" id="RHSA-2025:7067" type="rhsa" title="RHSA-2025:7067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24528" id="CVE-2025-24528" type="cve" title="CVE-2025-24528"/>
      <reference href="https://bugzilla.redhat.com/2342796" id="2342796" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7067.html" id="ALSA-2025:7067" type="self" title="ALSA-2025:7067"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="krb5-devel" version="1.21.1" release="6.el9" epoch="0" arch="s390x" src="krb5-1.21.1-6.el9.src.rpm">
          <filename>krb5-devel-1.21.1-6.el9.s390x.rpm</filename>
          <sum type="sha256">916b7958535976690f50232077ce0b8b8961c627f64e7603063d6edd720d3a49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7076</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:39:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.  

Security Fix(es):  

  * gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS (CVE-2024-12243)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7076" id="RHSA-2025:7076" type="rhsa" title="RHSA-2025:7076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12243" id="CVE-2024-12243" type="cve" title="CVE-2024-12243"/>
      <reference href="https://bugzilla.redhat.com/2344615" id="2344615" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7076.html" id="ALSA-2025:7076" type="self" title="ALSA-2025:7076"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="gnutls-utils" version="3.8.3" release="6.el9" epoch="0" arch="s390x" src="gnutls-3.8.3-6.el9.src.rpm">
          <filename>gnutls-utils-3.8.3-6.el9.s390x.rpm</filename>
          <sum type="sha256">3183b336fbc51272251235c517a1f15a93f518757f791e455530963447619f42</sum>
        </package>
        <package name="gnutls-dane" version="3.8.3" release="6.el9" epoch="0" arch="s390x" src="gnutls-3.8.3-6.el9.src.rpm">
          <filename>gnutls-dane-3.8.3-6.el9.s390x.rpm</filename>
          <sum type="sha256">454def30075641f4d0e0afcd087c927f445abbacf1c119b8092ba8a5c38a8a4d</sum>
        </package>
        <package name="gnutls-c++" version="3.8.3" release="6.el9" epoch="0" arch="s390x" src="gnutls-3.8.3-6.el9.src.rpm">
          <filename>gnutls-c++-3.8.3-6.el9.s390x.rpm</filename>
          <sum type="sha256">969840d5eeb1ce22f5285f06816ff4b2f23e495394f1b0adac8eaa3fb755bffc</sum>
        </package>
        <package name="gnutls-devel" version="3.8.3" release="6.el9" epoch="0" arch="s390x" src="gnutls-3.8.3-6.el9.src.rpm">
          <filename>gnutls-devel-3.8.3-6.el9.s390x.rpm</filename>
          <sum type="sha256">ad63b8ca4b85c3e1a421e9cdadfa1dd6525c3f89b211af7cff3c840adeeabcb0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7077</id>
    <title>Moderate: libtasn1 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:37:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtasn1 security update</summary>
    <description>A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.  

Security Fix(es):  

  * libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS (CVE-2024-12133)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7077" id="RHSA-2025:7077" type="rhsa" title="RHSA-2025:7077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12133" id="CVE-2024-12133" type="cve" title="CVE-2024-12133"/>
      <reference href="https://bugzilla.redhat.com/2344611" id="2344611" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7077.html" id="ALSA-2025:7077" type="self" title="ALSA-2025:7077"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libtasn1-devel" version="4.16.0" release="9.el9" epoch="0" arch="s390x" src="libtasn1-4.16.0-9.el9.src.rpm">
          <filename>libtasn1-devel-4.16.0-9.el9.s390x.rpm</filename>
          <sum type="sha256">231f8bce32557c76f057a60d9896dbd479d6b3b78d6b65f06e46d17127a202d4</sum>
        </package>
        <package name="libtasn1-tools" version="4.16.0" release="9.el9" epoch="0" arch="s390x" src="libtasn1-4.16.0-9.el9.src.rpm">
          <filename>libtasn1-tools-4.16.0-9.el9.s390x.rpm</filename>
          <sum type="sha256">741ade8a4fe72e840aa4a736037230db7fdc8ca9cef71960f54ec3b54af17e06</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7094</id>
    <title>Moderate: aardvark-dns security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:33:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>aardvark-dns security update</summary>
    <description>Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in `src/backend/mod.rs`.  

Security Fix(es):  

  * containers/aardvark-dns: TCP Query Handling Flaw in Aardvark-dns Leading to Denial of Service (CVE-2024-8418)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7094" id="RHSA-2025:7094" type="rhsa" title="RHSA-2025:7094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8418" id="CVE-2024-8418" type="cve" title="CVE-2024-8418"/>
      <reference href="https://bugzilla.redhat.com/2309683" id="2309683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7094.html" id="ALSA-2025:7094" type="self" title="ALSA-2025:7094"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="aardvark-dns" version="1.14.0" release="1.el9" epoch="2" arch="s390x" src="aardvark-dns-1.14.0-1.el9.src.rpm">
          <filename>aardvark-dns-1.14.0-1.el9.s390x.rpm</filename>
          <sum type="sha256">d245444a7d9b98d46ec647a764b738c0c25a2ff4c6df0ca82dddc9ec260561b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7107</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:35:26"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7107" id="RHSA-2025:7107" type="rhsa" title="RHSA-2025:7107"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938"/>
      <reference href="https://bugzilla.redhat.com/2343237" id="2343237" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7107.html" id="ALSA-2025:7107" type="self" title="ALSA-2025:7107"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3.12-tkinter" version="3.12.9" release="1.el9" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9.src.rpm">
          <filename>python3.12-tkinter-3.12.9-1.el9.s390x.rpm</filename>
          <sum type="sha256">18dd0a9c78ed9831c5377f1c8d8a2989d589d9632cbe752a11c3d492945e5973</sum>
        </package>
        <package name="python3.12-devel" version="3.12.9" release="1.el9" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9.src.rpm">
          <filename>python3.12-devel-3.12.9-1.el9.s390x.rpm</filename>
          <sum type="sha256">a144a1ac11cffee90e0c00cf5ea9d6ffaff957cafe985d653b8e84c6b093a9b9</sum>
        </package>
        <package name="python3.12-libs" version="3.12.9" release="1.el9" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9.src.rpm">
          <filename>python3.12-libs-3.12.9-1.el9.s390x.rpm</filename>
          <sum type="sha256">eaa2a09b0b5cb3f01f1da5695d9260295cdf6f739e4c48ec2dfb0950233800e5</sum>
        </package>
        <package name="python3.12" version="3.12.9" release="1.el9" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9.src.rpm">
          <filename>python3.12-3.12.9-1.el9.s390x.rpm</filename>
          <sum type="sha256">ef9a395ecf8eded4eba9c887bba8470b6672ceeface2a94a09f341befa4257a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7109</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:31:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7109" id="RHSA-2025:7109" type="rhsa" title="RHSA-2025:7109"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938"/>
      <reference href="https://bugzilla.redhat.com/2343237" id="2343237" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7109.html" id="ALSA-2025:7109" type="self" title="ALSA-2025:7109"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3.11" version="3.11.11" release="2.el9" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9.src.rpm">
          <filename>python3.11-3.11.11-2.el9.s390x.rpm</filename>
          <sum type="sha256">5fd238c20cafeedb9da56759b7d56fdcc12c930caee0c8e5d0b0fc8034f75c10</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.11" release="2.el9" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9.src.rpm">
          <filename>python3.11-tkinter-3.11.11-2.el9.s390x.rpm</filename>
          <sum type="sha256">8808199a3571a81c4c8babc7d91fc917bccae2a4f3ea1408206fcb265da44885</sum>
        </package>
        <package name="python3.11-devel" version="3.11.11" release="2.el9" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9.src.rpm">
          <filename>python3.11-devel-3.11.11-2.el9.s390x.rpm</filename>
          <sum type="sha256">c4fdd7715fe7c9fe92b0dcb0a2df8fd48d7983ff0dc8e7eb1e399691114d6bee</sum>
        </package>
        <package name="python3.11-libs" version="3.11.11" release="2.el9" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9.src.rpm">
          <filename>python3.11-libs-3.11.11-2.el9.s390x.rpm</filename>
          <sum type="sha256">fa1f77e5180de170f4db70d5be598fd9785909fede9de0b6654b639d4c7d7381</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7118</id>
    <title>Important: osbuild and osbuild-composer security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:30:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>osbuild and osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
  * go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158)
  * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7118" id="RHSA-2025:7118" type="rhsa" title="RHSA-2025:7118"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34158" id="CVE-2024-34158" type="cve" title="CVE-2024-34158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9355" id="CVE-2024-9355" type="cve" title="CVE-2024-9355"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310529" id="2310529" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315719" id="2315719" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7118.html" id="ALSA-2025:7118" type="self" title="ALSA-2025:7118"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="osbuild-luks2" version="141" release="1.el9.alma.1" epoch="0" arch="noarch" src="osbuild-141-1.el9.alma.1.src.rpm">
          <filename>osbuild-luks2-141-1.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">52b194f8df542ea8e88d1c60f5180d5d1e5cc9f935cbfb1d8f366c46f8fe3034</sum>
        </package>
        <package name="python3-osbuild" version="141" release="1.el9.alma.1" epoch="0" arch="noarch" src="osbuild-141-1.el9.alma.1.src.rpm">
          <filename>python3-osbuild-141-1.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">562af1b3dc20c3bb6f488844c8137259d770f84759567a31b4c8ea44462b0631</sum>
        </package>
        <package name="osbuild-ostree" version="141" release="1.el9.alma.1" epoch="0" arch="noarch" src="osbuild-141-1.el9.alma.1.src.rpm">
          <filename>osbuild-ostree-141-1.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">667e2ba8623ecb6582030899218616f3a903550c995a74c5c0d0fbc7ce17c9c5</sum>
        </package>
        <package name="osbuild-selinux" version="141" release="1.el9.alma.1" epoch="0" arch="noarch" src="osbuild-141-1.el9.alma.1.src.rpm">
          <filename>osbuild-selinux-141-1.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">7f5f30a05337341ac51825f404817af2e475b38e13fb5279a136cfc095fa061e</sum>
        </package>
        <package name="osbuild-depsolve-dnf" version="141" release="1.el9.alma.1" epoch="0" arch="noarch" src="osbuild-141-1.el9.alma.1.src.rpm">
          <filename>osbuild-depsolve-dnf-141-1.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">8b6be495c04b1c26b03b62c5ab2f16357f1d462466d6658744a8a2f999e397b8</sum>
        </package>
        <package name="osbuild-composer-core" version="132" release="1.el9.alma.1" epoch="0" arch="s390x" src="osbuild-composer-132-1.el9.alma.1.src.rpm">
          <filename>osbuild-composer-core-132-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a9bb9b5e18f9963e73ff08d6e5a11469eeb6ed86ec6397ae4fd880e5ecfb797b</sum>
        </package>
        <package name="osbuild-lvm2" version="141" release="1.el9.alma.1" epoch="0" arch="noarch" src="osbuild-141-1.el9.alma.1.src.rpm">
          <filename>osbuild-lvm2-141-1.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">b115c78ab66aa5e77d4eaf1db651cdaf37cc01a7612e684e4df22b6ca2efda7c</sum>
        </package>
        <package name="osbuild-composer" version="132" release="1.el9.alma.1" epoch="0" arch="s390x" src="osbuild-composer-132-1.el9.alma.1.src.rpm">
          <filename>osbuild-composer-132-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">be3dcd55327927f399a29d49dbd9eaf586cecc73cf780cff4b9837f06fab1057</sum>
        </package>
        <package name="osbuild" version="141" release="1.el9.alma.1" epoch="0" arch="noarch" src="osbuild-141-1.el9.alma.1.src.rpm">
          <filename>osbuild-141-1.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">c19104b6eb5c3ac9fc89dc773f6b18ef258db17759a95ea3ff466ede30fc5205</sum>
        </package>
        <package name="osbuild-composer-worker" version="132" release="1.el9.alma.1" epoch="0" arch="s390x" src="osbuild-composer-132-1.el9.alma.1.src.rpm">
          <filename>osbuild-composer-worker-132-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e575c10aa47c772bb2821986a0dd0c01238f00c4e9f3bc6f30986e79bfc602df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7138</id>
    <title>Moderate: protobuf security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:27:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>protobuf security update</summary>
    <description>The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.  

Security Fix(es):  

  * protobuf: message parsing vulnerability in ProtocolBuffers (CVE-2022-1941)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7138" id="RHSA-2025:7138" type="rhsa" title="RHSA-2025:7138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1941" id="CVE-2022-1941" type="cve" title="CVE-2022-1941"/>
      <reference href="https://bugzilla.redhat.com/2291470" id="2291470" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7138.html" id="ALSA-2025:7138" type="self" title="ALSA-2025:7138"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="protobuf-lite" version="3.14.0" release="16.el9" epoch="0" arch="s390x" src="protobuf-3.14.0-16.el9.src.rpm">
          <filename>protobuf-lite-3.14.0-16.el9.s390x.rpm</filename>
          <sum type="sha256">9f930173cdde22d5bf63d5d7aa53d5c3499e0e38617c71678e14cf16c2177e93</sum>
        </package>
        <package name="python3-protobuf" version="3.14.0" release="16.el9" epoch="0" arch="noarch" src="protobuf-3.14.0-16.el9.src.rpm">
          <filename>python3-protobuf-3.14.0-16.el9.noarch.rpm</filename>
          <sum type="sha256">c546a57850e4e03a42870602b2c4592d121475806e64ce282d08fb0f8d66cd37</sum>
        </package>
        <package name="protobuf" version="3.14.0" release="16.el9" epoch="0" arch="s390x" src="protobuf-3.14.0-16.el9.src.rpm">
          <filename>protobuf-3.14.0-16.el9.s390x.rpm</filename>
          <sum type="sha256">d74fe35d578417b32b94560ae854e9fb99fea30e7643e8addfe9f792423b607f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7147</id>
    <title>Moderate: rpm-ostree security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:25:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rpm-ostree security update</summary>
    <description>The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be used both on client systems and on server-side composes. The rpm-ostree-client package provides commands for client systems to perform upgrades and rollbacks.  

Security Fix(es):  

  * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7147" id="RHSA-2025:7147" type="rhsa" title="RHSA-2025:7147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24898" id="CVE-2025-24898" type="cve" title="CVE-2025-24898"/>
      <reference href="https://bugzilla.redhat.com/2343573" id="2343573" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7147.html" id="ALSA-2025:7147" type="self" title="ALSA-2025:7147"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="rpm-ostree-libs" version="2025.5" release="1.el9" epoch="0" arch="s390x" src="rpm-ostree-2025.5-1.el9.src.rpm">
          <filename>rpm-ostree-libs-2025.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">8530fc55466f88b63c1857b89f7223ecd7a33375624a50a26944be755b8fca14</sum>
        </package>
        <package name="rpm-ostree" version="2025.5" release="1.el9" epoch="0" arch="s390x" src="rpm-ostree-2025.5-1.el9.src.rpm">
          <filename>rpm-ostree-2025.5-1.el9.s390x.rpm</filename>
          <sum type="sha256">a416fbf9992fe72c382a04adb5265f6031a54f456e01f8c396ac2b9b0cdc4005</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7160</id>
    <title>Moderate: bootc security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:23:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bootc security update</summary>
    <description>Bootable container system  

Security Fix(es):  

  * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7160" id="RHSA-2025:7160" type="rhsa" title="RHSA-2025:7160"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24898" id="CVE-2025-24898" type="cve" title="CVE-2025-24898"/>
      <reference href="https://bugzilla.redhat.com/2343573" id="2343573" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7160.html" id="ALSA-2025:7160" type="self" title="ALSA-2025:7160"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="bootc" version="1.1.6" release="3.el9_6" epoch="0" arch="s390x" src="bootc-1.1.6-3.el9_6.src.rpm">
          <filename>bootc-1.1.6-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">902757d0418b8c4987e6cbe0c605d531f9e43c82a5633bfeeb88ee96df6af91b</sum>
        </package>
        <package name="system-reinstall-bootc" version="1.1.6" release="3.el9_6" epoch="0" arch="s390x" src="bootc-1.1.6-3.el9_6.src.rpm">
          <filename>system-reinstall-bootc-1.1.6-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">e5ea94a22a117d1551af58077ef57482b3ce2c6ec44209b3b6fab6775dfc481d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7163</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:20:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)
  * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)
  * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)
  * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)
  * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)
  * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)
  * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)
  * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)
  * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7163" id="RHSA-2025:7163" type="rhsa" title="RHSA-2025:7163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9632" id="CVE-2024-9632" type="cve" title="CVE-2024-9632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26594" id="CVE-2025-26594" type="cve" title="CVE-2025-26594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26595" id="CVE-2025-26595" type="cve" title="CVE-2025-26595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26596" id="CVE-2025-26596" type="cve" title="CVE-2025-26596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26597" id="CVE-2025-26597" type="cve" title="CVE-2025-26597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26598" id="CVE-2025-26598" type="cve" title="CVE-2025-26598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26599" id="CVE-2025-26599" type="cve" title="CVE-2025-26599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26600" id="CVE-2025-26600" type="cve" title="CVE-2025-26600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26601" id="CVE-2025-26601" type="cve" title="CVE-2025-26601"/>
      <reference href="https://bugzilla.redhat.com/2317233" id="2317233" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345248" id="2345248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345251" id="2345251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345252" id="2345252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345253" id="2345253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345254" id="2345254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345255" id="2345255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345256" id="2345256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345257" id="2345257" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7163.html" id="ALSA-2025:7163" type="self" title="ALSA-2025:7163"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="28.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el9_6.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-28.el9_6.s390x.rpm</filename>
          <sum type="sha256">426c838eefb83c5c728a1edfe194464c760c1d74ae16398c1c18036cbe7a83db</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="28.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el9_6.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-28.el9_6.s390x.rpm</filename>
          <sum type="sha256">6faa877baf85c2aa6a85a6f170ae0c1c0e5daa480769f4ee7a23c198ba3c108e</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="28.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el9_6.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-28.el9_6.s390x.rpm</filename>
          <sum type="sha256">83472d809bd911556fd2055d3418a249f3866892dcc6bda6c0f41d5ae3e35a74</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="28.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el9_6.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-28.el9_6.s390x.rpm</filename>
          <sum type="sha256">8c3b763fef14a7a20b11b257e71f87599a215471937a63bdea6aff59d2f6a0bb</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="28.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el9_6.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-28.el9_6.s390x.rpm</filename>
          <sum type="sha256">ad98230f49115ac9cea46e1208dc21ee355cd049f6d7151e055301c9283c2e1f</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="28.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el9_6.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-28.el9_6.s390x.rpm</filename>
          <sum type="sha256">efeb61fe215b9bf6ac089c56b34286061fc008d2779d4d7689fed7c0ee3c299f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7165</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:22:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)
  * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)
  * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)
  * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)
  * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)
  * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)
  * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)
  * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)
  * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7165" id="RHSA-2025:7165" type="rhsa" title="RHSA-2025:7165"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9632" id="CVE-2024-9632" type="cve" title="CVE-2024-9632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26594" id="CVE-2025-26594" type="cve" title="CVE-2025-26594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26595" id="CVE-2025-26595" type="cve" title="CVE-2025-26595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26596" id="CVE-2025-26596" type="cve" title="CVE-2025-26596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26597" id="CVE-2025-26597" type="cve" title="CVE-2025-26597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26598" id="CVE-2025-26598" type="cve" title="CVE-2025-26598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26599" id="CVE-2025-26599" type="cve" title="CVE-2025-26599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26600" id="CVE-2025-26600" type="cve" title="CVE-2025-26600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26601" id="CVE-2025-26601" type="cve" title="CVE-2025-26601"/>
      <reference href="https://bugzilla.redhat.com/2317233" id="2317233" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345248" id="2345248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345251" id="2345251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345252" id="2345252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345253" id="2345253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345254" id="2345254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345255" id="2345255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345256" id="2345256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345257" id="2345257" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7165.html" id="ALSA-2025:7165" type="self" title="ALSA-2025:7165"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="xorg-x11-server-Xwayland" version="23.2.7" release="3.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-23.2.7-3.el9_6.src.rpm">
          <filename>xorg-x11-server-Xwayland-23.2.7-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">301a19fc57083686802d74176ec0953ad573ddf5a35a862ee1778c6550db2da9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7178</id>
    <title>Moderate: gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:18:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update</summary>
    <description>The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data.   

Security Fix(es):  

  * gstreamer: EXIF Metadata Parsing Integer Overflow (CVE-2024-4453)
  * gstreamer: AV1 Video Parsing Stack-based Buffer Overflow (CVE-2024-0444)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7178" id="RHSA-2025:7178" type="rhsa" title="RHSA-2025:7178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0444" id="CVE-2024-0444" type="cve" title="CVE-2024-0444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4453" id="CVE-2024-4453" type="cve" title="CVE-2024-4453"/>
      <reference href="https://bugzilla.redhat.com/2282999" id="2282999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292335" id="2292335" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7178.html" id="ALSA-2025:7178" type="self" title="ALSA-2025:7178"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="gstreamer1-devel" version="1.22.12" release="3.el9" epoch="0" arch="s390x" src="gstreamer1-1.22.12-3.el9.src.rpm">
          <filename>gstreamer1-devel-1.22.12-3.el9.s390x.rpm</filename>
          <sum type="sha256">0888ab1eda4e26368c44656bc5aada385b51e09bd21007031355e89e2c139902</sum>
        </package>
        <package name="gstreamer1" version="1.22.12" release="3.el9" epoch="0" arch="s390x" src="gstreamer1-1.22.12-3.el9.src.rpm">
          <filename>gstreamer1-1.22.12-3.el9.s390x.rpm</filename>
          <sum type="sha256">bee52b5d48c5df8330b47625c67c5b29fbcdcefbca06d1066edcb8903bfb04bb</sum>
        </package>
        <package name="gstreamer1-plugins-bad-free-libs" version="1.22.12" release="3.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.12-3.el9.src.rpm">
          <filename>gstreamer1-plugins-bad-free-libs-1.22.12-3.el9.s390x.rpm</filename>
          <sum type="sha256">c081a9abe3e884f459852cf55e556ecb035d3be2d5f9c1ff65048f017bd9783b</sum>
        </package>
        <package name="gstreamer1-plugins-bad-free" version="1.22.12" release="3.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.12-3.el9.src.rpm">
          <filename>gstreamer1-plugins-bad-free-1.22.12-3.el9.s390x.rpm</filename>
          <sum type="sha256">c95d2e93f19de0085e6c8478a123c6583611a25b4874b09e1080f08a797fcfd5</sum>
        </package>
        <package name="gstreamer1-rtsp-server" version="1.22.12" release="3.el9" epoch="0" arch="s390x" src="gstreamer1-rtsp-server-1.22.12-3.el9.src.rpm">
          <filename>gstreamer1-rtsp-server-1.22.12-3.el9.s390x.rpm</filename>
          <sum type="sha256">e73d2c72803bd5a4103170f78b3eb99292e70cf250a5df75dde979155780b129</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7241</id>
    <title>Moderate: rust-bootupd security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:14:49"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rust-bootupd security update</summary>
    <description>Bootloader updater  

Security Fix(es):  

  * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7241" id="RHSA-2025:7241" type="rhsa" title="RHSA-2025:7241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24898" id="CVE-2025-24898" type="cve" title="CVE-2025-24898"/>
      <reference href="https://bugzilla.redhat.com/2343573" id="2343573" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7241.html" id="ALSA-2025:7241" type="self" title="ALSA-2025:7241"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="bootupd" version="0.2.27" release="3.el9" epoch="0" arch="s390x" src="rust-bootupd-0.2.27-3.el9.src.rpm">
          <filename>bootupd-0.2.27-3.el9.s390x.rpm</filename>
          <sum type="sha256">4f03bd3466b4bcb04797b33ee5c90a87000e834f95a7f264ae224b967b354a8a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7242</id>
    <title>Moderate: gstreamer1-plugins-good security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:13:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-good security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.  

Security Fix(es):  

  * gstreamer1-plugins-good: OOB-read in qtdemux_parse_container (CVE-2024-47543)
  * gstreamer1-plugins-good: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk (CVE-2024-47774)
  * gstreamer1-plugins-good: OOB-read in gst_wavparse_smpl_chunk (CVE-2024-47777)
  * gstreamer1-plugins-good: OOB-read in gst_wavparse_adtl_chunk (CVE-2024-47778)
  * gstreamer1-plugins-good: OOB-read in parse_ds64 (CVE-2024-47775)
  * gstreamer1-plugins-good: OOB-read in FOURCC_SMI_ parsing (CVE-2024-47596)
  * gstreamer1-plugins-good: insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences (CVE-2024-47599)
  * gstreamer1-plugins-good: Use-After-Free read in Matroska CodecPrivate (CVE-2024-47834)
  * gstreamer1-plugins-good: OOB-read in gst_wavparse_cue_chunk (CVE-2024-47776)
  * gstreamer1-plugins-good: NULL-pointer dereferences in MP4/MOV demuxer CENC handling (CVE-2024-47544)
  * gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer (CVE-2024-47601)
  * gstreamer1-plugins-good: OOB-read in qtdemux_parse_samples (CVE-2024-47597)
  * gstreamer1-plugins-good: integer underflow in extract_cc_from_data leading to OOB-read (CVE-2024-47546)
  * gstreamer1-plugins-good: NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer (CVE-2024-47602)
  * gstreamer1-plugins-good: OOB-read in qtdemux_merge_sample_table (CVE-2024-47598)
  * gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer (CVE-2024-47603)
  * gstreamer1-plugins-good: integer underflow in FOURCC_strf parsing leading to OOB-read (CVE-2024-47545)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7242" id="RHSA-2025:7242" type="rhsa" title="RHSA-2025:7242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47543" id="CVE-2024-47543" type="cve" title="CVE-2024-47543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47544" id="CVE-2024-47544" type="cve" title="CVE-2024-47544"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47545" id="CVE-2024-47545" type="cve" title="CVE-2024-47545"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47546" id="CVE-2024-47546" type="cve" title="CVE-2024-47546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47596" id="CVE-2024-47596" type="cve" title="CVE-2024-47596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47597" id="CVE-2024-47597" type="cve" title="CVE-2024-47597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47598" id="CVE-2024-47598" type="cve" title="CVE-2024-47598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47599" id="CVE-2024-47599" type="cve" title="CVE-2024-47599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47601" id="CVE-2024-47601" type="cve" title="CVE-2024-47601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47602" id="CVE-2024-47602" type="cve" title="CVE-2024-47602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47603" id="CVE-2024-47603" type="cve" title="CVE-2024-47603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47774" id="CVE-2024-47774" type="cve" title="CVE-2024-47774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47775" id="CVE-2024-47775" type="cve" title="CVE-2024-47775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47776" id="CVE-2024-47776" type="cve" title="CVE-2024-47776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47777" id="CVE-2024-47777" type="cve" title="CVE-2024-47777"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47778" id="CVE-2024-47778" type="cve" title="CVE-2024-47778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47834" id="CVE-2024-47834" type="cve" title="CVE-2024-47834"/>
      <reference href="https://bugzilla.redhat.com/2331723" id="2331723" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331739" id="2331739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331741" id="2331741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331743" id="2331743" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331744" id="2331744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331747" id="2331747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331748" id="2331748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331749" id="2331749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331750" id="2331750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331751" id="2331751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331752" id="2331752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331755" id="2331755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331756" id="2331756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331759" id="2331759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331761" id="2331761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331762" id="2331762" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331763" id="2331763" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7242.html" id="ALSA-2025:7242" type="self" title="ALSA-2025:7242"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="gstreamer1-plugins-good" version="1.22.12" release="4.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.22.12-4.el9.src.rpm">
          <filename>gstreamer1-plugins-good-1.22.12-4.el9.s390x.rpm</filename>
          <sum type="sha256">483ea0d23fc8068cf646abb3ac44f2ca1dec14c2b4cdb23ed518a7f8cf5af234</sum>
        </package>
        <package name="gstreamer1-plugins-good-gtk" version="1.22.12" release="4.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.22.12-4.el9.src.rpm">
          <filename>gstreamer1-plugins-good-gtk-1.22.12-4.el9.s390x.rpm</filename>
          <sum type="sha256">b9942d62d3ec3501c7ad518366268f2748b94bd297dacd956df0248316efea95</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7243</id>
    <title>Moderate: gstreamer1-plugins-base security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:11:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-base security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.  

Security Fix(es):  

  * gstreamer1-plugins-base: ID3v2 parser out-of-bounds read and NULL-pointer dereference (CVE-2024-47542)
  * gstreamer1-plugins-base: GStreamer has an out-of-bounds write in SSA subtitle parser (CVE-2024-47541)
  * gstreamer1-plugins-base: GStreamer has an OOB-read in format_channel_mask (CVE-2024-47600)
  * gstreamer1-plugins-base: NULL-pointer dereference in LRC subtitle parser (CVE-2024-47835)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7243" id="RHSA-2025:7243" type="rhsa" title="RHSA-2025:7243"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47541" id="CVE-2024-47541" type="cve" title="CVE-2024-47541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47542" id="CVE-2024-47542" type="cve" title="CVE-2024-47542"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47600" id="CVE-2024-47600" type="cve" title="CVE-2024-47600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47835" id="CVE-2024-47835" type="cve" title="CVE-2024-47835"/>
      <reference href="https://bugzilla.redhat.com/2331717" id="2331717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331724" id="2331724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331738" id="2331738" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331742" id="2331742" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7243.html" id="ALSA-2025:7243" type="self" title="ALSA-2025:7243"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="gstreamer1-plugins-base" version="1.22.12" release="4.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.22.12-4.el9.src.rpm">
          <filename>gstreamer1-plugins-base-1.22.12-4.el9.s390x.rpm</filename>
          <sum type="sha256">1d384ed111f0f6db6768d73902a11b83b1fbfa646fa80cd25ed9c579be4199a1</sum>
        </package>
        <package name="gstreamer1-plugins-base-tools" version="1.22.12" release="4.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.22.12-4.el9.src.rpm">
          <filename>gstreamer1-plugins-base-tools-1.22.12-4.el9.s390x.rpm</filename>
          <sum type="sha256">411ad6e69d07db5b54f42dfd82dd24026dab308393c0e2fa5709030f71f3f71d</sum>
        </package>
        <package name="gstreamer1-plugins-base-devel" version="1.22.12" release="4.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.22.12-4.el9.src.rpm">
          <filename>gstreamer1-plugins-base-devel-1.22.12-4.el9.s390x.rpm</filename>
          <sum type="sha256">e262846cd1490a19555853636afbb39e52342edb1907120f151d0f31b2657e88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7256</id>
    <title>Moderate: git-lfs security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:09:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)
  * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)
  * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
  * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
  * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)
  * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7256" id="RHSA-2025:7256" type="rhsa" title="RHSA-2025:7256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39321" id="CVE-2023-39321" type="cve" title="CVE-2023-39321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39322" id="CVE-2023-39322" type="cve" title="CVE-2023-39322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24788" id="CVE-2024-24788" type="cve" title="CVE-2024-24788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24790" id="CVE-2024-24790" type="cve" title="CVE-2024-24790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24791" id="CVE-2024-24791" type="cve" title="CVE-2024-24791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9355" id="CVE-2024-9355" type="cve" title="CVE-2024-9355"/>
      <reference href="https://bugzilla.redhat.com/2237777" id="2237777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237778" id="2237778" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279814" id="2279814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292787" id="2292787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295310" id="2295310" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315719" id="2315719" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7256.html" id="ALSA-2025:7256" type="self" title="ALSA-2025:7256"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="git-lfs" version="3.6.1" release="1.el9" epoch="0" arch="s390x" src="git-lfs-3.6.1-1.el9.src.rpm">
          <filename>git-lfs-3.6.1-1.el9.s390x.rpm</filename>
          <sum type="sha256">1d281154b5255de4e093323d5e7826459fae3fa867407baac6e81af109493c00</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7309</id>
    <title>Moderate: openjpeg2 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:08:10"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openjpeg2 security update</summary>
    <description>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.  

Security Fix(es):  

  * openjpeg: heap buffer overflow in bin/common/color.c (CVE-2024-56826)
  * openjpeg: heap buffer overflow in lib/openjp2/j2k.c (CVE-2024-56827)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7309" id="RHSA-2025:7309" type="rhsa" title="RHSA-2025:7309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56826" id="CVE-2024-56826" type="cve" title="CVE-2024-56826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56827" id="CVE-2024-56827" type="cve" title="CVE-2024-56827"/>
      <reference href="https://bugzilla.redhat.com/2335172" id="2335172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2335174" id="2335174" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7309.html" id="ALSA-2025:7309" type="self" title="ALSA-2025:7309"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="openjpeg2" version="2.4.0" release="8.el9" epoch="0" arch="s390x" src="openjpeg2-2.4.0-8.el9.src.rpm">
          <filename>openjpeg2-2.4.0-8.el9.s390x.rpm</filename>
          <sum type="sha256">c14a86cfdfa92dbcb4e31cd74639cef0bc001115df4359220479464d02b7d579</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7313</id>
    <title>Moderate: keylime-agent-rust security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:06:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>keylime-agent-rust security update</summary>
    <description>Rust agent for Keylime  

Security Fix(es):  

  * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7313" id="RHSA-2025:7313" type="rhsa" title="RHSA-2025:7313"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24898" id="CVE-2025-24898" type="cve" title="CVE-2025-24898"/>
      <reference href="https://bugzilla.redhat.com/2343573" id="2343573" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7313.html" id="ALSA-2025:7313" type="self" title="ALSA-2025:7313"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="keylime-agent-rust" version="0.2.2" release="2.el9" epoch="0" arch="s390x" src="keylime-agent-rust-0.2.2-2.el9.src.rpm">
          <filename>keylime-agent-rust-0.2.2-2.el9.s390x.rpm</filename>
          <sum type="sha256">c18dec78d6aff40057befb680058fd0a9ec1456815449dc93acb33c6b6d3ffca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7317</id>
    <title>Moderate: python3.12-cryptography security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:05:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12-cryptography security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7317" id="RHSA-2025:7317" type="rhsa" title="RHSA-2025:7317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24898" id="CVE-2025-24898" type="cve" title="CVE-2025-24898"/>
      <reference href="https://bugzilla.redhat.com/2343573" id="2343573" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7317.html" id="ALSA-2025:7317" type="self" title="ALSA-2025:7317"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3.12-cryptography" version="41.0.7" release="2.el9" epoch="0" arch="s390x" src="python3.12-cryptography-41.0.7-2.el9.src.rpm">
          <filename>python3.12-cryptography-41.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">0f6be44dffb580e5d59917f928278ad30dd2ba4b3c3e5f367af40a045b852d5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7387</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:12:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44192)
  * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-54467)
  * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2024-54551)
  * webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack (CVE-2025-24208)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24209)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-24216)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-30427)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7387" id="RHSA-2025:7387" type="rhsa" title="RHSA-2025:7387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44192" id="CVE-2024-44192" type="cve" title="CVE-2024-44192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54467" id="CVE-2024-54467" type="cve" title="CVE-2024-54467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54551" id="CVE-2024-54551" type="cve" title="CVE-2024-54551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24208" id="CVE-2025-24208" type="cve" title="CVE-2025-24208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24209" id="CVE-2025-24209" type="cve" title="CVE-2025-24209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24216" id="CVE-2025-24216" type="cve" title="CVE-2025-24216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30427" id="CVE-2025-30427" type="cve" title="CVE-2025-30427"/>
      <reference href="https://bugzilla.redhat.com/2353871" id="2353871" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2353872" id="2353872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357909" id="2357909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357910" id="2357910" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357911" id="2357911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357917" id="2357917" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357919" id="2357919" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7387.html" id="ALSA-2025:7387" type="self" title="ALSA-2025:7387"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="webkit2gtk3-jsc-devel" version="2.48.1" release="1.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.48.1-1.el9_6.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.48.1-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">10899291474e53cfbe533c579f22c6f4e253005ebbfe16a981ddf5bc7d7efca5</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.48.1" release="1.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.48.1-1.el9_6.src.rpm">
          <filename>webkit2gtk3-devel-2.48.1-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">57e704ca044ace9cfe4f384ac1d35394eba55ac4bce50a1fc2fe78121071fe05</sum>
        </package>
        <package name="webkit2gtk3" version="2.48.1" release="1.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.48.1-1.el9_6.src.rpm">
          <filename>webkit2gtk3-2.48.1-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">641a73d6c9cfaf30073c6902165b73d8fdea293a1ece87c38ba713833cedceb0</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.48.1" release="1.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.48.1-1.el9_6.src.rpm">
          <filename>webkit2gtk3-jsc-2.48.1-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f56e4a1a4e16ba8f8539067362cd01cd62d8c86dd6c50a8b81622d29fa453ea8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7389</id>
    <title>Moderate: buildah security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:11:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.   

Security Fix(es):  

  * go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7389" id="RHSA-2025:7389" type="rhsa" title="RHSA-2025:7389"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27144" id="CVE-2025-27144" type="cve" title="CVE-2025-27144"/>
      <reference href="https://bugzilla.redhat.com/2347423" id="2347423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7389.html" id="ALSA-2025:7389" type="self" title="ALSA-2025:7389"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="buildah" version="1.39.4" release="1.el9_6" epoch="2" arch="s390x" src="buildah-1.39.4-1.el9_6.src.rpm">
          <filename>buildah-1.39.4-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4501dcbd13fca075452eb78c310a4fecf921873c6b0302ac36f39365b56ef797</sum>
        </package>
        <package name="buildah-tests" version="1.39.4" release="1.el9_6" epoch="2" arch="s390x" src="buildah-1.39.4-1.el9_6.src.rpm">
          <filename>buildah-tests-1.39.4-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">6bcee7db6b0caf7401d08e646103ee68a4793d8b01fbebe045567a90c0b6d4c2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7395</id>
    <title>Moderate: 389-ds-base security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-26 08:45:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.  

Security Fix(es):  

  * 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7395" id="RHSA-2025:7395" type="rhsa" title="RHSA-2025:7395"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2487" id="CVE-2025-2487" type="cve" title="CVE-2025-2487"/>
      <reference href="https://bugzilla.redhat.com/2353071" id="2353071" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7395.html" id="ALSA-2025:7395" type="self" title="ALSA-2025:7395"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="389-ds-base-libs" version="2.6.1" release="8.el9_6" epoch="0" arch="s390x" src="389-ds-base-2.6.1-8.el9_6.src.rpm">
          <filename>389-ds-base-libs-2.6.1-8.el9_6.s390x.rpm</filename>
          <sum type="sha256">1b5ecaa1a9f8a046ddb8aa60929c7663028764b5ad39f425b0026e03f52b6694</sum>
        </package>
        <package name="389-ds-base" version="2.6.1" release="8.el9_6" epoch="0" arch="s390x" src="389-ds-base-2.6.1-8.el9_6.src.rpm">
          <filename>389-ds-base-2.6.1-8.el9_6.s390x.rpm</filename>
          <sum type="sha256">2280764b43f4a6b536563a3f3c21b4e735ddeb19d4f64243f0c3b81e362de2f8</sum>
        </package>
        <package name="389-ds-base-snmp" version="2.6.1" release="8.el9_6" epoch="0" arch="s390x" src="389-ds-base-2.6.1-8.el9_6.src.rpm">
          <filename>389-ds-base-snmp-2.6.1-8.el9_6.s390x.rpm</filename>
          <sum type="sha256">644312182abf0e5c35e129cbb030111872f8a51827a7a26badd79db8dcbe50c7</sum>
        </package>
        <package name="python3-lib389" version="2.6.1" release="8.el9_6" epoch="0" arch="noarch" src="389-ds-base-2.6.1-8.el9_6.src.rpm">
          <filename>python3-lib389-2.6.1-8.el9_6.noarch.rpm</filename>
          <sum type="sha256">7b151073db62fe5f40927e6dbc9093ddcda9e24f71e58f48433da0a542c08ae9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7397</id>
    <title>Moderate: skopeo security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:10:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>skopeo security update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.   

Security Fix(es):  

  * go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7397" id="RHSA-2025:7397" type="rhsa" title="RHSA-2025:7397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27144" id="CVE-2025-27144" type="cve" title="CVE-2025-27144"/>
      <reference href="https://bugzilla.redhat.com/2347423" id="2347423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7397.html" id="ALSA-2025:7397" type="self" title="ALSA-2025:7397"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="skopeo-tests" version="1.18.1" release="1.el9_6" epoch="2" arch="s390x" src="skopeo-1.18.1-1.el9_6.src.rpm">
          <filename>skopeo-tests-1.18.1-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7ffcd032e298db84aa7470c0a3919bddbad289045c414541a88e31e0d59c82a4</sum>
        </package>
        <package name="skopeo" version="1.18.1" release="1.el9_6" epoch="2" arch="s390x" src="skopeo-1.18.1-1.el9_6.src.rpm">
          <filename>skopeo-1.18.1-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ec34703abdf5a0854aa967d7aa6bf3df47e62b803150c71684af0175e502130f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7402</id>
    <title>Moderate: nginx security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:08:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741)
  * nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742)
  * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7402" id="RHSA-2025:7402" type="rhsa" title="RHSA-2025:7402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41741" id="CVE-2022-41741" type="cve" title="CVE-2022-41741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41742" id="CVE-2022-41742" type="cve" title="CVE-2022-41742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7347" id="CVE-2024-7347" type="cve" title="CVE-2024-7347"/>
      <reference href="https://bugzilla.redhat.com/2141495" id="2141495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2141496" id="2141496" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7402.html" id="ALSA-2025:7402" type="self" title="ALSA-2025:7402"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="nginx-all-modules" version="1.20.1" release="22.el9_6.2.alma.1" epoch="2" arch="noarch" src="nginx-1.20.1-22.el9_6.2.alma.1.src.rpm">
          <filename>nginx-all-modules-1.20.1-22.el9_6.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">0a62efcf0ca9e93b6e836b834c53a731066049d98841218ddf7762b068764e90</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.20.1" release="22.el9_6.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-22.el9_6.2.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.20.1-22.el9_6.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">28f485aa4893af4e680b2ce2eb64816cb4efe7d3b91d4c939e64672521d2327b</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.20.1" release="22.el9_6.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-22.el9_6.2.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.20.1-22.el9_6.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">3769338c04546782fd62f202f6b48250d0d9fa6bd700706680ec33f013fd9c38</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.20.1" release="22.el9_6.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-22.el9_6.2.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.20.1-22.el9_6.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">391fa4c6c4fc681f2fbb77c4e4a609eb6beebcf36af931c3b0044f459be50511</sum>
        </package>
        <package name="nginx-mod-stream" version="1.20.1" release="22.el9_6.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-22.el9_6.2.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.20.1-22.el9_6.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">47a3cf923d67e3dbdcc2f87f67356c4038941b44d98805bed0865aea9827ba07</sum>
        </package>
        <package name="nginx-filesystem" version="1.20.1" release="22.el9_6.2.alma.1" epoch="2" arch="noarch" src="nginx-1.20.1-22.el9_6.2.alma.1.src.rpm">
          <filename>nginx-filesystem-1.20.1-22.el9_6.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">51eab6d828519b14e8288279e73102654443d8d4b2ee143de72af4d4ef4f0613</sum>
        </package>
        <package name="nginx-mod-mail" version="1.20.1" release="22.el9_6.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-22.el9_6.2.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.20.1-22.el9_6.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">8911cd615279dd2eeb7c70fe87e623b70b390686acac76364d07069c52e51780</sum>
        </package>
        <package name="nginx-core" version="1.20.1" release="22.el9_6.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-22.el9_6.2.alma.1.src.rpm">
          <filename>nginx-core-1.20.1-22.el9_6.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">a72cdf02fa1afd2e8cbbe38bb296466bfac3db4d369070bf4467a0f7edb1adae</sum>
        </package>
        <package name="nginx" version="1.20.1" release="22.el9_6.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-22.el9_6.2.alma.1.src.rpm">
          <filename>nginx-1.20.1-22.el9_6.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">a92d34098840a7c31a770475c3425b38eb2f4af884d85c72dcb1d9af3a5cadbb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7404</id>
    <title>Important: grafana security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:04:46"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7404" id="RHSA-2025:7404" type="rhsa" title="RHSA-2025:7404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30204" id="CVE-2025-30204" type="cve" title="CVE-2025-30204"/>
      <reference href="https://bugzilla.redhat.com/2354195" id="2354195" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7404.html" id="ALSA-2025:7404" type="self" title="ALSA-2025:7404"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="grafana" version="10.2.6" release="11.el9_6" epoch="0" arch="s390x" src="grafana-10.2.6-11.el9_6.src.rpm">
          <filename>grafana-10.2.6-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">5aed21a0fb7622ef9989fc25bf5ca01c6f52648fb50ac1d99d67f75109484d04</sum>
        </package>
        <package name="grafana-selinux" version="10.2.6" release="11.el9_6" epoch="0" arch="s390x" src="grafana-10.2.6-11.el9_6.src.rpm">
          <filename>grafana-selinux-10.2.6-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">9b8eff2aa29c6990b717ec9b95b854e8dd36aeff83260eafd9423f3f537f521f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7409</id>
    <title>Moderate: git security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:46:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>git security update</summary>
    <description>Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.  

Security Fix(es):  

  * git: The sideband payload is passed unfiltered to the terminal in git (CVE-2024-52005)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7409" id="RHSA-2025:7409" type="rhsa" title="RHSA-2025:7409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52005" id="CVE-2024-52005" type="cve" title="CVE-2024-52005"/>
      <reference href="https://bugzilla.redhat.com/2338289" id="2338289" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7409.html" id="ALSA-2025:7409" type="self" title="ALSA-2025:7409"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="git-daemon" version="2.47.1" release="2.el9_6" epoch="0" arch="s390x" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>git-daemon-2.47.1-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">0e329720d0bd77378c3cee3e979b21f142a78c88e9c88474b9fe646fac838357</sum>
        </package>
        <package name="perl-Git-SVN" version="2.47.1" release="2.el9_6" epoch="0" arch="noarch" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>perl-Git-SVN-2.47.1-2.el9_6.noarch.rpm</filename>
          <sum type="sha256">1a4df63ad4653c2eac127fbe96b4152d459b75c00b7e203f6ce8e15e91e5b8fd</sum>
        </package>
        <package name="git-gui" version="2.47.1" release="2.el9_6" epoch="0" arch="noarch" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>git-gui-2.47.1-2.el9_6.noarch.rpm</filename>
          <sum type="sha256">2fe23070dd7a7fbf738126307b89c621fbef33816281f9d8adc70b9836ab315d</sum>
        </package>
        <package name="perl-Git" version="2.47.1" release="2.el9_6" epoch="0" arch="noarch" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>perl-Git-2.47.1-2.el9_6.noarch.rpm</filename>
          <sum type="sha256">4807317f0fadf25a4801e27e4bb1deb3cfff031549c7a0f54ac8d3708b4ffb48</sum>
        </package>
        <package name="git-all" version="2.47.1" release="2.el9_6" epoch="0" arch="noarch" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>git-all-2.47.1-2.el9_6.noarch.rpm</filename>
          <sum type="sha256">523e668620f2c72882421a02de14459b5631b44aa38c911d0863abc9d2b0a0eb</sum>
        </package>
        <package name="git-core-doc" version="2.47.1" release="2.el9_6" epoch="0" arch="noarch" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>git-core-doc-2.47.1-2.el9_6.noarch.rpm</filename>
          <sum type="sha256">61851157149a3df8cfb435f93616170279ae62bc20805007af3ad2e42dcefdf2</sum>
        </package>
        <package name="git" version="2.47.1" release="2.el9_6" epoch="0" arch="s390x" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>git-2.47.1-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">62b8d91b32d2ffb07a395d0495c8a4cfec8a780d781347fb2ca2e386d921cd3d</sum>
        </package>
        <package name="gitweb" version="2.47.1" release="2.el9_6" epoch="0" arch="noarch" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>gitweb-2.47.1-2.el9_6.noarch.rpm</filename>
          <sum type="sha256">7027ee29072bae38696a10218b2fc35498ea62a20f825d0bee4caca48f7f7577</sum>
        </package>
        <package name="gitk" version="2.47.1" release="2.el9_6" epoch="0" arch="noarch" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>gitk-2.47.1-2.el9_6.noarch.rpm</filename>
          <sum type="sha256">70d038b486086465a9ee329088b541821a2c9599094e0b63b6579ee0e899adc7</sum>
        </package>
        <package name="git-email" version="2.47.1" release="2.el9_6" epoch="0" arch="noarch" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>git-email-2.47.1-2.el9_6.noarch.rpm</filename>
          <sum type="sha256">83c4ad8276f7c92f2658704f136230b24c1f2708e67480d6e183cec8da5dbe29</sum>
        </package>
        <package name="git-credential-libsecret" version="2.47.1" release="2.el9_6" epoch="0" arch="s390x" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>git-credential-libsecret-2.47.1-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">ab6b36fe01ca80e67efeebaf3e9eb1261430510ad9d2c7d0ab3888cecf7778f0</sum>
        </package>
        <package name="git-svn" version="2.47.1" release="2.el9_6" epoch="0" arch="noarch" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>git-svn-2.47.1-2.el9_6.noarch.rpm</filename>
          <sum type="sha256">be421324905b15184565a0e2e2dfeb1e360c60d2d79d965c6ea0197a5e34391c</sum>
        </package>
        <package name="git-core" version="2.47.1" release="2.el9_6" epoch="0" arch="s390x" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>git-core-2.47.1-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">bff314e800b0ef676949f7c4f2af731a9435a0dc9a6ef2a4dbba65d5f8fbaced</sum>
        </package>
        <package name="git-subtree" version="2.47.1" release="2.el9_6" epoch="0" arch="s390x" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>git-subtree-2.47.1-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">e256d21e732f8ece312c209b351a04779a141d93185f5efbb44865b5f2365d3f</sum>
        </package>
        <package name="git-instaweb" version="2.47.1" release="2.el9_6" epoch="0" arch="noarch" src="git-2.47.1-2.el9_6.src.rpm">
          <filename>git-instaweb-2.47.1-2.el9_6.noarch.rpm</filename>
          <sum type="sha256">f2ac542a892f4ccf878441428540d22c76b2576e83e59d1a70403ef33aa3d56c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7410</id>
    <title>Important: libxslt security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:46:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxslt security update</summary>
    <description>libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.   

Security Fix(es):  

  * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7410" id="RHSA-2025:7410" type="rhsa" title="RHSA-2025:7410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-55549" id="CVE-2024-55549" type="cve" title="CVE-2024-55549"/>
      <reference href="https://bugzilla.redhat.com/2352484" id="2352484" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7410.html" id="ALSA-2025:7410" type="self" title="ALSA-2025:7410"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libxslt-devel" version="1.1.34" release="13.el9_6" epoch="0" arch="s390x" src="libxslt-1.1.34-13.el9_6.src.rpm">
          <filename>libxslt-devel-1.1.34-13.el9_6.s390x.rpm</filename>
          <sum type="sha256">275a2031a2bad8b196158dd0055a9d4bb914b89f95215098a0f88cd2e31233c8</sum>
        </package>
        <package name="libxslt" version="1.1.34" release="13.el9_6" epoch="0" arch="s390x" src="libxslt-1.1.34-13.el9_6.src.rpm">
          <filename>libxslt-1.1.34-13.el9_6.s390x.rpm</filename>
          <sum type="sha256">e8a73fe0b5fc714020eeb6f2231e04f8f9fe04444089c0213bc0b21290c73db3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7417</id>
    <title>Important: gimp security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:46:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gimp security update</summary>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  

Security Fix(es):  

  * gimp: dds buffer overflow RCE (CVE-2023-44441)
  * gimp: PSD buffer overflow RCE (CVE-2023-44442)
  * gimp: psp integer overflow RCE (CVE-2023-44443)
  * gimp: psp off-by-one RCE (CVE-2023-44444)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7417" id="RHSA-2025:7417" type="rhsa" title="RHSA-2025:7417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44441" id="CVE-2023-44441" type="cve" title="CVE-2023-44441"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44442" id="CVE-2023-44442" type="cve" title="CVE-2023-44442"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44443" id="CVE-2023-44443" type="cve" title="CVE-2023-44443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44444" id="CVE-2023-44444" type="cve" title="CVE-2023-44444"/>
      <reference href="https://bugzilla.redhat.com/2249938" id="2249938" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249942" id="2249942" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249944" id="2249944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249946" id="2249946" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7417.html" id="ALSA-2025:7417" type="self" title="ALSA-2025:7417"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="gimp-libs" version="2.99.8" release="4.el9_6" epoch="2" arch="s390x" src="gimp-2.99.8-4.el9_6.src.rpm">
          <filename>gimp-libs-2.99.8-4.el9_6.s390x.rpm</filename>
          <sum type="sha256">48edf71696eb4eb4fa0e9ce080045b5c285e8e4c8d39f0c2006d58c6fafc963d</sum>
        </package>
        <package name="gimp" version="2.99.8" release="4.el9_6" epoch="2" arch="s390x" src="gimp-2.99.8-4.el9_6.src.rpm">
          <filename>gimp-2.99.8-4.el9_6.s390x.rpm</filename>
          <sum type="sha256">a6fb4af2825307f586b99d1399b213bd88ad17d863a5b8cbf9680e63225c6131</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7418</id>
    <title>Important: php:8.3 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:02:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>php:8.3 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)
  * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)
  * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)
  * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)
  * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)
  * php: Reference counting in php_request_shutdown causes Use-After-Free (CVE-2024-11235)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7418" id="RHSA-2025:7418" type="rhsa" title="RHSA-2025:7418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11235" id="CVE-2024-11235" type="cve" title="CVE-2024-11235"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1217" id="CVE-2025-1217" type="cve" title="CVE-2025-1217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1219" id="CVE-2025-1219" type="cve" title="CVE-2025-1219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1734" id="CVE-2025-1734" type="cve" title="CVE-2025-1734"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1736" id="CVE-2025-1736" type="cve" title="CVE-2025-1736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1861" id="CVE-2025-1861" type="cve" title="CVE-2025-1861"/>
      <reference href="https://bugzilla.redhat.com/2355917" id="2355917" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356041" id="2356041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356042" id="2356042" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356043" id="2356043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356046" id="2356046" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357531" id="2357531" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7418.html" id="ALSA-2025:7418" type="self" title="ALSA-2025:7418"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <module name="php" stream="8.3" version="9060020250317151939" context="8cf767d6" arch="s390x"/>
        <package name="php-mysqlnd" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-mysqlnd-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">0136639559b4cdde4c6c547db2f47b315913dc102a2f2bc4287df19d3976e2d9</sum>
        </package>
        <package name="php-gmp" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-gmp-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">0c8007d68adb15bdf95c1876a0f712329217a9327cfbaa06d434d63b6818b167</sum>
        </package>
        <package name="php-snmp" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-snmp-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">1442355b4e77e4914757ad2f6a8a9f56d74b54112acd96231d33b716a26c2204</sum>
        </package>
        <package name="php-ffi" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-ffi-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">1a6b81e95f59adb661bdfbab2bb404a8affabb233afc9fef0bd8662b505e88b8</sum>
        </package>
        <package name="php-opcache" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-opcache-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">23a0f2e6e72b54a31298defaa190b08bdbd05351b5b7a268015cc4ee036ce44d</sum>
        </package>
        <package name="php-dba" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-dba-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">250ee7dc3fa6f142aebe840f05e0ce880b3b7844b3fe71e684b7faaf5a841c4d</sum>
        </package>
        <package name="php-pecl-zip" version="1.22.3" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">2c10a6a3ff7e5ab1e236819a29a6fd7e9817b8632a6bc09864e5b4f635d83552</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.23" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">2d91df18463f7e5cd5a771f760d2dae331ad870672e519b72976b7b1e308de4b</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.23" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">2e6d69933e316fd47fb94a2c937bbdd1aa9468b2ff581671b71042a7b07a002f</sum>
        </package>
        <package name="php-dbg" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-dbg-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">346c8aca8f00c2699b179cb70b164caea3fb412af87036dc4cd7a161a754c25a</sum>
        </package>
        <package name="php-common" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-common-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">39414ae674f78e373acf7bf40716ea5b7608efde07f0f343991b266b4992cc5c</sum>
        </package>
        <package name="php-devel" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-devel-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">4005f71fdb76f87320f88a757521ced2b6f456f9e9b4c55cbfc3cfaa5c8fa2bc</sum>
        </package>
        <package name="apcu-panel" version="5.1.23" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm</filename>
          <sum type="sha256">43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033</sum>
        </package>
        <package name="php-bcmath" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-bcmath-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">4e164947adb61f902820c111a69227e17153e0c8f412963048d6de06ae9e1542</sum>
        </package>
        <package name="php-cli" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-cli-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">561aa0347e5d41fd06233ef87094053a6e96ba0d2466e4301d514d60d82f0ad1</sum>
        </package>
        <package name="php-soap" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-soap-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">567d55fbcba534f3fa47d4ed1e0fb5b380ae0879b1b49e3b66bb26c1b411cc18</sum>
        </package>
        <package name="php-ldap" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-ldap-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">6ee3bb60a2c5a7efb0848ea9bf7e4db9fb33ba16fb0ee283a94e8ff2481ea273</sum>
        </package>
        <package name="php-odbc" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-odbc-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">7302a2e4f87f8385234c053f9a4f90e7b1c632992a0b1b57e13a5d925fc37b47</sum>
        </package>
        <package name="php-pgsql" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-pgsql-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">809115bbe6ba5e191806e992954acaf5fbc6d5440b84c878d3cc89947c17d758</sum>
        </package>
        <package name="php-enchant" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-enchant-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">8a2009b75fbe336a6f8c3fcf9afd3363313c08d6fbee8550af0630eca814ed81</sum>
        </package>
        <package name="php-process" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-process-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">8d1ad1643df462381446a4e058aedd2b54a488b88e98bbf3998975f2e94e62aa</sum>
        </package>
        <package name="php-pdo" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-pdo-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">8fda7e34dd23ec9ec26e097f7b410bcfd5b45672c507f93415f7a88ab65a277f</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="4.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">9692a81f8b31d7f3d9d3e90990ab08a2b9825346ca6ff7072a897086d61630d2</sum>
        </package>
        <package name="php-gd" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-gd-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">a2448ae5acd95fc6726edbf5d870f97d5c492dcc998201dedf3cb22c74f5337d</sum>
        </package>
        <package name="php-mbstring" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-mbstring-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">b371e3a359314e79782a17eb72f3d4d6c1e531b2cafa5d5b394d31c122d0d0ed</sum>
        </package>
        <package name="php-intl" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-intl-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">bcc463f91e2209bd4bd6291e61d90db20c92984e324e8fdf63421f5ab84cd408</sum>
        </package>
        <package name="php-embedded" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-embedded-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">be6b4550b2850c2936f3041a02ece7d38f5f1a1b04b4326e779fe110ba119dc5</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.3.1" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">cd0acae21cca91d1423ac7f37f561db326c1d3f12144b462e729b1bb11349f22</sum>
        </package>
        <package name="php-pecl-redis6" version="6.1.0" release="2.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">daddebb79dcabf2b21e7db723448b62a2c6d9941272af21949a665d7b0e9e11e</sum>
        </package>
        <package name="php-xml" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-xml-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">e1247834ce8c008245401e822987fd9428c40f04df0f3b143c1b13c3a3a09bb2</sum>
        </package>
        <package name="php-fpm" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-fpm-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">e893a96806d1f3cbe5b20efbf0073c4e56fd31bab7ee0f4d6917559e1f3906c0</sum>
        </package>
        <package name="php" version="8.3.19" release="1.module_el9.6.0+166+f262c21c" epoch="0" arch="s390x" src="php-8.3.19-1.module_el9.6.0+166+f262c21c.src.rpm">
          <filename>php-8.3.19-1.module_el9.6.0+166+f262c21c.s390x.rpm</filename>
          <sum type="sha256">f564b511c46ec733005f36ea567190842dd1ffa78ff0f48c87ad6cb9fa9382af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7419</id>
    <title>Important: mod_auth_openidc security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:46:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mod_auth_openidc security update</summary>
    <description>The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.   

Security Fix(es):  

  * mod_auth_openidc: mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data (CVE-2025-31492)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7419" id="RHSA-2025:7419" type="rhsa" title="RHSA-2025:7419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31492" id="CVE-2025-31492" type="cve" title="CVE-2025-31492"/>
      <reference href="https://bugzilla.redhat.com/2357738" id="2357738" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7419.html" id="ALSA-2025:7419" type="self" title="ALSA-2025:7419"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="mod_auth_openidc" version="2.4.10" release="1.el9_6.1" epoch="0" arch="s390x" src="mod_auth_openidc-2.4.10-1.el9_6.1.src.rpm">
          <filename>mod_auth_openidc-2.4.10-1.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">12ac2120ecbb11d210b5523ccdca63cd5ed6c17702f3eea7a308399a13e70457</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7422</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-26 08:59:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.  

Security Fix(es):  

  * ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)
  * ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)
  * ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)
  * ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)
  * ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)
  * ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7422" id="RHSA-2025:7422" type="rhsa" title="RHSA-2025:7422"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46751" id="CVE-2023-46751" type="cve" title="CVE-2023-46751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46951" id="CVE-2024-46951" type="cve" title="CVE-2024-46951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46952" id="CVE-2024-46952" type="cve" title="CVE-2024-46952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46953" id="CVE-2024-46953" type="cve" title="CVE-2024-46953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46954" id="CVE-2024-46954" type="cve" title="CVE-2024-46954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46956" id="CVE-2024-46956" type="cve" title="CVE-2024-46956"/>
      <reference href="https://bugzilla.redhat.com/2253365" id="2253365" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325041" id="2325041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325043" id="2325043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325044" id="2325044" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325045" id="2325045" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325047" id="2325047" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7422.html" id="ALSA-2025:7422" type="self" title="ALSA-2025:7422"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="ghostscript-tools-dvipdf" version="9.54.0" release="18.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-18.el9_6.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.54.0-18.el9_6.s390x.rpm</filename>
          <sum type="sha256">0c94d93742b401cae1c74a520a5e9a953b0af505831cd4b06219d79f5a7d9636</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.54.0" release="18.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-18.el9_6.src.rpm">
          <filename>ghostscript-tools-printing-9.54.0-18.el9_6.s390x.rpm</filename>
          <sum type="sha256">46500ff0e60e9f63c25e00b17b1717ff6b38b0558ffacc66e3d72c00abcf1846</sum>
        </package>
        <package name="ghostscript" version="9.54.0" release="18.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-18.el9_6.src.rpm">
          <filename>ghostscript-9.54.0-18.el9_6.s390x.rpm</filename>
          <sum type="sha256">47144d293ba466cf08c6a50221920e848379edeaf54b642cf1f991e7d7d96b46</sum>
        </package>
        <package name="ghostscript-doc" version="9.54.0" release="18.el9_6" epoch="0" arch="noarch" src="ghostscript-9.54.0-18.el9_6.src.rpm">
          <filename>ghostscript-doc-9.54.0-18.el9_6.noarch.rpm</filename>
          <sum type="sha256">5edef33c87504997d21f47ab6ccc07c2f369b7b31ced642fd40b07a2cb2e214f</sum>
        </package>
        <package name="ghostscript-x11" version="9.54.0" release="18.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-18.el9_6.src.rpm">
          <filename>ghostscript-x11-9.54.0-18.el9_6.s390x.rpm</filename>
          <sum type="sha256">aa8401adabcab2651bc1ebe8d9166d128dc0df1e3f1790d9e374a79dc6cb34d5</sum>
        </package>
        <package name="libgs" version="9.54.0" release="18.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-18.el9_6.src.rpm">
          <filename>libgs-9.54.0-18.el9_6.s390x.rpm</filename>
          <sum type="sha256">bdad96a8ff3173d1f5f77fdf09b5359fedf3b7b76e09c653807a30ae839e16b0</sum>
        </package>
        <package name="ghostscript-tools-fonts" version="9.54.0" release="18.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-18.el9_6.src.rpm">
          <filename>ghostscript-tools-fonts-9.54.0-18.el9_6.s390x.rpm</filename>
          <sum type="sha256">fe9e9b0393c0e558f42d73946e06e0161710d79e9287520cd799301572a1b6b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7423</id>
    <title>Important: kernel security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-24 22:29:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: io_uring/sqpoll: zero sqd-&gt;thread on tctx errors (CVE-2025-21633)
  * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007)
  * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
  * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069)
  * kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927)
  * kernel: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CVE-2025-21993)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7423" id="RHSA-2025:7423" type="rhsa" title="RHSA-2025:7423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58005" id="CVE-2024-58005" type="cve" title="CVE-2024-58005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58007" id="CVE-2024-58007" type="cve" title="CVE-2024-58007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58069" id="CVE-2024-58069" type="cve" title="CVE-2024-58069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21633" id="CVE-2025-21633" type="cve" title="CVE-2025-21633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21927" id="CVE-2025-21927" type="cve" title="CVE-2025-21927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21993" id="CVE-2025-21993" type="cve" title="CVE-2025-21993"/>
      <reference href="https://bugzilla.redhat.com/2338813" id="2338813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348565" id="2348565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348590" id="2348590" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350364" id="2350364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356593" id="2356593" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356908" id="2356908" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7423.html" id="ALSA-2025:7423" type="self" title="ALSA-2025:7423"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.16.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">18cb929155e2a9bfdc2f19b89b2c74ccea98b073c13377c130a807cf8b46b43d</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.16.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">24a87fa7c8d72c67881cd1857affd8133029b910c45135f41e27e43d1f6177d0</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.16.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3ae2f8d0f0214a2c7d3f0a3110e9b383d2d392eaf1e0b442229ba5537d4bb3bc</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.16.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3c516031205127ab5b19a7286e9f792741a68e6ec84f52dc838e53ed6de6903f</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.16.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">42e734a4d0c6649dc443259e884203c0a4cc715675dcfa4eab65607c13056434</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.16.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">432b33a2a743a1c8bf1b3bc8dd12eb0b00353598557a257e1ec2c8d09258a6b2</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.16.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">6542a2c8a5b798041233db1f83258c268afb572828cd3fb54ecee5eb8441be9d</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.16.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7299f1585c5abce669450a9ce7042328525f176b1e1c76949b8a545afaa44a7d</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.16.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">9c0f4b4f09278bb22febf823a351b3ba5e2bd4882ced48a30022e7fa5de5526b</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.16.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">b815ec50347f9829d5c3165de51b988636b7adad214250ba02e15f253b0c75fb</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.16.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f344a00a0be3251e850968d6d27919b5d7468ff7b389e41051f4ba31bd3cb129</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.16.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f9287b6ed3cbd3a9a58285792387227252f8a296ef601ee11384781fb376d5df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7425</id>
    <title>Important: osbuild-composer security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-26 08:57:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7425" id="RHSA-2025:7425" type="rhsa" title="RHSA-2025:7425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30204" id="CVE-2025-30204" type="cve" title="CVE-2025-30204"/>
      <reference href="https://bugzilla.redhat.com/2354195" id="2354195" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7425.html" id="ALSA-2025:7425" type="self" title="ALSA-2025:7425"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="osbuild-composer-worker" version="132.2" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="osbuild-composer-132.2-1.el9_6.alma.1.src.rpm">
          <filename>osbuild-composer-worker-132.2-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">1b82f9544dfe8257184f5368cec49cfb6978550883080e5a3bdc579b878efc6e</sum>
        </package>
        <package name="osbuild-composer-core" version="132.2" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="osbuild-composer-132.2-1.el9_6.alma.1.src.rpm">
          <filename>osbuild-composer-core-132.2-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">3e1dbd9e0bea2eeb117235a82a9094ed696c958e70b97fa1d69e18512563da64</sum>
        </package>
        <package name="osbuild-composer" version="132.2" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="osbuild-composer-132.2-1.el9_6.alma.1.src.rpm">
          <filename>osbuild-composer-132.2-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">a27cec4478b081337f4dc2b8f36c5f456c3a4a79adce55a7c7ef0b7577d131b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7426</id>
    <title>Moderate: nodejs:20 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 12:59:43"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * c-ares: c-ares has a use-after-free in read_answers() (CVE-2025-31498)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7426" id="RHSA-2025:7426" type="rhsa" title="RHSA-2025:7426"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31498" id="CVE-2025-31498" type="cve" title="CVE-2025-31498"/>
      <reference href="https://bugzilla.redhat.com/2358271" id="2358271" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7426.html" id="ALSA-2025:7426" type="self" title="ALSA-2025:7426"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <module name="nodejs" stream="20" version="9060020250513150515" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-devel" version="20.19.1" release="1.module_el9.6.0+163+d268fe53" epoch="1" arch="s390x" src="nodejs-20.19.1-1.module_el9.6.0+163+d268fe53.src.rpm">
          <filename>nodejs-devel-20.19.1-1.module_el9.6.0+163+d268fe53.s390x.rpm</filename>
          <sum type="sha256">1c9068375f3fb612d6f7631e1fad66cfc9af7d4a3dda32bc5483c804324f4c6c</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.5.0+125+8dc38870" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.noarch.rpm</filename>
          <sum type="sha256">572b82ee164b85ffef41f974897332716b428e341e262a4ccdd71a9c87312648</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.6.0+162+8dc602e5" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.6.0+162+8dc602e5.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.6.0+162+8dc602e5.noarch.rpm</filename>
          <sum type="sha256">6197cdbcfccc2266f0d5e47e8b739375ef169fae31d46948b204964782b971f1</sum>
        </package>
        <package name="nodejs-docs" version="20.19.1" release="1.module_el9.6.0+163+d268fe53" epoch="1" arch="noarch" src="nodejs-20.19.1-1.module_el9.6.0+163+d268fe53.src.rpm">
          <filename>nodejs-docs-20.19.1-1.module_el9.6.0+163+d268fe53.noarch.rpm</filename>
          <sum type="sha256">65089a5aa3fab3affc41821e4dce9ae1e28d5b1f0b194fd80e7e08982e057ff0</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.6.0+162+8dc602e5" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.6.0+162+8dc602e5.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.6.0+162+8dc602e5.noarch.rpm</filename>
          <sum type="sha256">8672933a8a01356064a9acc4450fbb8322915abb9f7a09bb4979cc9c3695dfcf</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.19.1" release="1.module_el9.6.0+163+d268fe53" epoch="1" arch="s390x" src="nodejs-20.19.1-1.module_el9.6.0+163+d268fe53.src.rpm">
          <filename>nodejs-full-i18n-20.19.1-1.module_el9.6.0+163+d268fe53.s390x.rpm</filename>
          <sum type="sha256">b7e2e337413d32d8d8a4d4e08919225429ebd8f16fbbd18ab9a1ae7e707553b5</sum>
        </package>
        <package name="npm" version="10.8.2" release="1.20.19.1.1.module_el9.6.0+163+d268fe53" epoch="1" arch="s390x" src="nodejs-20.19.1-1.module_el9.6.0+163+d268fe53.src.rpm">
          <filename>npm-10.8.2-1.20.19.1.1.module_el9.6.0+163+d268fe53.s390x.rpm</filename>
          <sum type="sha256">e2876bb2948122b9c56a61ab827987a43f3e84a148195ea97d5ab2068da3eb18</sum>
        </package>
        <package name="nodejs" version="20.19.1" release="1.module_el9.6.0+163+d268fe53" epoch="1" arch="s390x" src="nodejs-20.19.1-1.module_el9.6.0+163+d268fe53.src.rpm">
          <filename>nodejs-20.19.1-1.module_el9.6.0+163+d268fe53.s390x.rpm</filename>
          <sum type="sha256">e9db8c4600922b0f1fac0fbcd779bdde3b7479a6a455fb12f2928f1cd88bcf30</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7427</id>
    <title>Low: xterm security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:40:46"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>xterm security update</summary>
    <description>The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly.   

Security Fix(es):  

  * xterm: code execution via OSC 50 input sequences (CVE-2022-45063)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7427" id="RHSA-2025:7427" type="rhsa" title="RHSA-2025:7427"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45063" id="CVE-2022-45063" type="cve" title="CVE-2022-45063"/>
      <reference href="https://bugzilla.redhat.com/2142474" id="2142474" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7427.html" id="ALSA-2025:7427" type="self" title="ALSA-2025:7427"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="xterm" version="366" release="10.el9_6" epoch="0" arch="s390x" src="xterm-366-10.el9_6.src.rpm">
          <filename>xterm-366-10.el9_6.s390x.rpm</filename>
          <sum type="sha256">204c7b4bddd095242c99f09f558abd3ed8e35eeadcfe1c66e7e94b8091eff9a1</sum>
        </package>
        <package name="xterm-resize" version="366" release="10.el9_6" epoch="0" arch="s390x" src="xterm-366-10.el9_6.src.rpm">
          <filename>xterm-resize-366-10.el9_6.s390x.rpm</filename>
          <sum type="sha256">bd7d471c40f819b295a2f437cbabe7325a06ad40f597e8eed50012a691fa6ee7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7428</id>
    <title>Important: firefox security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:40:46"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Privilege escalation in Firefox Updater (CVE-2025-2817)
  * firefox: thunderbird: Unsafe attribute access during XPath parsing (CVE-2025-4087)
  * firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames (CVE-2025-4083)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 (CVE-2025-4091)
  * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 (CVE-2025-4093)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7428" id="RHSA-2025:7428" type="rhsa" title="RHSA-2025:7428"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2817" id="CVE-2025-2817" type="cve" title="CVE-2025-2817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4083" id="CVE-2025-4083" type="cve" title="CVE-2025-4083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4087" id="CVE-2025-4087" type="cve" title="CVE-2025-4087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4091" id="CVE-2025-4091" type="cve" title="CVE-2025-4091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4093" id="CVE-2025-4093" type="cve" title="CVE-2025-4093"/>
      <reference href="https://bugzilla.redhat.com/2362902" id="2362902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362904" id="2362904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362907" id="2362907" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362912" id="2362912" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362915" id="2362915" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7428.html" id="ALSA-2025:7428" type="self" title="ALSA-2025:7428"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="firefox" version="128.10.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-128.10.0-1.el9_6.alma.1.src.rpm">
          <filename>firefox-128.10.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">5f4d7d4f5cee5ea9fe4ea404e28672d99a7537ab2e2e9747c9f49cf8662bb61c</sum>
        </package>
        <package name="firefox-x11" version="128.10.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-128.10.0-1.el9_6.alma.1.src.rpm">
          <filename>firefox-x11-128.10.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">bf73e4c87ab1d1e537766026e7d3270ecd2f07cf1ed9ff7f19b672b08f4e391c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7429</id>
    <title>Important: redis:7 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:41:10"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis:7 security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client (CVE-2025-21605)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7429" id="RHSA-2025:7429" type="rhsa" title="RHSA-2025:7429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21605" id="CVE-2025-21605" type="cve" title="CVE-2025-21605"/>
      <reference href="https://bugzilla.redhat.com/2361883" id="2361883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7429.html" id="ALSA-2025:7429" type="self" title="ALSA-2025:7429"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <module name="redis" stream="7" version="9060020250514095852" context="8cf767d6" arch="s390x"/>
        <package name="redis-devel" version="7.2.8" release="1.module_el9.6.0+168+b8d8e900" epoch="0" arch="s390x" src="redis-7.2.8-1.module_el9.6.0+168+b8d8e900.src.rpm">
          <filename>redis-devel-7.2.8-1.module_el9.6.0+168+b8d8e900.s390x.rpm</filename>
          <sum type="sha256">7bd40a979abf54ea58247a015835d658b8f11be409cb2ea9335613acea9fec24</sum>
        </package>
        <package name="redis" version="7.2.8" release="1.module_el9.6.0+168+b8d8e900" epoch="0" arch="s390x" src="redis-7.2.8-1.module_el9.6.0+168+b8d8e900.src.rpm">
          <filename>redis-7.2.8-1.module_el9.6.0+168+b8d8e900.s390x.rpm</filename>
          <sum type="sha256">85229fd47ee2355f45f52d9f854784b13caf168d33bb60764158c426c33df4fe</sum>
        </package>
        <package name="redis-doc" version="7.2.8" release="1.module_el9.6.0+168+b8d8e900" epoch="0" arch="noarch" src="redis-7.2.8-1.module_el9.6.0+168+b8d8e900.src.rpm">
          <filename>redis-doc-7.2.8-1.module_el9.6.0+168+b8d8e900.noarch.rpm</filename>
          <sum type="sha256">85258f80ee5fce874b978c6ba6d16bc5341167a148e6bdb4ea5186e05c6d2623</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7430</id>
    <title>Important: yelp security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:37:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>yelp security update</summary>
    <description>Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.  

Security Fix(es):  

  * yelp: Arbitrary file read (CVE-2025-3155)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7430" id="RHSA-2025:7430" type="rhsa" title="RHSA-2025:7430"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3155" id="CVE-2025-3155" type="cve" title="CVE-2025-3155"/>
      <reference href="https://bugzilla.redhat.com/2357091" id="2357091" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7430.html" id="ALSA-2025:7430" type="self" title="ALSA-2025:7430"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="yelp-libs" version="40.3" release="2.el9_6.1" epoch="2" arch="s390x" src="yelp-40.3-2.el9_6.1.src.rpm">
          <filename>yelp-libs-40.3-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">06e0b94b920465e79f384ea6a15c0737355547594b0cb1221111393c3446327f</sum>
        </package>
        <package name="yelp" version="40.3" release="2.el9_6.1" epoch="2" arch="s390x" src="yelp-40.3-2.el9_6.1.src.rpm">
          <filename>yelp-40.3-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">74cbbbc803d467a32e90bf5ef65811dfdf79ad2801314395fdb9204dff25bdd8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7431</id>
    <title>Moderate: php security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:35:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)
  * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)
  * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)
  * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)
  * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7431" id="RHSA-2025:7431" type="rhsa" title="RHSA-2025:7431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1217" id="CVE-2025-1217" type="cve" title="CVE-2025-1217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1219" id="CVE-2025-1219" type="cve" title="CVE-2025-1219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1734" id="CVE-2025-1734" type="cve" title="CVE-2025-1734"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1736" id="CVE-2025-1736" type="cve" title="CVE-2025-1736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1861" id="CVE-2025-1861" type="cve" title="CVE-2025-1861"/>
      <reference href="https://bugzilla.redhat.com/2355917" id="2355917" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356041" id="2356041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356042" id="2356042" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356043" id="2356043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356046" id="2356046" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7431.html" id="ALSA-2025:7431" type="self" title="ALSA-2025:7431"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="php-pdo" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-pdo-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">1c0ef7720a26e330f35803b5b8bbef05d5ea3e03a8a6c789a6bcf6bd51a575e5</sum>
        </package>
        <package name="php-enchant" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-enchant-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">261f8c0935edb320be8c2d23a973d8589e04f3c8b6d757b6ac9e5b77a805fbed</sum>
        </package>
        <package name="php-xml" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-xml-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">306a960f10c072e4e007237025a757c34cac96ebf3841108a7e69850e4c75e7c</sum>
        </package>
        <package name="php-cli" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-cli-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">33e60022f2a6915837327827bd3baffef075c8278eb4152fde94b3e4853a5f74</sum>
        </package>
        <package name="php-mbstring" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-mbstring-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">3ab085f98f5f1236e399e7ddf2000022ce2751167df93f90979e421e1c7ca6ab</sum>
        </package>
        <package name="php-devel" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-devel-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">3e27856f685d426667eb2bb466311807811f9ab8f5ead54baa96d7e342eb7010</sum>
        </package>
        <package name="php" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">41db6a1f0998bd94ff73b87fb918ea1d646b662345a519ee9711545f351e7044</sum>
        </package>
        <package name="php-dbg" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-dbg-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">5e4014d0ef98156d250c066ba5351b5e60d5be135c004b67204e147f227b456b</sum>
        </package>
        <package name="php-odbc" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-odbc-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">5f77a1cc9e4523e11393a07108d5de38cb98c7cb6bc8980526bef79292a81fd1</sum>
        </package>
        <package name="php-bcmath" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-bcmath-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">678652ac6873a016213560efcefe8263947e6f9561be614da284517e874c008b</sum>
        </package>
        <package name="php-process" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-process-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">b51bbc7bb77bd1ea1f02831446d7580d3488080ba5e2326e5b37680d984dbf67</sum>
        </package>
        <package name="php-common" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-common-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">b56fff4f8f2830509154bdb47fce09a1820e12577efb0351561478ef8b893482</sum>
        </package>
        <package name="php-intl" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-intl-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">b63b75d390585f079b0e7cab3bbdf1f80feda4f8be3a1d14cb02e3ef5a3ccd63</sum>
        </package>
        <package name="php-opcache" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-opcache-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">bd63e51106117de0d828c6398963068b61a78b1631735702ae69feafe54308db</sum>
        </package>
        <package name="php-ldap" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-ldap-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">be77bb45742aef6ea4491a00ce7d886a1a09a95ad130122998bb7e427bf3731a</sum>
        </package>
        <package name="php-ffi" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-ffi-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">bf06abbdc5e369f08d1340c46c2e0c78574cecc955ad5e6bd1550b7dfb05c52a</sum>
        </package>
        <package name="php-soap" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-soap-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">c1fc00e38b0f0a0c230579e2222d0e9665114428bc69ab696d772e0cc6fc085e</sum>
        </package>
        <package name="php-mysqlnd" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-mysqlnd-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">c20d2168fcf1cec41c90194f7da2dd1dfdeb68eee016d5f2e63ca020eed7249f</sum>
        </package>
        <package name="php-snmp" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-snmp-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">c262daef33a384d1263650214fd9736b24dcafe069f7d71be6dfc3ce93e6e765</sum>
        </package>
        <package name="php-gd" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-gd-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">ccf106ef9f2bb14d7714c13d9c033864acd7533a5fd46da0825850f4ad6585f0</sum>
        </package>
        <package name="php-gmp" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-gmp-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">cdb505d42d289fab3275c6862bd4c68723999791d862111dd7cd90021c108e31</sum>
        </package>
        <package name="php-dba" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-dba-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">e56ff3d503ec12163371c6972a3f5d382f52137de6ce7652ad6202830167d7a8</sum>
        </package>
        <package name="php-fpm" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-fpm-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">eab280c80c95ccf7ca534c3dca248f2b7ce36dc37f50e800b70ff1cabf540aff</sum>
        </package>
        <package name="php-pgsql" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-pgsql-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">f9472599bde4257a8c39b06ffa85fa7e74b296d40133446313047104e175adca</sum>
        </package>
        <package name="php-embedded" version="8.0.30" release="3.el9_6" epoch="0" arch="s390x" src="php-8.0.30-3.el9_6.src.rpm">
          <filename>php-embedded-8.0.30-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">fffafdda85b9ac34958c9cd6ec34a5d92fa606f2b0410be4118445e9661be548</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7432</id>
    <title>Moderate: php:8.2 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 12:57:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:8.2 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929)
  * php: Single byte overread with convert.quoted-printable-decode filter (CVE-2024-11233)
  * php: Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVE-2024-11234)
  * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)
  * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)
  * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)
  * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)
  * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7432" id="RHSA-2025:7432" type="rhsa" title="RHSA-2025:7432"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11233" id="CVE-2024-11233" type="cve" title="CVE-2024-11233"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11234" id="CVE-2024-11234" type="cve" title="CVE-2024-11234"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8929" id="CVE-2024-8929" type="cve" title="CVE-2024-8929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1217" id="CVE-2025-1217" type="cve" title="CVE-2025-1217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1219" id="CVE-2025-1219" type="cve" title="CVE-2025-1219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1734" id="CVE-2025-1734" type="cve" title="CVE-2025-1734"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1736" id="CVE-2025-1736" type="cve" title="CVE-2025-1736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1861" id="CVE-2025-1861" type="cve" title="CVE-2025-1861"/>
      <reference href="https://bugzilla.redhat.com/2327960" id="2327960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328521" id="2328521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328523" id="2328523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2355917" id="2355917" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356041" id="2356041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356042" id="2356042" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356043" id="2356043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356046" id="2356046" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7432.html" id="ALSA-2025:7432" type="self" title="ALSA-2025:7432"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <module name="php" stream="8.2" version="9040020240403183013" context="8cf767d6" arch="s390x"/>
        <package name="php-snmp" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-snmp-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">04b708db50c8cb238948cc6d5ae86affe31a0395a66537205a450c7e3013d2b4</sum>
        </package>
        <package name="php-soap" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-soap-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">08c08b79db71447d6c3da9bbc828577a5db6c29ec97e82beec35f1017d3db23e</sum>
        </package>
        <package name="php-mysqlnd" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-mysqlnd-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">193dd66f89a5a0beaefa80a683a70e0216adb290f3ba29f7de191813127aa948</sum>
        </package>
        <package name="php-enchant" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-enchant-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">20168327d65f049238f51e63ac246ba9ed8c5f4f0dab98b737f0b6077c8ca84e</sum>
        </package>
        <package name="php-fpm" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-fpm-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">2f6035d69bbc2081f66bfc0d17cc82f7749c9e047863e8a961e2bede4a58f2c5</sum>
        </package>
        <package name="php-common" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-common-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">3568865110ed749e7de5d990fb7680025686df81ed7543a103e4dcce04630e46</sum>
        </package>
        <package name="php-cli" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-cli-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">376366cec63af1df2cd79a05fbe46ee64d85c3e65310a5ae9909a28d214e83bd</sum>
        </package>
        <package name="php-dbg" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-dbg-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">494e6841bfffae77cf0f676028337a5b0c621992323c58aa75c1d5dac5562ef1</sum>
        </package>
        <package name="apcu-panel" version="5.1.23" release="1.module_el9.4.0+65+49ff6472" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm</filename>
          <sum type="sha256">4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921</sum>
        </package>
        <package name="php-gmp" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-gmp-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">4f6980225ebc63137ba1f6255089321dd0067eed6b9333f0fb1cb743357d38a6</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="4.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">5b553811ce76e365f333f05af308acce947d19a48bafe82f02023b4b9de8b683</sum>
        </package>
        <package name="php-opcache" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-opcache-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">6492791993f30a60f7f84a681d34782fbf5a6fced4f9a25e7ba8b5cdd66d01de</sum>
        </package>
        <package name="php-mbstring" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-mbstring-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">6cf1e498fbe13e7c408e96b606bcb79555c1e23e85ba5f75f54b3b995d45f379</sum>
        </package>
        <package name="php-pecl-zip" version="1.22.3" release="1.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">7febf476c58e0ac97a968fde5b92f0dd64ac7c932351ae9c689cc6ea9c8e787a</sum>
        </package>
        <package name="php" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">833087dbb9c0ff410acca4459b3316ed1aabc8c33d0ddcb03a8b3f2b7cda33dd</sum>
        </package>
        <package name="php-devel" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-devel-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">8a89c099bfa468e7ef369bd52f25a23812229ae2561fd1e59a5240ffc9fab6ed</sum>
        </package>
        <package name="php-embedded" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-embedded-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">99a5d9278bd0a619c28ac165802f2a31a37bef735e38111d98d4ec32ddfbbcfd</sum>
        </package>
        <package name="php-dba" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-dba-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">9f385267189910cd2fab7d35feaba24b1098a2924c03ae112560c42e7d409c45</sum>
        </package>
        <package name="php-xml" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-xml-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">a2812b5c1612db18a3eae75b7167a6c507f22ac02b4bac2e44384c58aaa5fa31</sum>
        </package>
        <package name="php-intl" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-intl-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">a365eed127eeb079e6f6b0d46136f98d40052c901685260aa46576c8a26f7a61</sum>
        </package>
        <package name="php-gd" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-gd-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">a6d9584f534589e8e34ee5d25e71c6b27435d443052038213376ce92df373d3a</sum>
        </package>
        <package name="php-ffi" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-ffi-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">ae3651bb4f9491e47ba770bf1b7e70243eb7f4636786f0795d2ad4a9c8cea46b</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.23" release="1.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">aee42951e556eb8ecf40f0c5fe40c53a1ae9f3285ee2bfa7a4169ff85ae7642c</sum>
        </package>
        <package name="php-odbc" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-odbc-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">b6523e84c3e389a260c253abfa865f5a06eb05ebda8cb919802229c0bd09a527</sum>
        </package>
        <package name="php-pgsql" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-pgsql-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">ba2171c5a6848bf5f2d7ac3b071dcaf24739e817ad1e7f5ecc131368dd7331ff</sum>
        </package>
        <package name="php-pdo" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-pdo-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">cb6e0d5d1f10db09e40f7d3d07b884b474fe735d61907f9b8ea09a94ad8d467c</sum>
        </package>
        <package name="php-bcmath" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-bcmath-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">cd6d318d1ad3a07b3ddd065354fdad522a2c5b9a2f6b1e441e0a1cfede3e7e2a</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.2.2" release="2.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">e6bab0e873b7c6300e4e9a467194aa281a3cd256394b4e29f718563c8ac738eb</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.23" release="1.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">e9121b1ec8edb80b93180e40236eed42c16907d15021356dac19b0b85a7c349d</sum>
        </package>
        <package name="php-process" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-process-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">eb1d8f528b6f688fc3ee420d1a6b51bfeb49a608c8c4cf04f35734d31da65772</sum>
        </package>
        <package name="php-ldap" version="8.2.28" release="1.module_el9.6.0+165+cf879a7c" epoch="0" arch="s390x" src="php-8.2.28-1.module_el9.6.0+165+cf879a7c.src.rpm">
          <filename>php-ldap-8.2.28-1.module_el9.6.0+165+cf879a7c.s390x.rpm</filename>
          <sum type="sha256">fb227ca5c98ca71812d4ae698962818a6f7edf9d33afa5686bd8dcd483078ccb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7433</id>
    <title>Important: nodejs:22 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:31:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * c-ares: c-ares has a use-after-free in read_answers() (CVE-2025-31498)
  * SQLite: integer overflow in SQLite (CVE-2025-3277)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7433" id="RHSA-2025:7433" type="rhsa" title="RHSA-2025:7433"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31498" id="CVE-2025-31498" type="cve" title="CVE-2025-31498"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3277" id="CVE-2025-3277" type="cve" title="CVE-2025-3277"/>
      <reference href="https://bugzilla.redhat.com/2358271" id="2358271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359553" id="2359553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7433.html" id="ALSA-2025:7433" type="self" title="ALSA-2025:7433"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <module name="nodejs" stream="22" version="9060020250513150837" context="8cf767d6" arch="s390x"/>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.15.0.1.module_el9.6.0+164+2d89b8ed" epoch="3" arch="s390x" src="nodejs-22.15.0-1.module_el9.6.0+164+2d89b8ed.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.15.0.1.module_el9.6.0+164+2d89b8ed.s390x.rpm</filename>
          <sum type="sha256">065fa19c0775665be55d593c08c5cf10467b6cc55d72d34dbd97aeb4de98e12b</sum>
        </package>
        <package name="nodejs-full-i18n" version="22.15.0" release="1.module_el9.6.0+164+2d89b8ed" epoch="1" arch="s390x" src="nodejs-22.15.0-1.module_el9.6.0+164+2d89b8ed.src.rpm">
          <filename>nodejs-full-i18n-22.15.0-1.module_el9.6.0+164+2d89b8ed.s390x.rpm</filename>
          <sum type="sha256">15d009b345f8f046ccc3a29b49755fca8bf5c1b756a2751f5e7fdb22d0f1e2c4</sum>
        </package>
        <package name="nodejs" version="22.15.0" release="1.module_el9.6.0+164+2d89b8ed" epoch="1" arch="s390x" src="nodejs-22.15.0-1.module_el9.6.0+164+2d89b8ed.src.rpm">
          <filename>nodejs-22.15.0-1.module_el9.6.0+164+2d89b8ed.s390x.rpm</filename>
          <sum type="sha256">16a5e40a03c942f1ca5ad22237d873cf9f8999676a11d171678b93adbadcbe67</sum>
        </package>
        <package name="nodejs-docs" version="22.15.0" release="1.module_el9.6.0+164+2d89b8ed" epoch="1" arch="noarch" src="nodejs-22.15.0-1.module_el9.6.0+164+2d89b8ed.src.rpm">
          <filename>nodejs-docs-22.15.0-1.module_el9.6.0+164+2d89b8ed.noarch.rpm</filename>
          <sum type="sha256">1880c5472b26a1ac86d5040c678e1769947bbbf50632e14d88ece1340af55821</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.5.0+139+09296491" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.5.0+139+09296491.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.5.0+139+09296491.noarch.rpm</filename>
          <sum type="sha256">6e5d4948e23b3a31194068e1ab1968e235602adad4a5d271b6287c52aa829d20</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.5.0+139+09296491" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.5.0+139+09296491.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm</filename>
          <sum type="sha256">6e5dbe8d2424ac728aebdaf575e4c092cf200795835ba3f46a27b4be8e757a2a</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.5.0+139+09296491" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.5.0+139+09296491.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm</filename>
          <sum type="sha256">8d55336a92da679c52d1360312b8a8816a753687bce70e3efcb80ca181d76662</sum>
        </package>
        <package name="nodejs-libs" version="22.15.0" release="1.module_el9.6.0+164+2d89b8ed" epoch="1" arch="s390x" src="nodejs-22.15.0-1.module_el9.6.0+164+2d89b8ed.src.rpm">
          <filename>nodejs-libs-22.15.0-1.module_el9.6.0+164+2d89b8ed.s390x.rpm</filename>
          <sum type="sha256">a08ff832159b147881592da6647013f5f801699a9fde6373fa9d97f27c84d482</sum>
        </package>
        <package name="npm" version="10.9.2" release="1.22.15.0.1.module_el9.6.0+164+2d89b8ed" epoch="1" arch="s390x" src="nodejs-22.15.0-1.module_el9.6.0+164+2d89b8ed.src.rpm">
          <filename>npm-10.9.2-1.22.15.0.1.module_el9.6.0+164+2d89b8ed.s390x.rpm</filename>
          <sum type="sha256">cc418dd3a4673313941b5e36e40576b80c034af6aa8f0c0dd537e3ddd24859b0</sum>
        </package>
        <package name="nodejs-devel" version="22.15.0" release="1.module_el9.6.0+164+2d89b8ed" epoch="1" arch="s390x" src="nodejs-22.15.0-1.module_el9.6.0+164+2d89b8ed.src.rpm">
          <filename>nodejs-devel-22.15.0-1.module_el9.6.0+164+2d89b8ed.s390x.rpm</filename>
          <sum type="sha256">efb13421165b83f09c7799662e95b50f2bf43852ff7d61760e53bcaa06504aa0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7435</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:27:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * thunderbird: User Interface (UI) Misrepresentation of attachment URL (CVE-2025-3523)
  * thunderbird: Information Disclosure of /tmp directory listing (CVE-2025-2830)
  * thunderbird: Leak of hashed Window credentials via crafted attachment URL (CVE-2025-3522)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7435" id="RHSA-2025:7435" type="rhsa" title="RHSA-2025:7435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2830" id="CVE-2025-2830" type="cve" title="CVE-2025-2830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3522" id="CVE-2025-3522" type="cve" title="CVE-2025-3522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3523" id="CVE-2025-3523" type="cve" title="CVE-2025-3523"/>
      <reference href="https://bugzilla.redhat.com/2359786" id="2359786" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359789" id="2359789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359793" id="2359793" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7435.html" id="ALSA-2025:7435" type="self" title="ALSA-2025:7435"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="thunderbird" version="128.10.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="thunderbird-128.10.0-1.el9_6.alma.1.src.rpm">
          <filename>thunderbird-128.10.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">fab03adecc992a122d25a4943ca5b6382761847e39f1d8ec61bd8c32eb7dbbcb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7436</id>
    <title>Important: libsoup security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:26:06"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)
  * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)
  * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)
  * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)
  * libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header (CVE-2025-32907)
  * libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value (CVE-2025-32911)
  * libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header (CVE-2025-32913)
  * libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server (CVE-2025-46421)
  * libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c (CVE-2025-46420)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7436" id="RHSA-2025:7436" type="rhsa" title="RHSA-2025:7436"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32050" id="CVE-2025-32050" type="cve" title="CVE-2025-32050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32052" id="CVE-2025-32052" type="cve" title="CVE-2025-32052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32053" id="CVE-2025-32053" type="cve" title="CVE-2025-32053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32906" id="CVE-2025-32906" type="cve" title="CVE-2025-32906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32907" id="CVE-2025-32907" type="cve" title="CVE-2025-32907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32911" id="CVE-2025-32911" type="cve" title="CVE-2025-32911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32913" id="CVE-2025-32913" type="cve" title="CVE-2025-32913"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46420" id="CVE-2025-46420" type="cve" title="CVE-2025-46420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46421" id="CVE-2025-46421" type="cve" title="CVE-2025-46421"/>
      <reference href="https://bugzilla.redhat.com/2357067" id="2357067" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357069" id="2357069" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357070" id="2357070" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359341" id="2359341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359342" id="2359342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359355" id="2359355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359357" id="2359357" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2361962" id="2361962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2361963" id="2361963" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7436.html" id="ALSA-2025:7436" type="self" title="ALSA-2025:7436"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libsoup" version="2.72.0" release="10.el9_6.1" epoch="0" arch="s390x" src="libsoup-2.72.0-10.el9_6.1.src.rpm">
          <filename>libsoup-2.72.0-10.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">a71c9c626bb96f1502b5358cb212db3ea6a0ee416fe0e4a25795867b5fcb89a0</sum>
        </package>
        <package name="libsoup-devel" version="2.72.0" release="10.el9_6.1" epoch="0" arch="s390x" src="libsoup-2.72.0-10.el9_6.1.src.rpm">
          <filename>libsoup-devel-2.72.0-10.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">f66219d4cdd315b9265f2451ff75c4120514939c869eb441c3be576e37660fc6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7437</id>
    <title>Moderate: avahi security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:23:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.  

Security Fix(es):  

  * avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7437" id="RHSA-2025:7437" type="rhsa" title="RHSA-2025:7437"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52616" id="CVE-2024-52616" type="cve" title="CVE-2024-52616"/>
      <reference href="https://bugzilla.redhat.com/2326429" id="2326429" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7437.html" id="ALSA-2025:7437" type="self" title="ALSA-2025:7437"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="avahi-autoipd" version="0.8" release="22.el9_6" epoch="0" arch="s390x" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-autoipd-0.8-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">2b8f4c48c0bac58a063b9b7eb39abee37be2d0184bb1517b473ef3b97cf1565e</sum>
        </package>
        <package name="avahi-glib" version="0.8" release="22.el9_6" epoch="0" arch="s390x" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-glib-0.8-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">37b8139d8a7bb62c8f228bc43919eaaebe859e52ad788eec11b91a8affce57d1</sum>
        </package>
        <package name="avahi-tools" version="0.8" release="22.el9_6" epoch="0" arch="s390x" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-tools-0.8-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">a247aed3dcbeb609924b15b53c8390151b3265a5f551ae1c376fd0dd5d12fa77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7438</id>
    <title>Important: redis security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:21:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client (CVE-2025-21605)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7438" id="RHSA-2025:7438" type="rhsa" title="RHSA-2025:7438"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21605" id="CVE-2025-21605" type="cve" title="CVE-2025-21605"/>
      <reference href="https://bugzilla.redhat.com/2361883" id="2361883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7438.html" id="ALSA-2025:7438" type="self" title="ALSA-2025:7438"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="redis-devel" version="6.2.18" release="1.el9_6" epoch="0" arch="s390x" src="redis-6.2.18-1.el9_6.src.rpm">
          <filename>redis-devel-6.2.18-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2cd19bd82599572b0b9a265e05d5cf02a7c7782a37743647165d61dc534db24f</sum>
        </package>
        <package name="redis-doc" version="6.2.18" release="1.el9_6" epoch="0" arch="noarch" src="redis-6.2.18-1.el9_6.src.rpm">
          <filename>redis-doc-6.2.18-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">93eba1abf4201f69279dacf970ad71d66d6f2b0a01c67c11612070a57824abb7</sum>
        </package>
        <package name="redis" version="6.2.18" release="1.el9_6" epoch="0" arch="s390x" src="redis-6.2.18-1.el9_6.src.rpm">
          <filename>redis-6.2.18-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d0feee595cd54500a2984799be626ac63178b848a343c68a72f559b7fbca5243</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7440</id>
    <title>Low: vim security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:19:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: use-after-free in function ins_compl_get_exp in vim/vim (CVE-2023-4752)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7440" id="RHSA-2025:7440" type="rhsa" title="RHSA-2025:7440"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4752" id="CVE-2023-4752" type="cve" title="CVE-2023-4752"/>
      <reference href="https://bugzilla.redhat.com/2237311" id="2237311" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7440.html" id="ALSA-2025:7440" type="self" title="ALSA-2025:7440"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="vim-X11" version="8.2.2637" release="22.el9_6" epoch="2" arch="s390x" src="vim-8.2.2637-22.el9_6.src.rpm">
          <filename>vim-X11-8.2.2637-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">195797413b5c752659d2dc594473d7cc5355034f99d4ff3e93edb52f1415b2b7</sum>
        </package>
        <package name="vim-enhanced" version="8.2.2637" release="22.el9_6" epoch="2" arch="s390x" src="vim-8.2.2637-22.el9_6.src.rpm">
          <filename>vim-enhanced-8.2.2637-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">4c4434bb43f74ff5623f2af72e552d588e311497b4d895dbd235c9c06d53e7ee</sum>
        </package>
        <package name="vim-common" version="8.2.2637" release="22.el9_6" epoch="2" arch="s390x" src="vim-8.2.2637-22.el9_6.src.rpm">
          <filename>vim-common-8.2.2637-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">6310f683078083e4b7dcbe1b4ac980f81676340b98a5b585c2229c8adef51f92</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7444</id>
    <title>Moderate: expat security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:16:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.  

Security Fix(es):  

  * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7444" id="RHSA-2025:7444" type="rhsa" title="RHSA-2025:7444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8176" id="CVE-2024-8176" type="cve" title="CVE-2024-8176"/>
      <reference href="https://bugzilla.redhat.com/2310137" id="2310137" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7444.html" id="ALSA-2025:7444" type="self" title="ALSA-2025:7444"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="expat-devel" version="2.5.0" release="5.el9_6" epoch="0" arch="s390x" src="expat-2.5.0-5.el9_6.src.rpm">
          <filename>expat-devel-2.5.0-5.el9_6.s390x.rpm</filename>
          <sum type="sha256">17d95f7c57caec3961bd9e41412dc31ce20e82f28550e9bc4f6ab221a5e8100d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7586</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-07-02 12:13:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.  

Security Fix(es):  

  * Ghostscript: NPDL device: Compression buffer overflow (CVE-2025-27832)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7586" id="RHSA-2025:7586" type="rhsa" title="RHSA-2025:7586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27832" id="CVE-2025-27832" type="cve" title="CVE-2025-27832"/>
      <reference href="https://bugzilla.redhat.com/2354949" id="2354949" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7586.html" id="ALSA-2025:7586" type="self" title="ALSA-2025:7586"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libgs" version="9.54.0" release="19.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-19.el9_6.src.rpm">
          <filename>libgs-9.54.0-19.el9_6.s390x.rpm</filename>
          <sum type="sha256">52b4f744f577f8f134cfa0a38fac0f379738d76a6475bc289775d27604f606f3</sum>
        </package>
        <package name="ghostscript-doc" version="9.54.0" release="19.el9_6" epoch="0" arch="noarch" src="ghostscript-9.54.0-19.el9_6.src.rpm">
          <filename>ghostscript-doc-9.54.0-19.el9_6.noarch.rpm</filename>
          <sum type="sha256">551d86602a2f8eb57ad2d61c751a476604b9b177c0b8b70b558e0cc48af02691</sum>
        </package>
        <package name="ghostscript-tools-fonts" version="9.54.0" release="19.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-19.el9_6.src.rpm">
          <filename>ghostscript-tools-fonts-9.54.0-19.el9_6.s390x.rpm</filename>
          <sum type="sha256">57b3fda46d02e58e9d0e788946851d849fe5d4801473a2d4f1060f574c289064</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.54.0" release="19.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-19.el9_6.src.rpm">
          <filename>ghostscript-tools-printing-9.54.0-19.el9_6.s390x.rpm</filename>
          <sum type="sha256">7328feb5a78fb2f18adac494375487ec9c0771a3f6f582db723acba5a39b8efd</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.54.0" release="19.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-19.el9_6.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.54.0-19.el9_6.s390x.rpm</filename>
          <sum type="sha256">98d27b6698aa0644d8b6b17e9090abd3af2fa54210bea1b421e756c77f7f49ff</sum>
        </package>
        <package name="ghostscript-x11" version="9.54.0" release="19.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-19.el9_6.src.rpm">
          <filename>ghostscript-x11-9.54.0-19.el9_6.s390x.rpm</filename>
          <sum type="sha256">e4ebb879cb0f7d088459af7b571cf21378b4365ceeeba9eead69cf60a5d7076b</sum>
        </package>
        <package name="ghostscript" version="9.54.0" release="19.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-19.el9_6.src.rpm">
          <filename>ghostscript-9.54.0-19.el9_6.s390x.rpm</filename>
          <sum type="sha256">eabdf7f16430721fc26112f9159844684e0c9b46aa72182e357e3cd85453a8cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7598</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-05-21 06:14:37"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.116 and .NET Runtime 8.0.16.Security Fix(es):  

  * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7598" id="RHSA-2025:7598" type="rhsa" title="RHSA-2025:7598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26646" id="CVE-2025-26646" type="cve" title="CVE-2025-26646"/>
      <reference href="https://bugzilla.redhat.com/2365317" id="2365317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7598.html" id="ALSA-2025:7598" type="self" title="ALSA-2025:7598"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.16" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el9_6.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.16-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">24a25072218d4de5f36239c66d4badb83a653f93797f67b035389a72dda4bfa2</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.16" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el9_6.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.16-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2c3776172314ab4c98b1477f22eba6303b29b0d671dee8770e82afeb5c975cfc</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.116" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el9_6.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.116-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">37850179d1a3dba805878b6075a76eb6613c2ee5e8fcd137e499383b9b64d350</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.16" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el9_6.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.16-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3b3060a15a20ee501de7bf2e98fb049f850d4d05f1f2531a3b5f1be41781180f</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.16" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el9_6.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.16-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">424a8f701bba891343eb4ee138e8a017c4a12da7c0f2d3e5cf6f59f7fc5a33f6</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.16" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el9_6.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.16-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">476cd61df28ae1b7efe7822a6584bbc55ea11617b584602f6b2253fb46f6454d</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.16" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el9_6.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.16-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4fec65b28a9ed2b3ad4b7206b58383146d36258f61845c8946a416df178c0d5c</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.116" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el9_6.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.116-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">570e5bd9c61039d54d30d8e79cccaf6054c05a64c569101dacb270ce1f6c9557</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.116" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el9_6.src.rpm">
          <filename>dotnet-templates-8.0-8.0.116-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7df260edae3b802801f471857d3ed4869c184b13aaf6fc33fc22b7ba0f63551e</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.16" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el9_6.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.16-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">893e7a1c6d42a331beeb436be7dd4b416cb210004bd72f5436f2a9a48efb7aab</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.16" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el9_6.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.16-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">eac4d969277e04c39397b012ee1f5dec6f371f76350b069a35b57e897d4bb503</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7600</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-07-02 12:10:43"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.106 and .NET Runtime 9.0.5.Security Fix(es):  

  * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7600" id="RHSA-2025:7600" type="rhsa" title="RHSA-2025:7600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26646" id="CVE-2025-26646" type="cve" title="CVE-2025-26646"/>
      <reference href="https://bugzilla.redhat.com/2365317" id="2365317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7600.html" id="ALSA-2025:7600" type="self" title="ALSA-2025:7600"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="aspnetcore-runtime-9.0" version="9.0.5" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.5-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">20a5a7a8531cdc3a91287b34b46ee09abb2eeb00abd3465a3c347a2ac992080e</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="9.0.106" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.106-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">347aa65af2156f8517dc76a729ce1125edceb146b43ef233c792167da1203c91</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.106" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.106-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">400f9063427a8281b80ebc566d5eda5dc6ba1a4a320ad340a6f28ae01087aa2e</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.5" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.5-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">529baf933343e4d1248366b52cfc0d0b84bf2a5ed3564e1e0c2b655b9e8c1abb</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.5" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.5-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">598e9da9ceaf3fb79a5900869c01b3444b7ca438494f59dc2c71933b71a90a5d</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.106" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.106-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">606e65f4a5d539686f34d05e36c808ad8dab743aeb7caeb87f2c23ce810eeb0e</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.5" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.5-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">91c1e0f8519df5d164233d3e8707df486c819cc30fa51a47c2a08aa8d24d7f96</sum>
        </package>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.5" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.5-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">95face334af04204127ed95531eb19bc52fea4b23e329954a7661f880482af7f</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.5" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.5-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">97a875c54dbcd7a75ddac3c2f95a3da5446ac66ea2c61d2174e04c8ad4dcd7c7</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.5" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.5-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c3dea2b93200bc26762971f0290815eae14abda8dc9d2f0e048d2e4b2880b935</sum>
        </package>
        <package name="dotnet-templates-9.0" version="9.0.106" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>dotnet-templates-9.0-9.0.106-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">db7b57a79c0b57658ab6ff84397d16ea31f3277ca80287b78f5bda127d920a2c</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.5" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.5-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">dd11eb9329bd2d9bc3268e9f69af2e6ec0fea347834a650a88335813fd2f241a</sum>
        </package>
        <package name="dotnet-host" version="9.0.5" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>dotnet-host-9.0.5-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e6c140b09dae98442ccde201e74d4344df7802443f55aeacf06a61338d69e9c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7672</id>
    <title>Moderate: xdg-utils security update</title>
    <issued date="2025-05-15 00:00:00"/>
    <updated date="2025-07-02 12:08:32"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xdg-utils security update</summary>
    <description>The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop.  

Security Fix(es):  

  * xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments (CVE-2022-4055)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7672" id="RHSA-2025:7672" type="rhsa" title="RHSA-2025:7672"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4055" id="CVE-2022-4055" type="cve" title="CVE-2022-4055"/>
      <reference href="https://bugzilla.redhat.com/2143792" id="2143792" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7672.html" id="ALSA-2025:7672" type="self" title="ALSA-2025:7672"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="xdg-utils" version="1.1.3" release="13.el9_6" epoch="0" arch="noarch" src="xdg-utils-1.1.3-13.el9_6.src.rpm">
          <filename>xdg-utils-1.1.3-13.el9_6.noarch.rpm</filename>
          <sum type="sha256">669fca3eba2910b6520236d569ff2529ba37d645ce73502fc68b69d720419342</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7893</id>
    <title>Important: grafana security update</title>
    <issued date="2025-05-19 00:00:00"/>
    <updated date="2025-05-26 08:56:37"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect (CVE-2025-4123)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7893" id="RHSA-2025:7893" type="rhsa" title="RHSA-2025:7893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4123" id="CVE-2025-4123" type="cve" title="CVE-2025-4123"/>
      <reference href="https://bugzilla.redhat.com/2364632" id="2364632" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7893.html" id="ALSA-2025:7893" type="self" title="ALSA-2025:7893"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="grafana" version="10.2.6" release="13.el9_6" epoch="0" arch="s390x" src="grafana-10.2.6-13.el9_6.src.rpm">
          <filename>grafana-10.2.6-13.el9_6.s390x.rpm</filename>
          <sum type="sha256">b154693acc522efe72503b635d0683df3c15a35553411e27e8769288aad8a33c</sum>
        </package>
        <package name="grafana-selinux" version="10.2.6" release="13.el9_6" epoch="0" arch="s390x" src="grafana-10.2.6-13.el9_6.src.rpm">
          <filename>grafana-selinux-10.2.6-13.el9_6.s390x.rpm</filename>
          <sum type="sha256">b5ea7f5d7584d622c9306b8c2509d1d399e0aac5c7bf24bcbb436f107c0cd32e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7903</id>
    <title>Important: kernel security update</title>
    <issued date="2025-05-19 00:00:00"/>
    <updated date="2025-05-26 08:50:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756)
  * kernel: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CVE-2025-21966)
  * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7903" id="RHSA-2025:7903" type="rhsa" title="RHSA-2025:7903"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21756" id="CVE-2025-21756" type="cve" title="CVE-2025-21756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21966" id="CVE-2025-21966" type="cve" title="CVE-2025-21966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37749" id="CVE-2025-37749" type="cve" title="CVE-2025-37749"/>
      <reference href="https://bugzilla.redhat.com/2348609" id="2348609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356605" id="2356605" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363332" id="2363332" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7903.html" id="ALSA-2025:7903" type="self" title="ALSA-2025:7903"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="rtla" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.17.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0831a1aa30a3ca8d7da50a4f9c71b03eb16f1c686c6b26301fc714bddec259bd</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.17.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0b3fa25fa4c9610056f1eb1f61ec5f568e0880e8cc311478b713da2ed65e55d8</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.17.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">109c8966d8c4a1907d2e88ef47a4a4320f3a414299e223416c4de0ea73133ad8</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.17.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">129318947baf8a27aa976d9c22bdc5fc5b59024a6ebf1026a166f55cf70b1264</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.17.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">78bcaaf8508fb08ae6cafd63a87773a0af73b0374dab799058b5d76d6c3e6342</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.17.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">85ba475b7c1c187cec08b07aa29424f1ff22cea66e7a89f225779435cd0c5dfd</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.17.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">a3f9d413637203425e9547c05ebf8c906bcd836c07c2b23f7cb53d6191d70416</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.17.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ad332920cf4141a33eb97bf18f600f3a25af954d3292aa7b5954e6cfcbdbc2ce</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.17.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">d47c606ba32563b48d6a7325fb5932ad9ace8a6d7ead35993a6bfdd857796bca</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.17.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d4bd2736b03bc055b619d64825a6eb2989c1735188e4c0af340dcdbc992343a2</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.17.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">dd002b7692516f42461a359df8fafb60904531eceb750fb502333a801436d8f6</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.17.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ed0f0e4324fca481e1277efd1369b4b6947d0da7adf26b03a2186fe99b787834</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7937</id>
    <title>Important: compat-openssl11 security update</title>
    <issued date="2025-05-19 00:00:00"/>
    <updated date="2025-05-21 10:28:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>compat-openssl11 security update</summary>
    <description>The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases.  

Security Fix(es):  

  * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7937" id="RHSA-2025:7937" type="rhsa" title="RHSA-2025:7937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0286" id="CVE-2023-0286" type="cve" title="CVE-2023-0286"/>
      <reference href="https://bugzilla.redhat.com/2164440" id="2164440" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7937.html" id="ALSA-2025:7937" type="self" title="ALSA-2025:7937"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="compat-openssl11" version="1.1.1k" release="5.el9_6.1" epoch="1" arch="s390x" src="compat-openssl11-1.1.1k-5.el9_6.1.src.rpm">
          <filename>compat-openssl11-1.1.1k-5.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">efcdf26ec4d2feae8f32911c0ec3ba5e718568daf8d4abc52d593bab0c3e098b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7995</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-05-19 00:00:00"/>
    <updated date="2025-07-02 12:06:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-31205)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-31257)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7995" id="RHSA-2025:7995" type="rhsa" title="RHSA-2025:7995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31205" id="CVE-2025-31205" type="cve" title="CVE-2025-31205"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31257" id="CVE-2025-31257" type="cve" title="CVE-2025-31257"/>
      <reference href="https://bugzilla.redhat.com/2366501" id="2366501" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366504" id="2366504" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7995.html" id="ALSA-2025:7995" type="self" title="ALSA-2025:7995"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="webkit2gtk3-devel" version="2.48.2" release="1.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.48.2-1.el9_6.src.rpm">
          <filename>webkit2gtk3-devel-2.48.2-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">52539d2d6a26c801436274ade6d804fe2922e63cb1db878d802466fd370aef3c</sum>
        </package>
        <package name="webkit2gtk3" version="2.48.2" release="1.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.48.2-1.el9_6.src.rpm">
          <filename>webkit2gtk3-2.48.2-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">a5a5141f864699b7bb8ce9e8dc1d2216642416237f2844fa49737e31be826279</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.48.2" release="1.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.48.2-1.el9_6.src.rpm">
          <filename>webkit2gtk3-jsc-2.48.2-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e2d22abd4b457d5fb830e9322959f5429e544a88e104e0b9c2790148e340f742</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.48.2" release="1.el9_6" epoch="0" arch="s390x" src="webkit2gtk3-2.48.2-1.el9_6.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.48.2-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">fb53fda54e06f71ede2559c3e24c56968a35511744fab08341dd3510b4d6d4d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8049</id>
    <title>Important: firefox security update</title>
    <issued date="2025-05-20 00:00:00"/>
    <updated date="2025-05-21 07:14:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)
  * firefox: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8049" id="RHSA-2025:8049" type="rhsa" title="RHSA-2025:8049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4918" id="CVE-2025-4918" type="cve" title="CVE-2025-4918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4919" id="CVE-2025-4919" type="cve" title="CVE-2025-4919"/>
      <reference href="https://bugzilla.redhat.com/2367016" id="2367016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367018" id="2367018" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8049.html" id="ALSA-2025:8049" type="self" title="ALSA-2025:8049"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="firefox" version="128.10.1" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-128.10.1-1.el9_6.alma.1.src.rpm">
          <filename>firefox-128.10.1-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">5847c50edb5d0058c5c52a3033ff1e0c18ada525f5ce71cee59b5af4a1584f13</sum>
        </package>
        <package name="firefox-x11" version="128.10.1" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-128.10.1-1.el9_6.alma.1.src.rpm">
          <filename>firefox-x11-128.10.1-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">9c68349caadb56a0d2ea825f244e92ade1f008b6b7675e78ea49556f2d17fa5a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8126</id>
    <title>Important: libsoup security update</title>
    <issued date="2025-05-26 00:00:00"/>
    <updated date="2025-05-26 16:11:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content (CVE-2025-2784)
  * libsoup: Denial of Service attack to websocket server (CVE-2025-32049)
  * libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process (CVE-2025-32914)
  * libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup (CVE-2025-4948)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8126" id="RHSA-2025:8126" type="rhsa" title="RHSA-2025:8126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2784" id="CVE-2025-2784" type="cve" title="CVE-2025-2784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32049" id="CVE-2025-32049" type="cve" title="CVE-2025-32049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32914" id="CVE-2025-32914" type="cve" title="CVE-2025-32914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4948" id="CVE-2025-4948" type="cve" title="CVE-2025-4948"/>
      <reference href="https://bugzilla.redhat.com/2354669" id="2354669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357066" id="2357066" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359358" id="2359358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367183" id="2367183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8126.html" id="ALSA-2025:8126" type="self" title="ALSA-2025:8126"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libsoup" version="2.72.0" release="10.el9_6.2" epoch="0" arch="s390x" src="libsoup-2.72.0-10.el9_6.2.src.rpm">
          <filename>libsoup-2.72.0-10.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">3e238cee2087823070e19f9dfccebe438434845383cff19c7566c4e0a78e812b</sum>
        </package>
        <package name="libsoup-devel" version="2.72.0" release="10.el9_6.2" epoch="0" arch="s390x" src="libsoup-2.72.0-10.el9_6.2.src.rpm">
          <filename>libsoup-devel-2.72.0-10.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">8a8221fcfb74d1381ff9983fedda122133a876c87fadca845be2b8504eccfbf3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8136</id>
    <title>Important: python-tornado security update</title>
    <issued date="2025-05-26 00:00:00"/>
    <updated date="2025-05-26 22:24:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-tornado security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * tornado: Tornado Multipart Form-Data Denial of Service (CVE-2025-47287)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8136" id="RHSA-2025:8136" type="rhsa" title="RHSA-2025:8136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47287" id="CVE-2025-47287" type="cve" title="CVE-2025-47287"/>
      <reference href="https://bugzilla.redhat.com/2366703" id="2366703" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8136.html" id="ALSA-2025:8136" type="self" title="ALSA-2025:8136"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3-tornado" version="6.4.2" release="2.el9_6.2" epoch="0" arch="s390x" src="python-tornado-6.4.2-2.el9_6.2.src.rpm">
          <filename>python3-tornado-6.4.2-2.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">0e77697cd12b37286f0ea7e6636122fdf188b1ecc816577ccaa2721b07f527fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8142</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-05-26 00:00:00"/>
    <updated date="2025-05-28 13:39:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: cifs: Fix integer overflow while processing acregmax mount option (CVE-2025-21964)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8142" id="RHSA-2025:8142" type="rhsa" title="RHSA-2025:8142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21964" id="CVE-2025-21964" type="cve" title="CVE-2025-21964"/>
      <reference href="https://bugzilla.redhat.com/2356665" id="2356665" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8142.html" id="ALSA-2025:8142" type="self" title="ALSA-2025:8142"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3-perf" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.18.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">13ac4f5edcedacfbafb258da5d76cf6b0d247323f3096db042b096ad2a0456b9</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.18.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1e398a143fc3f7e388a92c2640ae2ca333ede5ca12d0533759b0b300d08f8164</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.18.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">3a32577bf62ab56a7c94bf41f4df7d431f76ed060e6affb958794157b96f3e13</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.18.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">83a1434259dcbc382863c51098870cd29a29a794cf629084ed9bc0c068786ec1</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.18.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8a38677271435ec0221d9857809b96cdd5e30afd0a674751fc2a74ef8b56d006</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.18.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">932bc6cac2a63f86837dc9e306e1d93d9300a5f3a1ea76ca4f5687cf0a631e0d</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.18.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">9bdbb6a6712e1ec3ffe43d9ff87c01673496cfa303d328b05541ca8f7074423f</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.18.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c1788a04d1e91173ca7b017b78c499fde4a91f67221b7c8518d829f03ca42ec1</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.18.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c64de20e5e06935d3f2fba1e05989311d063ab796034d23a9dc7edb4a5d91191</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.18.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">cd212486dd517cdb3c65c06d735844d550db9204ae5c8e20b84c1f30d3260dd7</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.18.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ea6571124c481424e9dbae65636b5d9c00717a74a61c0cbea5db33424b3bcfa1</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.18.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">eb7a9731b92f60ed287860ba768eb81f905de922844b2dcef42422dbd8748332</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8183</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2025-05-27 00:00:00"/>
    <updated date="2025-05-27 07:55:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * GStreamer: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-3887)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8183" id="RHSA-2025:8183" type="rhsa" title="RHSA-2025:8183"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3887" id="CVE-2025-3887" type="cve" title="CVE-2025-3887"/>
      <reference href="https://bugzilla.redhat.com/2367919" id="2367919" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8183.html" id="ALSA-2025:8183" type="self" title="ALSA-2025:8183"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="gstreamer1-plugins-bad-free-libs" version="1.22.12" release="4.el9_6" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.12-4.el9_6.src.rpm">
          <filename>gstreamer1-plugins-bad-free-libs-1.22.12-4.el9_6.s390x.rpm</filename>
          <sum type="sha256">04489ead060c44f621e7817ceac676341f7b21412934ba86b14d5dc054f6308f</sum>
        </package>
        <package name="gstreamer1-plugins-bad-free" version="1.22.12" release="4.el9_6" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.12-4.el9_6.src.rpm">
          <filename>gstreamer1-plugins-bad-free-1.22.12-4.el9_6.s390x.rpm</filename>
          <sum type="sha256">ae269819c5b71b828f9cc7a7bc4a7017cc08c3bc25a8e745994fb3b5075b0c83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8293</id>
    <title>Important: firefox security update</title>
    <issued date="2025-05-29 00:00:00"/>
    <updated date="2025-05-29 21:09:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)
  * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)
  * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)
  * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)
  * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)
  * firefox: thunderbird: Memory safety bug (CVE-2025-5269)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8293" id="RHSA-2025:8293" type="rhsa" title="RHSA-2025:8293"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5263" id="CVE-2025-5263" type="cve" title="CVE-2025-5263"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5264" id="CVE-2025-5264" type="cve" title="CVE-2025-5264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5266" id="CVE-2025-5266" type="cve" title="CVE-2025-5266"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5267" id="CVE-2025-5267" type="cve" title="CVE-2025-5267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5268" id="CVE-2025-5268" type="cve" title="CVE-2025-5268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5269" id="CVE-2025-5269" type="cve" title="CVE-2025-5269"/>
      <reference href="https://bugzilla.redhat.com/2368750" id="2368750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368751" id="2368751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368752" id="2368752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368755" id="2368755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368756" id="2368756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368757" id="2368757" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8293.html" id="ALSA-2025:8293" type="self" title="ALSA-2025:8293"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="firefox" version="128.11.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-128.11.0-1.el9_6.alma.1.src.rpm">
          <filename>firefox-128.11.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">6a0659cbe2f4b9ceaa766cbdc8a38386cf99890c0e3f0ed27292ae4e299d068f</sum>
        </package>
        <package name="firefox-x11" version="128.11.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="firefox-128.11.0-1.el9_6.alma.1.src.rpm">
          <filename>firefox-x11-128.11.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">7803e9b34190a3a34a15829bdcb5c2874c49aee40088900c27239ea3259d958d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8333</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-02 00:00:00"/>
    <updated date="2025-07-02 12:04:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Use after Free in gru_set_context_option leading to kernel panic (CVE-2022-3424)
  * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8333" id="RHSA-2025:8333" type="rhsa" title="RHSA-2025:8333"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3424" id="CVE-2022-3424" type="cve" title="CVE-2022-3424"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21764" id="CVE-2025-21764" type="cve" title="CVE-2025-21764"/>
      <reference href="https://bugzilla.redhat.com/2132640" id="2132640" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348575" id="2348575" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8333.html" id="ALSA-2025:8333" type="self" title="ALSA-2025:8333"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="rv" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.19.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0b1fcbe79b0a03cbb853dfe48aace958c845336b2f99da7a556e6529edf17827</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.19.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0bd0513b029ef52abffed4ae37cac993d30f819bf5e640f4cd06fa8d1c705304</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.19.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1068eb042d037ee9033cce949997f7d8f89e390653c79bf941e935a36345613e</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.19.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1575fd22e981eec47beae9195c97160639fdece89f813474c347e940a41396f7</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.19.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3a30330180008a85f93c184d9d0eed4f784f9911c8339b69583f688a83cf217f</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.19.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">48a2fab3ce8002330603b7f6086946084e9323cf2626433349901b5e3554dd32</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.19.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4d25848205bd0a938214d178a8d99e1740e380f5acb2dda04ae0774dedcd57d1</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.19.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">6748b4152b622a63281a362cb71a110c015c85d607eec5482296c3540f1efb16</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.19.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">75289aae2cf1b22820d34eb2171bc83627648f61d330ec332efa80e488d93abc</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.19.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c15cbb883173834cab10c7a25380834b8c21154d7722a703bafc75dc6f6a343c</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.19.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c3cdf0160779e8185df78d08a2b55b97924ae32dcba046d159721127a66dd49d</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.19.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">eb801210dcbf4a66ae9de54452ffd3c2a0711c45618a84fbbbb6281f55e8c4a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8337</id>
    <title>Important: varnish security update</title>
    <issued date="2025-06-02 00:00:00"/>
    <updated date="2025-06-02 12:04:43"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.  

Security Fix(es):  

  * varnish: request smuggling attacks (CVE-2025-47905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8337" id="RHSA-2025:8337" type="rhsa" title="RHSA-2025:8337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47905" id="CVE-2025-47905" type="cve" title="CVE-2025-47905"/>
      <reference href="https://bugzilla.redhat.com/2364235" id="2364235" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8337.html" id="ALSA-2025:8337" type="self" title="ALSA-2025:8337"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="varnish" version="6.6.2" release="6.el9_6.1" epoch="0" arch="s390x" src="varnish-6.6.2-6.el9_6.1.src.rpm">
          <filename>varnish-6.6.2-6.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">176864643f14d6803dc1ebcd1e69819e103ef1bb41e56bf3af347deb79284690</sum>
        </package>
        <package name="varnish-docs" version="6.6.2" release="6.el9_6.1" epoch="0" arch="s390x" src="varnish-6.6.2-6.el9_6.1.src.rpm">
          <filename>varnish-docs-6.6.2-6.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">9566eb52762171c325a5a95df91dd62c19b3e82be528d756c868401f09f43fc8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8467</id>
    <title>Important: nodejs:22 security update</title>
    <issued date="2025-06-03 00:00:00"/>
    <updated date="2025-06-05 14:11:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js (CVE-2025-23166)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8467" id="RHSA-2025:8467" type="rhsa" title="RHSA-2025:8467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23166" id="CVE-2025-23166" type="cve" title="CVE-2025-23166"/>
      <reference href="https://bugzilla.redhat.com/2367163" id="2367163" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8467.html" id="ALSA-2025:8467" type="self" title="ALSA-2025:8467"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <module name="nodejs" stream="22" version="9060020250604050617" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-libs" version="22.16.0" release="1.module_el9.6.0+170+f035de78" epoch="1" arch="s390x" src="nodejs-22.16.0-1.module_el9.6.0+170+f035de78.src.rpm">
          <filename>nodejs-libs-22.16.0-1.module_el9.6.0+170+f035de78.s390x.rpm</filename>
          <sum type="sha256">282827e7e889952e0274227971772008e307f1e70b112be3883cc87ed17a7615</sum>
        </package>
        <package name="nodejs" version="22.16.0" release="1.module_el9.6.0+170+f035de78" epoch="1" arch="s390x" src="nodejs-22.16.0-1.module_el9.6.0+170+f035de78.src.rpm">
          <filename>nodejs-22.16.0-1.module_el9.6.0+170+f035de78.s390x.rpm</filename>
          <sum type="sha256">2aa6a2c6f7840d16e90e33e9754b5c37ca8a411a596b969778caa2b73f61472d</sum>
        </package>
        <package name="nodejs-devel" version="22.16.0" release="1.module_el9.6.0+170+f035de78" epoch="1" arch="s390x" src="nodejs-22.16.0-1.module_el9.6.0+170+f035de78.src.rpm">
          <filename>nodejs-devel-22.16.0-1.module_el9.6.0+170+f035de78.s390x.rpm</filename>
          <sum type="sha256">48d9422c61ea09ec08d69961d85c46b7b73aaebb9f199adbea4b53605aec10a2</sum>
        </package>
        <package name="nodejs-docs" version="22.16.0" release="1.module_el9.6.0+170+f035de78" epoch="1" arch="noarch" src="nodejs-22.16.0-1.module_el9.6.0+170+f035de78.src.rpm">
          <filename>nodejs-docs-22.16.0-1.module_el9.6.0+170+f035de78.noarch.rpm</filename>
          <sum type="sha256">6da870e66186d9844f20cf11d6ab90c3c3ec2911c071dfe66bbc9dee34cbf1c3</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.5.0+139+09296491" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.5.0+139+09296491.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.5.0+139+09296491.noarch.rpm</filename>
          <sum type="sha256">6e5d4948e23b3a31194068e1ab1968e235602adad4a5d271b6287c52aa829d20</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.5.0+139+09296491" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.5.0+139+09296491.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm</filename>
          <sum type="sha256">6e5dbe8d2424ac728aebdaf575e4c092cf200795835ba3f46a27b4be8e757a2a</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.5.0+139+09296491" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.5.0+139+09296491.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.5.0+139+09296491.noarch.rpm</filename>
          <sum type="sha256">8d55336a92da679c52d1360312b8a8816a753687bce70e3efcb80ca181d76662</sum>
        </package>
        <package name="nodejs-full-i18n" version="22.16.0" release="1.module_el9.6.0+170+f035de78" epoch="1" arch="s390x" src="nodejs-22.16.0-1.module_el9.6.0+170+f035de78.src.rpm">
          <filename>nodejs-full-i18n-22.16.0-1.module_el9.6.0+170+f035de78.s390x.rpm</filename>
          <sum type="sha256">e6d5ac0d73bef3fb3afdec26c835b7d2f4df3c551400f9d5de6381ea3405199e</sum>
        </package>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.16.0.1.module_el9.6.0+170+f035de78" epoch="3" arch="s390x" src="nodejs-22.16.0-1.module_el9.6.0+170+f035de78.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.16.0.1.module_el9.6.0+170+f035de78.s390x.rpm</filename>
          <sum type="sha256">f9b49c0fb213af5913fe7fc359679fa9168bc385f8f79b851b83e6fb86ecab3e</sum>
        </package>
        <package name="npm" version="10.9.2" release="1.22.16.0.1.module_el9.6.0+170+f035de78" epoch="1" arch="s390x" src="nodejs-22.16.0-1.module_el9.6.0+170+f035de78.src.rpm">
          <filename>npm-10.9.2-1.22.16.0.1.module_el9.6.0+170+f035de78.s390x.rpm</filename>
          <sum type="sha256">fdbeea4043d5924bed2a906c392fac596a22b560d4169d02eac6d1d6790cbaeb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8468</id>
    <title>Important: nodejs:20 security update</title>
    <issued date="2025-06-03 00:00:00"/>
    <updated date="2025-06-05 14:15:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js (CVE-2025-23166)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8468" id="RHSA-2025:8468" type="rhsa" title="RHSA-2025:8468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23166" id="CVE-2025-23166" type="cve" title="CVE-2025-23166"/>
      <reference href="https://bugzilla.redhat.com/2367163" id="2367163" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8468.html" id="ALSA-2025:8468" type="self" title="ALSA-2025:8468"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <module name="nodejs" stream="20" version="9060020250604050441" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-full-i18n" version="20.19.2" release="1.module_el9.6.0+169+c9cb05c2" epoch="1" arch="s390x" src="nodejs-20.19.2-1.module_el9.6.0+169+c9cb05c2.src.rpm">
          <filename>nodejs-full-i18n-20.19.2-1.module_el9.6.0+169+c9cb05c2.s390x.rpm</filename>
          <sum type="sha256">0c5a093ea5de4ca0f122958e4ca12efb2ee41cd3737b83c1807e75763f2d6af3</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.5.0+125+8dc38870" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.noarch.rpm</filename>
          <sum type="sha256">572b82ee164b85ffef41f974897332716b428e341e262a4ccdd71a9c87312648</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el9.6.0+162+8dc602e5" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.6.0+162+8dc602e5.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el9.6.0+162+8dc602e5.noarch.rpm</filename>
          <sum type="sha256">6197cdbcfccc2266f0d5e47e8b739375ef169fae31d46948b204964782b971f1</sum>
        </package>
        <package name="nodejs-docs" version="20.19.2" release="1.module_el9.6.0+169+c9cb05c2" epoch="1" arch="noarch" src="nodejs-20.19.2-1.module_el9.6.0+169+c9cb05c2.src.rpm">
          <filename>nodejs-docs-20.19.2-1.module_el9.6.0+169+c9cb05c2.noarch.rpm</filename>
          <sum type="sha256">7cb015453402ce4793c1f94bf1a42248f44f3b10d6c18bd510973bc44ef767eb</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el9.6.0+162+8dc602e5" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el9.6.0+162+8dc602e5.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el9.6.0+162+8dc602e5.noarch.rpm</filename>
          <sum type="sha256">8672933a8a01356064a9acc4450fbb8322915abb9f7a09bb4979cc9c3695dfcf</sum>
        </package>
        <package name="npm" version="10.8.2" release="1.20.19.2.1.module_el9.6.0+169+c9cb05c2" epoch="1" arch="s390x" src="nodejs-20.19.2-1.module_el9.6.0+169+c9cb05c2.src.rpm">
          <filename>npm-10.8.2-1.20.19.2.1.module_el9.6.0+169+c9cb05c2.s390x.rpm</filename>
          <sum type="sha256">bde135bfa9b587c83d9e5895b032be4c5514e39d82f072fab689ef27d20f4807</sum>
        </package>
        <package name="nodejs-devel" version="20.19.2" release="1.module_el9.6.0+169+c9cb05c2" epoch="1" arch="s390x" src="nodejs-20.19.2-1.module_el9.6.0+169+c9cb05c2.src.rpm">
          <filename>nodejs-devel-20.19.2-1.module_el9.6.0+169+c9cb05c2.s390x.rpm</filename>
          <sum type="sha256">c1fef6e38abf7c3ecf3f73985f43d63e2b9b54ecc44a187b02ddd2c3d85cb9b2</sum>
        </package>
        <package name="nodejs" version="20.19.2" release="1.module_el9.6.0+169+c9cb05c2" epoch="1" arch="s390x" src="nodejs-20.19.2-1.module_el9.6.0+169+c9cb05c2.src.rpm">
          <filename>nodejs-20.19.2-1.module_el9.6.0+169+c9cb05c2.s390x.rpm</filename>
          <sum type="sha256">e7affedcc657bead6f44fe78f61b2d63e248c5dde656bd0701cc91fb7130b352</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8476</id>
    <title>Moderate: golang security update</title>
    <issued date="2025-06-04 00:00:00"/>
    <updated date="2025-06-05 14:16:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.  

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8476" id="RHSA-2025:8476" type="rhsa" title="RHSA-2025:8476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8476.html" id="ALSA-2025:8476" type="self" title="ALSA-2025:8476"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="golang-race" version="1.23.9" release="1.el9_6" epoch="0" arch="s390x" src="golang-1.23.9-1.el9_6.src.rpm">
          <filename>golang-race-1.23.9-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1aa2b47f415c0b0ea21766867e9a1e5f184a5372fda569a8dd20cc7a30831fa7</sum>
        </package>
        <package name="golang" version="1.23.9" release="1.el9_6" epoch="0" arch="s390x" src="golang-1.23.9-1.el9_6.src.rpm">
          <filename>golang-1.23.9-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1ed1b5c4ff37f079b460e7c066f3bd7e0f2c87e81814c2253eeedf23dca977f2</sum>
        </package>
        <package name="golang-misc" version="1.23.9" release="1.el9_6" epoch="0" arch="noarch" src="golang-1.23.9-1.el9_6.src.rpm">
          <filename>golang-misc-1.23.9-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">3b6b59952001d719c0acf1a55f35b77f8487086be734e1a406d919819a30f69b</sum>
        </package>
        <package name="golang-src" version="1.23.9" release="1.el9_6" epoch="0" arch="noarch" src="golang-1.23.9-1.el9_6.src.rpm">
          <filename>golang-src-1.23.9-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">7ba826ac99805837764362226fd1f95ee0512981200ff49b5aef45b71a95b35a</sum>
        </package>
        <package name="go-toolset" version="1.23.9" release="1.el9_6" epoch="0" arch="s390x" src="golang-1.23.9-1.el9_6.src.rpm">
          <filename>go-toolset-1.23.9-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">95f409fbd4e6912b777bd0b0f5667a61d25f105710f35938078691f395bb6bf2</sum>
        </package>
        <package name="golang-bin" version="1.23.9" release="1.el9_6" epoch="0" arch="s390x" src="golang-1.23.9-1.el9_6.src.rpm">
          <filename>golang-bin-1.23.9-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">a1aa8b3c6e475b0969629b6bc7fa349f02ef876b46652f92a8ab0b5f75a8c2b6</sum>
        </package>
        <package name="golang-tests" version="1.23.9" release="1.el9_6" epoch="0" arch="noarch" src="golang-1.23.9-1.el9_6.src.rpm">
          <filename>golang-tests-1.23.9-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">a3c86d76cc668699bf31a417bd4ce5f4f40adbc3f9a3f91cc7aab4d1c5f43c27</sum>
        </package>
        <package name="golang-docs" version="1.23.9" release="1.el9_6" epoch="0" arch="noarch" src="golang-1.23.9-1.el9_6.src.rpm">
          <filename>golang-docs-1.23.9-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">c45b6b351e35765ff179b93d2feec84907483b37c81cff4d7416944e3407c759</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8607</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-06-05 00:00:00"/>
    <updated date="2025-07-02 11:41:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)
  * firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)
  * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)
  * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)
  * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)
  * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)
  * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)
  * firefox: thunderbird: Memory safety bug (CVE-2025-5269)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8607" id="RHSA-2025:8607" type="rhsa" title="RHSA-2025:8607"/>
      <reference href="https://bugzilla.redhat.com/2367016" id="2367016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367018" id="2367018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368750" id="2368750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368751" id="2368751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368752" id="2368752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368755" id="2368755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368756" id="2368756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368757" id="2368757" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8607.html" id="ALSA-2025:8607" type="self" title="ALSA-2025:8607"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-4918.html" id="CVE-2025-4918" type="cve" title="CVE-2025-4918"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-4919.html" id="CVE-2025-4919" type="cve" title="CVE-2025-4919"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-5263.html" id="CVE-2025-5263" type="cve" title="CVE-2025-5263"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-5264.html" id="CVE-2025-5264" type="cve" title="CVE-2025-5264"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-5266.html" id="CVE-2025-5266" type="cve" title="CVE-2025-5266"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-5267.html" id="CVE-2025-5267" type="cve" title="CVE-2025-5267"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-5268.html" id="CVE-2025-5268" type="cve" title="CVE-2025-5268"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-5269.html" id="CVE-2025-5269" type="cve" title="CVE-2025-5269"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-5283.html" id="CVE-2025-5283" type="cve" title="CVE-2025-5283"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="thunderbird" version="128.11.0" release="1.el9_6.alma.1" epoch="0" arch="s390x" src="thunderbird-128.11.0-1.el9_6.alma.1.src.rpm">
          <filename>thunderbird-128.11.0-1.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">0cac948300ccbfa215b26d1bafec42656e8d641c17e150ed8f11e9d0841213d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8635</id>
    <title>Important: perl-FCGI security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-07-02 11:39:26"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-FCGI security update</summary>
    <description>FastCGI Perl bindings.  

Security Fix(es):  

  * perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVE-2025-40907)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8635" id="RHSA-2025:8635" type="rhsa" title="RHSA-2025:8635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40907" id="CVE-2025-40907" type="cve" title="CVE-2025-40907"/>
      <reference href="https://bugzilla.redhat.com/2366847" id="2366847" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8635.html" id="ALSA-2025:8635" type="self" title="ALSA-2025:8635"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="perl-FCGI" version="0.79" release="8.1.el9_6" epoch="1" arch="s390x" src="perl-FCGI-0.79-8.1.el9_6.src.rpm">
          <filename>perl-FCGI-0.79-8.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">54f74d0ae002196c5d31dff6c5b18c4e8dd21fa393fdc0fa95d95d26ac84fd85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8643</id>
    <title>Important: kernel security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-06-12 13:36:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926)
  * kernel: vlan: enforce underlying device type (CVE-2025-21920)
  * kernel: xsk: fix an integer overflow in xp_create_and_assign_umem() (CVE-2025-21997)
  * kernel: net: fix geneve_opt length integer overflow (CVE-2025-22055)
  * kernel: ext4: fix OOB read when checking dotdot dir (CVE-2025-37785)
  * kernel: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CVE-2025-37943)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8643" id="RHSA-2025:8643" type="rhsa" title="RHSA-2025:8643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21920" id="CVE-2025-21920" type="cve" title="CVE-2025-21920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21926" id="CVE-2025-21926" type="cve" title="CVE-2025-21926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21997" id="CVE-2025-21997" type="cve" title="CVE-2025-21997"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22055" id="CVE-2025-22055" type="cve" title="CVE-2025-22055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37785" id="CVE-2025-37785" type="cve" title="CVE-2025-37785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37943" id="CVE-2025-37943" type="cve" title="CVE-2025-37943"/>
      <reference href="https://bugzilla.redhat.com/2356587" id="2356587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356639" id="2356639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357143" id="2357143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360300" id="2360300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360921" id="2360921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367748" id="2367748" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8643.html" id="ALSA-2025:8643" type="self" title="ALSA-2025:8643"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="kernel-doc" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.21.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">17b89c8b590f418da4bbe356d61ba0203bcc3b21eb10757cc894e5c77b5e406e</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.21.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1f78fc052bbba146285de4ae9c6c77e330fbc23eb0a10b007c4bc89eca05c7ff</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.21.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3645956791aba5b3a3820511d54c8e29c16837afa33cdd846e41abb9e8314a81</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.21.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">39118de19cf20910016171e19587c5d911e501b6f9436bf6f2b956be3492abbd</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.21.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3fca71cb43185492f45f5045320b168ec2617f3a0652ae747db6b480f39c5a13</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.21.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">672661671935d687fb583f062e3cf585f963589652f6839f7858c7bdc2782dcf</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.21.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">6dbb980dfcfb30182bc58816aee96bdab32710520815114dc35bc7e18d8e5456</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.21.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">6e1736e37462445b40e454893f20acf5dc85233a6b48844a55862ad2a8da34bb</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.21.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">82a941f013c462e02261b2b89fc308e577e3be94732f537dc40cb2d9eb7145e7</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.21.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">bbe6c3500d14b7d33f33f8da7a35d0288e17f30b973ecd0034d0edb15cef26c8</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.21.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">cbc0bd53be204ace628e01da3ce7c576b567ce173fcb066ff11009d2ac374afd</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.21.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">cf2516f6eac0c624e061fdb1723d47bcd715870c0221b8ad0b36ad43670b2094</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8655</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-06-10 08:32:32"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH (CVE-2025-4802)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8655" id="RHSA-2025:8655" type="rhsa" title="RHSA-2025:8655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4802" id="CVE-2025-4802" type="cve" title="CVE-2025-4802"/>
      <reference href="https://bugzilla.redhat.com/2367468" id="2367468" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8655.html" id="ALSA-2025:8655" type="self" title="ALSA-2025:8655"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="glibc-devel" version="2.34" release="168.el9_6.19" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>glibc-devel-2.34-168.el9_6.19.s390x.rpm</filename>
          <sum type="sha256">6b04f1ea31d257e4e8d6b738f83b0c536da9fecd44a61bba7957c26acd8d89f6</sum>
        </package>
        <package name="glibc-utils" version="2.34" release="168.el9_6.19" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>glibc-utils-2.34-168.el9_6.19.s390x.rpm</filename>
          <sum type="sha256">72bf644014128b4b03ca7b84752a147ef27a751d548a2227d7fb81e4101a3ab8</sum>
        </package>
        <package name="glibc-headers" version="2.34" release="168.el9_6.19" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>glibc-headers-2.34-168.el9_6.19.s390x.rpm</filename>
          <sum type="sha256">914f831760484d1f5baf545e96b58cf22c8fca6a9fe63e185e1cf2852b8059b2</sum>
        </package>
        <package name="glibc-doc" version="2.34" release="168.el9_6.19" epoch="0" arch="noarch" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>glibc-doc-2.34-168.el9_6.19.noarch.rpm</filename>
          <sum type="sha256">cb324066e111baedd743ca2d7e80fbe5b5aa5005be90c6dfa303ed32a995b99e</sum>
        </package>
        <package name="glibc-locale-source" version="2.34" release="168.el9_6.19" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>glibc-locale-source-2.34-168.el9_6.19.s390x.rpm</filename>
          <sum type="sha256">cf70634cf83654a480ec7f93ad29547b870d99fc2316c906abe00698886aaac2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8682</id>
    <title>Moderate: grafana security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-07-02 11:36:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8682" id="RHSA-2025:8682" type="rhsa" title="RHSA-2025:8682"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8682.html" id="ALSA-2025:8682" type="self" title="ALSA-2025:8682"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="grafana-selinux" version="10.2.6" release="14.el9_6" epoch="0" arch="s390x" src="grafana-10.2.6-14.el9_6.src.rpm">
          <filename>grafana-selinux-10.2.6-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">6a50a79d163e51596d58ee67f303eac97f7f698d22b42dfe1b2a94715a63178e</sum>
        </package>
        <package name="grafana" version="10.2.6" release="14.el9_6" epoch="0" arch="s390x" src="grafana-10.2.6-14.el9_6.src.rpm">
          <filename>grafana-10.2.6-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">a50261e6a92fb3ef29211d6f76ead74343aebfa5dc24ca45b87c2fa788c8ec83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8813</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-06-13 11:16:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.117 and .NET Runtime 8.0.17.Security Fix(es):  

  * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8813" id="RHSA-2025:8813" type="rhsa" title="RHSA-2025:8813"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30399" id="CVE-2025-30399" type="cve" title="CVE-2025-30399"/>
      <reference href="https://bugzilla.redhat.com/2369701" id="2369701" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8813.html" id="ALSA-2025:8813" type="self" title="ALSA-2025:8813"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="dotnet-templates-8.0" version="8.0.117" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el9_6.src.rpm">
          <filename>dotnet-templates-8.0-8.0.117-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0fdfba501b50643c4eafc31aef51f33093955049775e7e957653b5efe4bb4cf3</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.17" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el9_6.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.17-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2c8da5faa38af35fcc09df08f299182802d1ca3d59a4e83c10f8fb5d1d407862</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.17" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el9_6.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.17-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">38012c1d62cc3baeb76e3ca07fdf629efcd76102db61a47c3c471756958ec9bc</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.17" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el9_6.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.17-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">40b401525fc3885f4e302fd3cb926aaa3d6b1dcd71bbb0c2e04bc5d26bb8e86d</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.17" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el9_6.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.17-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">43403602756864e7f343405d97a333ad862323ded8227d44c276d8a57bcede25</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.117" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el9_6.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.117-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">534861aae8a629a5123155c017192b3782a662a95668df1a53415ef2bad39798</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.117" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el9_6.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.117-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5926e0e56b3fea055273fffacddd10ceae9adb22f97f17ebdc137997109b995c</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.17" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el9_6.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.17-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">74c75d7b847e99bb10c06664edd051764f21098b45f615c0257742065a7e53ea</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.17" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el9_6.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.17-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8449bb43e7ecafe0390c1994343677e75c141a14281442d6a81bd910e1fad9f7</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.17" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el9_6.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.17-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8a5a5c97d42c8b2c8a491ee59fb67d836987f3712c18f89aef13c5098e67b05e</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.17" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el9_6.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.17-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ae60bc72207c2c3ddcc1749fc4434994ea2595a481afb1307330b68adffb1980</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8817</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-06-12 08:20:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.107 and .NET Runtime 9.0.6.Security Fix(es):  

  * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8817" id="RHSA-2025:8817" type="rhsa" title="RHSA-2025:8817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30399" id="CVE-2025-30399" type="cve" title="CVE-2025-30399"/>
      <reference href="https://bugzilla.redhat.com/2369701" id="2369701" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8817.html" id="ALSA-2025:8817" type="self" title="ALSA-2025:8817"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="dotnet-targeting-pack-9.0" version="9.0.6" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.6-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">035d205d467504010549b938108c32cdaa9d1435a2a333386df5df28090259e3</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.6" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.6-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">03cdc0548a2dc876d7883390931e5cfaa7e9fb1d03a609fda3d4f84e781212d5</sum>
        </package>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.6" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.6-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">13cc2dac61ba7a474c353eb3c6dfe7eace09d16089154c40464eb0a97375d460</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.6" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.6-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">77e2e72b4f2283b0f75e70673e6745eff5d5d655bb06c8bc7bfbf1e92c7ea0b1</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.6" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.6-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7e7003d5938cfcefe8b107837cc2c05f4e143b9d6c0b6e6ff37043d52bea65ad</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.6" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.6-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8d31c41c229cbff4a53631586b937f47d5c69b80ea5c7921752dfc3ddca1de1c</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.6" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.6-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8fae9e3efbdc8bf0e6ae5d3e766427692a019fbb426e953e63802d33a3346ee8</sum>
        </package>
        <package name="dotnet-templates-9.0" version="9.0.107" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>dotnet-templates-9.0-9.0.107-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">aa8033a3c8a243ddb8d0806a4d960bb8df08ec018400e87aac10bdc450b96b90</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.107" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.107-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ad705b7e01593e692408ef7af7e4105b9940d5233b725ea1ac2d8f8a24df5977</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.6" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.6-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">b8d7e180d8fca45d17d040663b499e0020ed3433829e9b1f9d871eceb1787edf</sum>
        </package>
        <package name="dotnet-host" version="9.0.6" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>dotnet-host-9.0.6-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d129f96785325045c19f13d4599c4278fefd8aa44031175486aabc1923ef2576</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.107" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.107-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">eb5114d1484f0c1b2dee46bf4bab50b2a473773b7d0172816d38f60906ff6c54</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="9.0.107" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.107-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ff6a0b7a9b8d1f685fb39aabbc82092273b56bc7d7046af220a5fad5afcc3fd4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8837</id>
    <title>Important: mod_security security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-06-12 08:27:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mod_security security update</summary>
    <description>ModSecurity is an open source intrusion detection and prevention engine for web applications.  

Security Fix(es):  

  * modsecurity: ModSecurity Has Possible DoS Vulnerability (CVE-2025-47947)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8837" id="RHSA-2025:8837" type="rhsa" title="RHSA-2025:8837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47947" id="CVE-2025-47947" type="cve" title="CVE-2025-47947"/>
      <reference href="https://bugzilla.redhat.com/2367903" id="2367903" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8837.html" id="ALSA-2025:8837" type="self" title="ALSA-2025:8837"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="mod_security" version="2.9.6" release="2.el9_6" epoch="0" arch="s390x" src="mod_security-2.9.6-2.el9_6.src.rpm">
          <filename>mod_security-2.9.6-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">150c5a4a6b988c2cc609aafd4e4b91b493b18937cdba8aebbff8bea74719bf98</sum>
        </package>
        <package name="mod_security-mlogc" version="2.9.6" release="2.el9_6" epoch="0" arch="s390x" src="mod_security-2.9.6-2.el9_6.src.rpm">
          <filename>mod_security-mlogc-2.9.6-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">3ba148dc0c7d5ee8d5247471de703ccf26c65889e66bb199535e06fc5bea37d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8916</id>
    <title>Moderate: grafana-pcp security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-07-02 11:29:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.  

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8916" id="RHSA-2025:8916" type="rhsa" title="RHSA-2025:8916"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8916.html" id="ALSA-2025:8916" type="self" title="ALSA-2025:8916"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="grafana-pcp" version="5.1.1" release="11.el9_6" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-11.el9_6.src.rpm">
          <filename>grafana-pcp-5.1.1-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">0beac1f59603a59981764882a9f7e2951f96f00b94192b18e333f354457574d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9080</id>
    <title>Important: kernel security update</title>
    <issued date="2025-06-16 00:00:00"/>
    <updated date="2025-07-02 11:21:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: eth: bnxt: fix truesize for mb-xdp-pass case (CVE-2025-21961)
  * kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CVE-2025-21969)
  * kernel: cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963)
  * kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy (CVE-2025-21979)
  * kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999)
  * kernel: md: fix mddev uaf while iterating all_mddevs list (CVE-2025-22126)
  * kernel: smb: client: fix UAF in decryption with multichannel (CVE-2025-37750)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9080" id="RHSA-2025:9080" type="rhsa" title="RHSA-2025:9080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21961" id="CVE-2025-21961" type="cve" title="CVE-2025-21961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21963" id="CVE-2025-21963" type="cve" title="CVE-2025-21963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21969" id="CVE-2025-21969" type="cve" title="CVE-2025-21969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21979" id="CVE-2025-21979" type="cve" title="CVE-2025-21979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21999" id="CVE-2025-21999" type="cve" title="CVE-2025-21999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22126" id="CVE-2025-22126" type="cve" title="CVE-2025-22126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37750" id="CVE-2025-37750" type="cve" title="CVE-2025-37750"/>
      <reference href="https://bugzilla.redhat.com/2356584" id="2356584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356633" id="2356633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356642" id="2356642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356652" id="2356652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357134" id="2357134" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360236" id="2360236" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363341" id="2363341" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9080.html" id="ALSA-2025:9080" type="self" title="ALSA-2025:9080"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="rtla" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.22.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0216f18613c25175d4551a74eee59c0662c58ec1086527989280fc881461c595</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.22.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">068b8c90553d43cdf14bc59625bdf37bd15ab747e9872a52d4cd62494cc93f43</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.22.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2bf340e1cc4dbbae34a2e2f547c84a22ad102208c060bca87edb2b87060ffe55</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.22.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5b955e03c51cd08575a170f7523e49989b0258e20c591f3afecbcaef6e80710a</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.22.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">79ee90563ec601e00213246d400d8bb65765550f34113f49a6d1a298eaedc43f</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.22.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">841315df402c9099e046a3566249628c3d2c405bdfe3cca08f56199b9dd0470e</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.22.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">c857d45652a136c40ec9e3de73282b60ee49322a50a4c864d0c5071854140ea2</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.22.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e0dc1879553926fe76d1f8d4d677471203479f1ba56c8ba7fc35295266fcf233</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.22.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e9b56754004e950c648004889c9fd1d406ca231fd5d7bcb342accd984a700131</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.22.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">eb01239695fe9aaebca67d71c703747305d6ed5e54ac540c5e3384aa0ae2a258</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.22.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ebd2ea6d52e3349b2bf5d9f3f32b50f82e149d3cd8bc52ea708bbfa238564c34</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.22.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f936052f7b4e0118e871bc6aedefb71ea3c0a4f1bf3b53861e5e088d96ded20b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9106</id>
    <title>Moderate: git-lfs security update</title>
    <issued date="2025-06-16 00:00:00"/>
    <updated date="2025-07-02 11:16:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9106" id="RHSA-2025:9106" type="rhsa" title="RHSA-2025:9106"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9106.html" id="ALSA-2025:9106" type="self" title="ALSA-2025:9106"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="git-lfs" version="3.6.1" release="2.el9_6" epoch="0" arch="s390x" src="git-lfs-3.6.1-2.el9_6.src.rpm">
          <filename>git-lfs-3.6.1-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">ad4f86d32773f871d7079f468bfcdfc391737bdba416dfc79f4ad9c2b3eec9fb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9118</id>
    <title>Important: libvpx security update</title>
    <issued date="2025-06-16 00:00:00"/>
    <updated date="2025-07-02 11:13:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.  

Security Fix(es):  

  * libvpx: Double-free in libvpx encoder (CVE-2025-5283)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9118" id="RHSA-2025:9118" type="rhsa" title="RHSA-2025:9118"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5283" id="CVE-2025-5283" type="cve" title="CVE-2025-5283"/>
      <reference href="https://bugzilla.redhat.com/2368749" id="2368749" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9118.html" id="ALSA-2025:9118" type="self" title="ALSA-2025:9118"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libvpx" version="1.9.0" release="9.el9_6" epoch="0" arch="s390x" src="libvpx-1.9.0-9.el9_6.src.rpm">
          <filename>libvpx-1.9.0-9.el9_6.s390x.rpm</filename>
          <sum type="sha256">f671eb408ecde9e1a32b0add6ea6d8ee0af610516608ce0101e4bf9dfa4cd75d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9143</id>
    <title>Moderate: containernetworking-plugins security update</title>
    <issued date="2025-06-17 00:00:00"/>
    <updated date="2025-06-17 07:59:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>containernetworking-plugins security update</summary>
    <description>The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted.   

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9143" id="RHSA-2025:9143" type="rhsa" title="RHSA-2025:9143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9143.html" id="ALSA-2025:9143" type="self" title="ALSA-2025:9143"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="containernetworking-plugins" version="1.6.2" release="2.el9_6" epoch="1" arch="s390x" src="containernetworking-plugins-1.6.2-2.el9_6.src.rpm">
          <filename>containernetworking-plugins-1.6.2-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">9d398e432a8b99e3a0c5d6e1c06efeedcbeb2118611dda9a72dbfa1be2ff4d20</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9144</id>
    <title>Moderate: podman security update</title>
    <issued date="2025-06-17 00:00:00"/>
    <updated date="2025-06-17 07:58:49"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9144" id="RHSA-2025:9144" type="rhsa" title="RHSA-2025:9144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9144.html" id="ALSA-2025:9144" type="self" title="ALSA-2025:9144"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="podman-tests" version="5.4.0" release="10.el9_6" epoch="5" arch="s390x" src="podman-5.4.0-10.el9_6.src.rpm">
          <filename>podman-tests-5.4.0-10.el9_6.s390x.rpm</filename>
          <sum type="sha256">0a506902b6c59fcaebab5763b87eb05b81ba641dd000ef6c1202d6f75f0049d7</sum>
        </package>
        <package name="podman-plugins" version="5.4.0" release="10.el9_6" epoch="5" arch="s390x" src="podman-5.4.0-10.el9_6.src.rpm">
          <filename>podman-plugins-5.4.0-10.el9_6.s390x.rpm</filename>
          <sum type="sha256">176b0a64bee041938509113ef16e2586e25bc07ff95b62f839d8081297bbb806</sum>
        </package>
        <package name="podman-remote" version="5.4.0" release="10.el9_6" epoch="5" arch="s390x" src="podman-5.4.0-10.el9_6.src.rpm">
          <filename>podman-remote-5.4.0-10.el9_6.s390x.rpm</filename>
          <sum type="sha256">30461fc2725ef2678258961cdecdc8b03fadc7454b03bdbe5933204ecaf1acb3</sum>
        </package>
        <package name="podman" version="5.4.0" release="10.el9_6" epoch="5" arch="s390x" src="podman-5.4.0-10.el9_6.src.rpm">
          <filename>podman-5.4.0-10.el9_6.s390x.rpm</filename>
          <sum type="sha256">ab1cece635b2d0ca6bc8970f1f03772b3a820eae8d0078224da9a030074d1e65</sum>
        </package>
        <package name="podman-docker" version="5.4.0" release="10.el9_6" epoch="5" arch="noarch" src="podman-5.4.0-10.el9_6.src.rpm">
          <filename>podman-docker-5.4.0-10.el9_6.noarch.rpm</filename>
          <sum type="sha256">f49149de86ea7bf4625e1a1e5d2360a5b5d0e642c4a1309016f13fcd5afa681c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9145</id>
    <title>Moderate: skopeo security update</title>
    <issued date="2025-06-17 00:00:00"/>
    <updated date="2025-06-17 07:57:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>skopeo security update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.   

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9145" id="RHSA-2025:9145" type="rhsa" title="RHSA-2025:9145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9145.html" id="ALSA-2025:9145" type="self" title="ALSA-2025:9145"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="skopeo-tests" version="1.18.1" release="2.el9_6" epoch="2" arch="s390x" src="skopeo-1.18.1-2.el9_6.src.rpm">
          <filename>skopeo-tests-1.18.1-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">1a0710ff0d5ade754debf722499242345a9ec13fe810e97ebff3fbf0ffaa837b</sum>
        </package>
        <package name="skopeo" version="1.18.1" release="2.el9_6" epoch="2" arch="s390x" src="skopeo-1.18.1-2.el9_6.src.rpm">
          <filename>skopeo-1.18.1-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">449dc720dbc55a226d3a167e4f5f58b80465c4b67ff515100a15a546ea9bf87d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9147</id>
    <title>Moderate: buildah security update</title>
    <issued date="2025-06-17 00:00:00"/>
    <updated date="2025-06-17 07:55:10"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.   

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9147" id="RHSA-2025:9147" type="rhsa" title="RHSA-2025:9147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9147.html" id="ALSA-2025:9147" type="self" title="ALSA-2025:9147"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="buildah" version="1.39.4" release="2.el9_6" epoch="2" arch="s390x" src="buildah-1.39.4-2.el9_6.src.rpm">
          <filename>buildah-1.39.4-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">3c2c4b32317e1810111c4165fc34ab4c5b75cdf6bcd4082c552434d576319840</sum>
        </package>
        <package name="buildah-tests" version="1.39.4" release="2.el9_6" epoch="2" arch="s390x" src="buildah-1.39.4-2.el9_6.src.rpm">
          <filename>buildah-tests-1.39.4-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">953a33da2053000c3c68b1059c6905ae5265980e98e22de767567e6669ec4d23</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9150</id>
    <title>Moderate: gvisor-tap-vsock security update</title>
    <issued date="2025-06-17 00:00:00"/>
    <updated date="2025-06-17 12:20:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gvisor-tap-vsock security update</summary>
    <description>A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding.  

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9150" id="RHSA-2025:9150" type="rhsa" title="RHSA-2025:9150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9150.html" id="ALSA-2025:9150" type="self" title="ALSA-2025:9150"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="gvisor-tap-vsock" version="0.8.5" release="2.el9_6" epoch="6" arch="s390x" src="gvisor-tap-vsock-0.8.5-2.el9_6.src.rpm">
          <filename>gvisor-tap-vsock-0.8.5-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">0b308b3657ef88e07325d447070e7f048d1a5174302b05488f09c1976b06617f</sum>
        </package>
        <package name="gvisor-tap-vsock-gvforwarder" version="0.8.5" release="2.el9_6" epoch="6" arch="s390x" src="gvisor-tap-vsock-0.8.5-2.el9_6.src.rpm">
          <filename>gvisor-tap-vsock-gvforwarder-0.8.5-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">fb204571f4b629e9b7aa3b26566ff2f2d0bafe02187181ce53b83b70fd9f5ea8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9162</id>
    <title>Important: gimp security update</title>
    <issued date="2025-06-17 00:00:00"/>
    <updated date="2025-06-30 13:40:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gimp security update</summary>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  

Security Fix(es):  

  * gimp: Multiple use after free in XCF parser (CVE-2025-48798)
  * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797)
  * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9162" id="RHSA-2025:9162" type="rhsa" title="RHSA-2025:9162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48797" id="CVE-2025-48797" type="cve" title="CVE-2025-48797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48798" id="CVE-2025-48798" type="cve" title="CVE-2025-48798"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5473" id="CVE-2025-5473" type="cve" title="CVE-2025-5473"/>
      <reference href="https://bugzilla.redhat.com/2368557" id="2368557" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368558" id="2368558" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370867" id="2370867" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9162.html" id="ALSA-2025:9162" type="self" title="ALSA-2025:9162"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="gimp" version="2.99.8" release="4.el9_6.2" epoch="2" arch="s390x" src="gimp-2.99.8-4.el9_6.2.src.rpm">
          <filename>gimp-2.99.8-4.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">34c8d8a53d3f57cacd5f3f7cf8cdd6d6e41ae7d2b49f40b4595f0e3d455f430a</sum>
        </package>
        <package name="gimp-libs" version="2.99.8" release="4.el9_6.2" epoch="2" arch="s390x" src="gimp-2.99.8-4.el9_6.2.src.rpm">
          <filename>gimp-libs-2.99.8-4.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">8e635e093a689b62987e813c4f72375af8edda41aecfe0fc5a8eea4b40becc87</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9184</id>
    <title>Important: ipa security update</title>
    <issued date="2025-06-17 00:00:00"/>
    <updated date="2025-06-30 13:36:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.  

Security Fix(es):  

  * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9184" id="RHSA-2025:9184" type="rhsa" title="RHSA-2025:9184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4404" id="CVE-2025-4404" type="cve" title="CVE-2025-4404"/>
      <reference href="https://bugzilla.redhat.com/2364606" id="2364606" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9184.html" id="ALSA-2025:9184" type="self" title="ALSA-2025:9184"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="ipa-selinux-luna" version="4.12.2" release="14.el9_6.1" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-selinux-luna-4.12.2-14.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">100dbe8a0a540a4ad40115e81f980f755c1bb872e5f933909d9802cc395385f3</sum>
        </package>
        <package name="python3-ipaclient" version="4.12.2" release="14.el9_6.1" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>python3-ipaclient-4.12.2-14.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">150b252c993fd3c31195eb0d2df95482145f91fa1cdff136b90da13af14848c0</sum>
        </package>
        <package name="ipa-server-dns" version="4.12.2" release="14.el9_6.1" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-server-dns-4.12.2-14.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">171eea3f9743163621ed2872dee699d7f48acafc9e7252c6ea6e006b01436fb0</sum>
        </package>
        <package name="ipa-client" version="4.12.2" release="14.el9_6.1" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-client-4.12.2-14.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">499b13c5d2be0d986764c819023e89fcfb05fd35b30184de1ceaeb7447ecc831</sum>
        </package>
        <package name="ipa-client-epn" version="4.12.2" release="14.el9_6.1" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-client-epn-4.12.2-14.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">53e014fa30f0fb707e3c21d84374eb2335ec7dbca43120df5a6353fe31dbaba7</sum>
        </package>
        <package name="ipa-server-encrypted-dns" version="4.12.2" release="14.el9_6.1" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-server-encrypted-dns-4.12.2-14.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">54601582148138e8098c14ab7f0e261b2b395051e8f32d97310a829f864ddae1</sum>
        </package>
        <package name="python3-ipaserver" version="4.12.2" release="14.el9_6.1" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>python3-ipaserver-4.12.2-14.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">557390d20bd31922e8996b60b8f4416e86285c3e67dd11804baff24000c7da3d</sum>
        </package>
        <package name="ipa-server-common" version="4.12.2" release="14.el9_6.1" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-server-common-4.12.2-14.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">6450928a28711b7b21d127990d41e58dfbc98657728b6eae2d3f9472fcae4581</sum>
        </package>
        <package name="ipa-common" version="4.12.2" release="14.el9_6.1" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-common-4.12.2-14.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">6a1ef8872e035f7204279bd6c76c40fa9efa58912413abd29cede5b1f63e4f20</sum>
        </package>
        <package name="ipa-client-common" version="4.12.2" release="14.el9_6.1" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-client-common-4.12.2-14.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">8347d875a59f69572fac6696612b2938947c28b3b8e39c05ab6c9cd9c9f581eb</sum>
        </package>
        <package name="ipa-client-samba" version="4.12.2" release="14.el9_6.1" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-client-samba-4.12.2-14.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">9a719957d1aaeb8cefbc2c5013d6f76aee4a791fd380e6bab1d683b77ad04164</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.12.2" release="14.el9_6.1" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-server-trust-ad-4.12.2-14.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">a0939ed7514b33f013e63ff5a3adc6e7aed5f8a8aaa7e99e3107240c89fd2a7a</sum>
        </package>
        <package name="ipa-selinux" version="4.12.2" release="14.el9_6.1" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-selinux-4.12.2-14.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">b322b523d6f9d7bf77384ec3b55242ea8dfc60c46339eacc7dabdec80b9209ff</sum>
        </package>
        <package name="ipa-client-encrypted-dns" version="4.12.2" release="14.el9_6.1" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-client-encrypted-dns-4.12.2-14.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">b6151dfa791bb7aa7254524700c2e345bda34049d9949894674eb79547cb46dd</sum>
        </package>
        <package name="ipa-server" version="4.12.2" release="14.el9_6.1" epoch="0" arch="s390x" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-server-4.12.2-14.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">cac03c7881919ab4ab67eebca904f65e393ba8fd697c2ec53045598771ccf3cf</sum>
        </package>
        <package name="python3-ipalib" version="4.12.2" release="14.el9_6.1" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>python3-ipalib-4.12.2-14.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">da414aa448fd3060bacb74b896fe3766bbd2eb95a3a2882819e72b2f5c063863</sum>
        </package>
        <package name="ipa-selinux-nfast" version="4.12.2" release="14.el9_6.1" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>ipa-selinux-nfast-4.12.2-14.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">e32c59ae04a14234bd05db577bb44f34c1f54a69ed4dc2f962397ea201186a8c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9302</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-07-03 08:45:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883)
  * kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919)
  * kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104)
  * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)
  * kernel: ext4: ignore xattrs past end (CVE-2025-37738)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9302" id="RHSA-2025:9302" type="rhsa" title="RHSA-2025:9302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21883" id="CVE-2025-21883" type="cve" title="CVE-2025-21883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21919" id="CVE-2025-21919" type="cve" title="CVE-2025-21919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22104" id="CVE-2025-22104" type="cve" title="CVE-2025-22104"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23150" id="CVE-2025-23150" type="cve" title="CVE-2025-23150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37738" id="CVE-2025-37738" type="cve" title="CVE-2025-37738"/>
      <reference href="https://bugzilla.redhat.com/2355415" id="2355415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356618" id="2356618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360265" id="2360265" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363268" id="2363268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363305" id="2363305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9302.html" id="ALSA-2025:9302" type="self" title="ALSA-2025:9302"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="python3-perf" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.23.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">175392a558e27548c41b968be1e3f2b4561cc0047efe6e60904b1402b6787f50</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.23.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2860e7d53fb5ff0095064e6176fb00d98afef1913d83912866b3a677a87a0b8e</sum>
        </package>
        <package name="rv" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.23.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">28e819dbe4bebc6e832f4088f243c57e3c44d9b3996ee059803e0da2dfeb0e21</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.23.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2bd9713981d9f7011115d040a5d3c7a10c9eef294ad8fa892fc2dea543477c8b</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.23.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">46354e6cbb06d23236c113a50ce04b9d2abfd30bd6dbd667611bdcf818dfd855</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.23.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">53ac92ca367bb81aa29a710de0e6375a4e68171f87f619255d7552491538b4c4</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.23.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5c15070e132ae9597b9eff8d2c3bc3c3850eac569321474a294757a1f8e543da</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.23.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">79d7d478531e704b502fd3dfbb27bd26c976b207afe1c5acb2bf4e7f935d69df</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.23.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">87865478a8b348bacfb32d94df9bf571390ede6b2965f6f594c2bdd59f7c6d8f</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.23.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">b8b67a6418518b8d7a113d2f3199b670fbff4ebb0ed294fcc108bb41edfe1bf0</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.23.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">cb276a1a235f63979fadcd66b5436468e6edc823519307bd087e7aa51e569c5c</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.23.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ced88f36a8d81fe1918ec4188a414731fa9491532764567368d26ac53a33d4b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9303</id>
    <title>Important: xorg-x11-server and xorg-x11-server-Xwayland security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-06-30 13:24:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server and xorg-x11-server-Xwayland security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9303" id="RHSA-2025:9303" type="rhsa" title="RHSA-2025:9303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49175" id="CVE-2025-49175" type="cve" title="CVE-2025-49175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49176" id="CVE-2025-49176" type="cve" title="CVE-2025-49176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49178" id="CVE-2025-49178" type="cve" title="CVE-2025-49178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49179" id="CVE-2025-49179" type="cve" title="CVE-2025-49179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49180" id="CVE-2025-49180" type="cve" title="CVE-2025-49180"/>
      <reference href="https://bugzilla.redhat.com/2369947" id="2369947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369954" id="2369954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369977" id="2369977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369978" id="2369978" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369981" id="2369981" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9303.html" id="ALSA-2025:9303" type="self" title="ALSA-2025:9303"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="31.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-31.el9_6.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-31.el9_6.s390x.rpm</filename>
          <sum type="sha256">0308ef0a175586043ebd968d4c93f9e940bdd6def30670761502fb8f15aa0d5e</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="31.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-31.el9_6.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-31.el9_6.s390x.rpm</filename>
          <sum type="sha256">0e7ea1b43acb02262ce1d08cc28a4593477fb6a9bf99f4b951e436a652dcf7da</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="31.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-31.el9_6.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-31.el9_6.s390x.rpm</filename>
          <sum type="sha256">192ea6e8a115571d7fab205f238a729824168fe6e1ccc8a7b256064bb3d04d31</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="31.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-31.el9_6.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-31.el9_6.s390x.rpm</filename>
          <sum type="sha256">68b6bac964b58eb43573ac253c9838d1f6638d5c0e21c9e1c7cf38fdbe162afc</sum>
        </package>
        <package name="xorg-x11-server-Xwayland" version="23.2.7" release="4.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-23.2.7-4.el9_6.src.rpm">
          <filename>xorg-x11-server-Xwayland-23.2.7-4.el9_6.s390x.rpm</filename>
          <sum type="sha256">a55ad8fb519e26024a543279221ff7d76b7458d968b7813e71b810330601b2c2</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="31.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-31.el9_6.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-31.el9_6.s390x.rpm</filename>
          <sum type="sha256">d6f897703adf0c5c77633cee7750321db0edd5e72086b88511964b2165456690</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="31.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-31.el9_6.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-31.el9_6.s390x.rpm</filename>
          <sum type="sha256">d705d35b417b3de1d785919f35636b02799a9a341fd8d4bce5a752423fa48948</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9306</id>
    <title>Important: tigervnc security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-07-03 08:43:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.  

Security Fix(es):  

  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9306" id="RHSA-2025:9306" type="rhsa" title="RHSA-2025:9306"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49175" id="CVE-2025-49175" type="cve" title="CVE-2025-49175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49176" id="CVE-2025-49176" type="cve" title="CVE-2025-49176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49178" id="CVE-2025-49178" type="cve" title="CVE-2025-49178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49179" id="CVE-2025-49179" type="cve" title="CVE-2025-49179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49180" id="CVE-2025-49180" type="cve" title="CVE-2025-49180"/>
      <reference href="https://bugzilla.redhat.com/2369947" id="2369947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369954" id="2369954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369977" id="2369977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369978" id="2369978" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369981" id="2369981" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9306.html" id="ALSA-2025:9306" type="self" title="ALSA-2025:9306"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="tigervnc-selinux" version="1.14.1" release="8.el9_6" epoch="0" arch="noarch" src="tigervnc-1.14.1-8.el9_6.src.rpm">
          <filename>tigervnc-selinux-1.14.1-8.el9_6.noarch.rpm</filename>
          <sum type="sha256">039326d5ebb4a47a17c6fdc8eeeaca51ee86bbc98affca4ffe8417c429d1c96b</sum>
        </package>
        <package name="tigervnc-icons" version="1.14.1" release="8.el9_6" epoch="0" arch="noarch" src="tigervnc-1.14.1-8.el9_6.src.rpm">
          <filename>tigervnc-icons-1.14.1-8.el9_6.noarch.rpm</filename>
          <sum type="sha256">03f28159cba9a5972244944cb5ed1ba33362e120a279fb44bd86b94babfedb7c</sum>
        </package>
        <package name="tigervnc-server" version="1.14.1" release="8.el9_6" epoch="0" arch="s390x" src="tigervnc-1.14.1-8.el9_6.src.rpm">
          <filename>tigervnc-server-1.14.1-8.el9_6.s390x.rpm</filename>
          <sum type="sha256">098ba2b3827e3df81a2518a976d59d648a5d71fea7471def6e0edfa89549f809</sum>
        </package>
        <package name="tigervnc" version="1.14.1" release="8.el9_6" epoch="0" arch="s390x" src="tigervnc-1.14.1-8.el9_6.src.rpm">
          <filename>tigervnc-1.14.1-8.el9_6.s390x.rpm</filename>
          <sum type="sha256">386ef660f66615472b7c6993ddde52272a62b768afeb8b2da7f774840f0dacda</sum>
        </package>
        <package name="tigervnc-server-module" version="1.14.1" release="8.el9_6" epoch="0" arch="s390x" src="tigervnc-1.14.1-8.el9_6.src.rpm">
          <filename>tigervnc-server-module-1.14.1-8.el9_6.s390x.rpm</filename>
          <sum type="sha256">79a85fcae2cdcebf5e3cb2e178f9d782dccb627afcfe9f84ddfd9e8508973e70</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.14.1" release="8.el9_6" epoch="0" arch="s390x" src="tigervnc-1.14.1-8.el9_6.src.rpm">
          <filename>tigervnc-server-minimal-1.14.1-8.el9_6.s390x.rpm</filename>
          <sum type="sha256">c85f59a32e3d0a7496976b4b00e9488bf2a7d1e393ce62550a04b38b976dd6d5</sum>
        </package>
        <package name="tigervnc-license" version="1.14.1" release="8.el9_6" epoch="0" arch="noarch" src="tigervnc-1.14.1-8.el9_6.src.rpm">
          <filename>tigervnc-license-1.14.1-8.el9_6.noarch.rpm</filename>
          <sum type="sha256">f626d756050528a683217a3547fec95fbb422dca31be312a009bf2447f6258e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9327</id>
    <title>Important: libblockdev security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-07-03 08:41:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libblockdev security update</summary>
    <description>The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID.  

Security Fix(es):  

  * libblockdev: LPE from allow_active to root in libblockdev via udisks (CVE-2025-6019)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9327" id="RHSA-2025:9327" type="rhsa" title="RHSA-2025:9327"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6019" id="CVE-2025-6019" type="cve" title="CVE-2025-6019"/>
      <reference href="https://bugzilla.redhat.com/2370051" id="2370051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9327.html" id="ALSA-2025:9327" type="self" title="ALSA-2025:9327"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libblockdev-tools" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-tools-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">01722e17584f93358b1c2f5dface8b1d5b6e7ccaa3349b623dc03bca9407c71e</sum>
        </package>
        <package name="libblockdev-dm" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-dm-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">0de35b0c97fe616433d967718a485cafc2304d942c3092e30480a9de736c028a</sum>
        </package>
        <package name="libblockdev" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">172c518b16a03f9c9eeaa579719fe59cead5abcaaf7fb1c2d4f836a8d72c7793</sum>
        </package>
        <package name="libblockdev-lvm" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-lvm-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">2609bab5e7b71ea3afb834b9ae976d09727eaa708f2e9eacd9a3fd898d23364b</sum>
        </package>
        <package name="libblockdev-loop" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-loop-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">2a01ad458c6bd6d2a2d3ea5805ff72e44876a160cce6e84c2e8f15c48c3e7f2a</sum>
        </package>
        <package name="libblockdev-part" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-part-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">2fdadf534876784bfec88dc3a84ed8ba4a3d5418af284320d0ae075301e7497d</sum>
        </package>
        <package name="libblockdev-crypto" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-crypto-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">341556b8cb9d0303105a1719c25d69a71a077b2a972398010b3c0de15dca1a37</sum>
        </package>
        <package name="libblockdev-lvm-dbus" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-lvm-dbus-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">56bb528e745cc26990f7236488caf1f7190b1f84de6a85cdd073563c63c40cc6</sum>
        </package>
        <package name="libblockdev-kbd" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-kbd-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">68f6c2178754307347ed5913d807d056fb0b57192a697859a95f7a6d2c699868</sum>
        </package>
        <package name="libblockdev-utils" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-utils-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">82feb7c5a0d43dba6155cac0178561ad3d084df5e9b29e693a4ef94db1295c51</sum>
        </package>
        <package name="libblockdev-s390" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-s390-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">8c53538dc31bf33b87e9320f4f1dca92ce9eafc10de302f8483503b87897faed</sum>
        </package>
        <package name="libblockdev-mdraid" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-mdraid-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">925ba979211cb48eeecc67bede2b68a1c1fa87aeb5bb02d8c4ece8d38addd4b8</sum>
        </package>
        <package name="python3-blockdev" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>python3-blockdev-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">b4758cf5f685a6bf95035459d4b637da684c31aa1acc10c6f28b19c39a786a24</sum>
        </package>
        <package name="libblockdev-fs" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-fs-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">c496567ea47386fd457c9914ba1959aa86cf2b856bfdc4e57f20aeb31e87fbf1</sum>
        </package>
        <package name="libblockdev-mpath" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-mpath-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">d2cdf595d362701ee96973d9c69d5e4facab361d7d5b88735e818df29277f089</sum>
        </package>
        <package name="libblockdev-nvme" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-nvme-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">de949e1ad14660e01ea0894065bdb6473628457c8bbdd148559f2abb41cd5239</sum>
        </package>
        <package name="libblockdev-swap" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-swap-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">deb5b772cc5a7da973afcb0b6b3a0718e5f22404a433dc06428161475777efc8</sum>
        </package>
        <package name="libblockdev-plugins-all" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-plugins-all-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">e9fa862c86ba28c205739d43345615cff7083b7e5a906c9725935cbcb67ee1d5</sum>
        </package>
        <package name="libblockdev-nvdimm" version="2.28" release="14.el9_6" epoch="0" arch="s390x" src="libblockdev-2.28-14.el9_6.src.rpm">
          <filename>libblockdev-nvdimm-2.28-14.el9_6.s390x.rpm</filename>
          <sum type="sha256">f204609e1fe93c7491f460a16556200ac026995229e8f61756adfdf1c36ef905</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9396</id>
    <title>Important: mod_auth_openidc security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-07-03 08:18:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mod_auth_openidc security update</summary>
    <description>The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.   

Security Fix(es):  

  * mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled (CVE-2025-3891)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9396" id="RHSA-2025:9396" type="rhsa" title="RHSA-2025:9396"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3891" id="CVE-2025-3891" type="cve" title="CVE-2025-3891"/>
      <reference href="https://bugzilla.redhat.com/2361633" id="2361633" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9396.html" id="ALSA-2025:9396" type="self" title="ALSA-2025:9396"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="mod_auth_openidc" version="2.4.10" release="1.el9_6.2" epoch="0" arch="s390x" src="mod_auth_openidc-2.4.10-1.el9_6.2.src.rpm">
          <filename>mod_auth_openidc-2.4.10-1.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">677edae81c8920fd0380c013566631a2a6ad5ebbc235cd7a946e4b11b078da88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9430</id>
    <title>Moderate: krb5 security update</title>
    <issued date="2025-06-24 00:00:00"/>
    <updated date="2025-06-30 13:16:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>krb5 security update</summary>
    <description>Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).  

Security Fix(es):  

  * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions (CVE-2025-3576)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9430" id="RHSA-2025:9430" type="rhsa" title="RHSA-2025:9430"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3576" id="CVE-2025-3576" type="cve" title="CVE-2025-3576"/>
      <reference href="https://bugzilla.redhat.com/2359465" id="2359465" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9430.html" id="ALSA-2025:9430" type="self" title="ALSA-2025:9430"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="krb5-devel" version="1.21.1" release="8.el9_6" epoch="0" arch="s390x" src="krb5-1.21.1-8.el9_6.src.rpm">
          <filename>krb5-devel-1.21.1-8.el9_6.s390x.rpm</filename>
          <sum type="sha256">b7e73b332ac4ff7bb0711616e4cef5d78ae27843964fdedb1dc235e7971caf21</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9431</id>
    <title>Moderate: libarchive security update</title>
    <issued date="2025-06-24 00:00:00"/>
    <updated date="2025-06-30 13:14:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: Buffer Overflow vulnerability in libarchive (CVE-2025-25724)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9431" id="RHSA-2025:9431" type="rhsa" title="RHSA-2025:9431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-25724" id="CVE-2025-25724" type="cve" title="CVE-2025-25724"/>
      <reference href="https://bugzilla.redhat.com/2349221" id="2349221" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9431.html" id="ALSA-2025:9431" type="self" title="ALSA-2025:9431"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libarchive-devel" version="3.5.3" release="5.el9_6" epoch="0" arch="s390x" src="libarchive-3.5.3-5.el9_6.src.rpm">
          <filename>libarchive-devel-3.5.3-5.el9_6.s390x.rpm</filename>
          <sum type="sha256">20bb61a1f9e835fdb255768d30bce586d47ddd83ea427fe77f53441000b0bf93</sum>
        </package>
        <package name="bsdtar" version="3.5.3" release="5.el9_6" epoch="0" arch="s390x" src="libarchive-3.5.3-5.el9_6.src.rpm">
          <filename>bsdtar-3.5.3-5.el9_6.s390x.rpm</filename>
          <sum type="sha256">611ad0f6f0ba4aa8dd76d8dfcd17c8061b71f19d2f605730419fa111eebdd107</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9432</id>
    <title>Moderate: iputils security update</title>
    <issued date="2025-06-24 00:00:00"/>
    <updated date="2025-06-30 13:12:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>iputils security update</summary>
    <description>The iputils packages contain basic utilities for monitoring a network, including ping.   

Security Fix(es):  

  * iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (CVE-2025-47268)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9432" id="RHSA-2025:9432" type="rhsa" title="RHSA-2025:9432"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47268" id="CVE-2025-47268" type="cve" title="CVE-2025-47268"/>
      <reference href="https://bugzilla.redhat.com/2364090" id="2364090" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9432.html" id="ALSA-2025:9432" type="self" title="ALSA-2025:9432"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="iputils-ninfod" version="20210202" release="11.el9_6.1" epoch="0" arch="s390x" src="iputils-20210202-11.el9_6.1.src.rpm">
          <filename>iputils-ninfod-20210202-11.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">8ebae4f89a40691a38e84411113c2e9bbfb0e39179619ee493fa2220f478d6ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9434</id>
    <title>Moderate: mod_proxy_cluster security update</title>
    <issued date="2025-06-24 00:00:00"/>
    <updated date="2025-06-30 13:11:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mod_proxy_cluster security update</summary>
    <description>The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality.  

Security Fix(es):  

  * mod_proxy_cluster: mod_proxy_cluster unauthorized MCMP requests (CVE-2024-10306)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9434" id="RHSA-2025:9434" type="rhsa" title="RHSA-2025:9434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10306" id="CVE-2024-10306" type="cve" title="CVE-2024-10306"/>
      <reference href="https://bugzilla.redhat.com/2321302" id="2321302" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9434.html" id="ALSA-2025:9434" type="self" title="ALSA-2025:9434"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="mod_proxy_cluster" version="1.3.22" release="1.el9_6.1" epoch="0" arch="s390x" src="mod_proxy_cluster-1.3.22-1.el9_6.1.src.rpm">
          <filename>mod_proxy_cluster-1.3.22-1.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">c802bb01b45101933a3885172eb401ab397349a23e11bca5261bc9c944b614aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9448</id>
    <title>Moderate: emacs security update</title>
    <issued date="2025-06-24 00:00:00"/>
    <updated date="2025-06-30 13:09:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>emacs security update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.  

Security Fix(es):  

  * emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9448" id="RHSA-2025:9448" type="rhsa" title="RHSA-2025:9448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53920" id="CVE-2024-53920" type="cve" title="CVE-2024-53920"/>
      <reference href="https://bugzilla.redhat.com/2329161" id="2329161" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9448.html" id="ALSA-2025:9448" type="self" title="ALSA-2025:9448"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="emacs-nox" version="27.2" release="14.el9_6.2" epoch="1" arch="s390x" src="emacs-27.2-14.el9_6.2.src.rpm">
          <filename>emacs-nox-27.2-14.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">0c27d23070a47358f8cdcf3f1fea198293bf99f200c4deed03032f3fcee50679</sum>
        </package>
        <package name="emacs" version="27.2" release="14.el9_6.2" epoch="1" arch="s390x" src="emacs-27.2-14.el9_6.2.src.rpm">
          <filename>emacs-27.2-14.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">18d93fa2732d3f65111f1e966e0575fdfe7498703dc07ffbb5c803ec77d9781b</sum>
        </package>
        <package name="emacs-filesystem" version="27.2" release="14.el9_6.2" epoch="1" arch="noarch" src="emacs-27.2-14.el9_6.2.src.rpm">
          <filename>emacs-filesystem-27.2-14.el9_6.2.noarch.rpm</filename>
          <sum type="sha256">25ec94f5d43ce53631d005dd315e24144fba0abf0c8295b2f6396d279c82ab92</sum>
        </package>
        <package name="emacs-common" version="27.2" release="14.el9_6.2" epoch="1" arch="s390x" src="emacs-27.2-14.el9_6.2.src.rpm">
          <filename>emacs-common-27.2-14.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">7dd16c625b561454ed141411005e6162a38ddb523b40831d6a92d2caeed98f79</sum>
        </package>
        <package name="emacs-lucid" version="27.2" release="14.el9_6.2" epoch="1" arch="s390x" src="emacs-27.2-14.el9_6.2.src.rpm">
          <filename>emacs-lucid-27.2-14.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">d2ada47badd89592b3b652fc2742adcb5b172e34d5a9275eaaadae7175e92eb9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9462</id>
    <title>Moderate: qt5-qtbase security update</title>
    <issued date="2025-06-24 00:00:00"/>
    <updated date="2025-06-30 13:07:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.   

Security Fix(es):  

  * qt5: qt6: QtCore Assertion Failure Denial of Service (CVE-2025-5455)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9462" id="RHSA-2025:9462" type="rhsa" title="RHSA-2025:9462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5455" id="CVE-2025-5455" type="cve" title="CVE-2025-5455"/>
      <reference href="https://bugzilla.redhat.com/2369722" id="2369722" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9462.html" id="ALSA-2025:9462" type="self" title="ALSA-2025:9462"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="qt5-qtbase-gui" version="5.15.9" release="11.el9_6" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-11.el9_6.src.rpm">
          <filename>qt5-qtbase-gui-5.15.9-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">021fe2c7de882d229bc89b38cdabe5289cf1aded852731329ab08ef31f5d3ee6</sum>
        </package>
        <package name="qt5-qtbase-examples" version="5.15.9" release="11.el9_6" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-11.el9_6.src.rpm">
          <filename>qt5-qtbase-examples-5.15.9-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">4c92a9b518262cc21955f32427d3c367a10fb4daf79726a1b597b8b9f833f656</sum>
        </package>
        <package name="qt5-qtbase-odbc" version="5.15.9" release="11.el9_6" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-11.el9_6.src.rpm">
          <filename>qt5-qtbase-odbc-5.15.9-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">66f85eb875a002a31c6f0b8ea41c8020974cbb893592aef2f9f7ea376fa6ad3a</sum>
        </package>
        <package name="qt5-qtbase-mysql" version="5.15.9" release="11.el9_6" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-11.el9_6.src.rpm">
          <filename>qt5-qtbase-mysql-5.15.9-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">6ee1651ae4b3abf55027bbf62a8af80c768d370b55b79ffc0013153592fa0679</sum>
        </package>
        <package name="qt5-qtbase" version="5.15.9" release="11.el9_6" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-11.el9_6.src.rpm">
          <filename>qt5-qtbase-5.15.9-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">78bd612f78799016ba1b609b2126b6aaf81fee446a29c7e23982dc4d0359a656</sum>
        </package>
        <package name="qt5-qtbase-private-devel" version="5.15.9" release="11.el9_6" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-11.el9_6.src.rpm">
          <filename>qt5-qtbase-private-devel-5.15.9-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">887305a05a232303ac956baf2661fd0bacf327827fec6693ab4d203952d92384</sum>
        </package>
        <package name="qt5-qtbase-postgresql" version="5.15.9" release="11.el9_6" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-11.el9_6.src.rpm">
          <filename>qt5-qtbase-postgresql-5.15.9-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">a8d96ff7e69ad534b50ef93f74c739680bf892a1c15dfec1f11b6dd65e9c50dc</sum>
        </package>
        <package name="qt5-qtbase-devel" version="5.15.9" release="11.el9_6" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-11.el9_6.src.rpm">
          <filename>qt5-qtbase-devel-5.15.9-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">ee0a83eb8ca3201da0073358cd9bdf07d35d0cdc9abb3c86e567e9122a36dd2f</sum>
        </package>
        <package name="qt5-qtbase-common" version="5.15.9" release="11.el9_6" epoch="0" arch="noarch" src="qt5-qtbase-5.15.9-11.el9_6.src.rpm">
          <filename>qt5-qtbase-common-5.15.9-11.el9_6.noarch.rpm</filename>
          <sum type="sha256">f1e99bd27dbbe60dc66c8efc0ec30a513fe14a1cb68f79b90f8117ce2672582b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9526</id>
    <title>Important: pam security update</title>
    <issued date="2025-06-24 00:00:00"/>
    <updated date="2025-06-26 18:29:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pam security update</summary>
    <description>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  

Security Fix(es):  

  * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9526" id="RHSA-2025:9526" type="rhsa" title="RHSA-2025:9526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6020" id="CVE-2025-6020" type="cve" title="CVE-2025-6020"/>
      <reference href="https://bugzilla.redhat.com/2372512" id="2372512" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9526.html" id="ALSA-2025:9526" type="self" title="ALSA-2025:9526"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="pam-devel" version="1.5.1" release="25.el9_6" epoch="0" arch="s390x" src="pam-1.5.1-25.el9_6.src.rpm">
          <filename>pam-devel-1.5.1-25.el9_6.s390x.rpm</filename>
          <sum type="sha256">6c26fe4569692a054a24d9487616e058680ebcd8fbb2d1daa56b86d25d55da42</sum>
        </package>
        <package name="pam-docs" version="1.5.1" release="25.el9_6" epoch="0" arch="s390x" src="pam-1.5.1-25.el9_6.src.rpm">
          <filename>pam-docs-1.5.1-25.el9_6.s390x.rpm</filename>
          <sum type="sha256">e312d61652c9542c4fd16dcfa71c821fb1f3b7d485e70bc5ee4e06b37d265b02</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9634</id>
    <title>Moderate: osbuild-composer security update</title>
    <issued date="2025-06-25 00:00:00"/>
    <updated date="2025-06-30 13:03:46"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9634" id="RHSA-2025:9634" type="rhsa" title="RHSA-2025:9634"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9634.html" id="ALSA-2025:9634" type="self" title="ALSA-2025:9634"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="osbuild-composer-core" version="132.2" release="2.el9_6.alma.1" epoch="0" arch="s390x" src="osbuild-composer-132.2-2.el9_6.alma.1.src.rpm">
          <filename>osbuild-composer-core-132.2-2.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">3b05b90bc2707b6e01cb4ecc08b5a8f625996d47b2de7d8b3c8f32b28ef0493a</sum>
        </package>
        <package name="osbuild-composer" version="132.2" release="2.el9_6.alma.1" epoch="0" arch="s390x" src="osbuild-composer-132.2-2.el9_6.alma.1.src.rpm">
          <filename>osbuild-composer-132.2-2.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">869b997fc1df1929ae71a1beb5fdbeb6021801f770746ea20ed65b76536cc8f0</sum>
        </package>
        <package name="osbuild-composer-worker" version="132.2" release="2.el9_6.alma.1" epoch="0" arch="s390x" src="osbuild-composer-132.2-2.el9_6.alma.1.src.rpm">
          <filename>osbuild-composer-worker-132.2-2.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">e44574577428d779ee60bce97ff97381a78f60a58061e518dee16b6d6853a8ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9635</id>
    <title>Moderate: weldr-client security update</title>
    <issued date="2025-06-25 00:00:00"/>
    <updated date="2025-06-30 13:02:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>weldr-client security update</summary>
    <description>Command line utility to control osbuild-composer  

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9635" id="RHSA-2025:9635" type="rhsa" title="RHSA-2025:9635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9635.html" id="ALSA-2025:9635" type="self" title="ALSA-2025:9635"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="weldr-client" version="35.12" release="4.el9_6" epoch="0" arch="s390x" src="weldr-client-35.12-4.el9_6.src.rpm">
          <filename>weldr-client-35.12-4.el9_6.s390x.rpm</filename>
          <sum type="sha256">9902c9cb963540277ed0137d79924fde4c2686564bd34cd0592d7827dac69cc6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9877</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-06-30 00:00:00"/>
    <updated date="2025-06-30 12:51:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: Vector register overwrite bug in glibc (CVE-2025-5702)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9877" id="RHSA-2025:9877" type="rhsa" title="RHSA-2025:9877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5702" id="CVE-2025-5702" type="cve" title="CVE-2025-5702"/>
      <reference href="https://bugzilla.redhat.com/2370472" id="2370472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9877.html" id="ALSA-2025:9877" type="self" title="ALSA-2025:9877"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="glibc-locale-source" version="2.34" release="168.el9_6.20" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>glibc-locale-source-2.34-168.el9_6.20.s390x.rpm</filename>
          <sum type="sha256">0dda6054dcf4db7e11b1f9c8caa5f0c3a076238fc117b676a7a266786453975f</sum>
        </package>
        <package name="glibc-headers" version="2.34" release="168.el9_6.20" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>glibc-headers-2.34-168.el9_6.20.s390x.rpm</filename>
          <sum type="sha256">24572c3b45f446cc0baadb9645295953ab52212728cfdf65c5b57a56d02b44f9</sum>
        </package>
        <package name="glibc-doc" version="2.34" release="168.el9_6.20" epoch="0" arch="noarch" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>glibc-doc-2.34-168.el9_6.20.noarch.rpm</filename>
          <sum type="sha256">28b3f946a5262828d8eb862e354c724ef9b3d94e4f67b478d0143d1e9602f990</sum>
        </package>
        <package name="glibc-devel" version="2.34" release="168.el9_6.20" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>glibc-devel-2.34-168.el9_6.20.s390x.rpm</filename>
          <sum type="sha256">b48f46059c5ba45110050276ac8edb279e67fbee7c73367a4f4484a01100ea27</sum>
        </package>
        <package name="glibc-utils" version="2.34" release="168.el9_6.20" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>glibc-utils-2.34-168.el9_6.20.s390x.rpm</filename>
          <sum type="sha256">cb3f805ce4f8dd8ac22a068d594318cb6beffb458cdde689a140fa985850bf27</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9880</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-30 00:00:00"/>
    <updated date="2025-07-02 07:28:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Squashfs: fix handling and sanity checking of xattr_ids count (CVE-2023-52933)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9880" id="RHSA-2025:9880" type="rhsa" title="RHSA-2025:9880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52933" id="CVE-2023-52933" type="cve" title="CVE-2023-52933"/>
      <reference href="https://bugzilla.redhat.com/2355476" id="2355476" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9880.html" id="ALSA-2025:9880" type="self" title="ALSA-2025:9880"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="rv" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>rv-5.14.0-570.24.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">321d36b015fed607769814a634b77e5fa424d74d3d639e05c49cb7262b815049</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-570.24.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">3348582fc90bd28dbc6f1106285e45ac2a512875ff5a5fc2f66a7a36c49883cc</sum>
        </package>
        <package name="rtla" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>rtla-5.14.0-570.24.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">45cb4395eb5a51cb2e588e26c912502f687ae40e510f2b457f507175928a9fa4</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="noarch" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-doc-5.14.0-570.24.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">5247c5cbc83482e14a931d052280abf572fb4c0d7cd104e4836c7a757549193b</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-5.14.0-570.24.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5bc034a1c80d8f520269c8a341c46330efa32b86fe54f5d9105e0231dd894e68</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-570.24.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">842fcc04b70b92b7ad709b174c9625cd66c3bc50ead17436bb0cdc0853ab990e</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-devel-matched-5.14.0-570.24.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8bb80de63728a423ecf09d627dd3bdfb836ac2008b863429424423a63e4053f3</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-headers-5.14.0-570.24.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">9a2f004f3972794b6c8cf8183043485af865450fbac016404fe65dd45a1b0e2b</sum>
        </package>
        <package name="perf" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>perf-5.14.0-570.24.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">be359f91de58fd9d4daa223e3e142248a2870e5ba6813410fd5dca0faf6fa7ca</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-570.24.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d4b8e2307ed5928bcda476da2f3de015b98e94742ca96b216a9a4554ee72ffee</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-devel-5.14.0-570.24.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">fa5b1b2683f3be7510b3f727f346f0227947284683a541d9cdeba373e465ab41</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>python3-perf-5.14.0-570.24.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ff5a30480603bf75d735591e193c8e655d2371319b3c7bd04b508d1ff280b7fe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9978</id>
    <title>Important: sudo security update</title>
    <issued date="2025-06-30 00:00:00"/>
    <updated date="2025-07-01 19:33:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sudo security update</summary>
    <description>The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.  

Security Fix(es):  

  * sudo: LPE via host option (CVE-2025-32462)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9978" id="RHSA-2025:9978" type="rhsa" title="RHSA-2025:9978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32462" id="CVE-2025-32462" type="cve" title="CVE-2025-32462"/>
      <reference href="https://bugzilla.redhat.com/2374692" id="2374692" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9978.html" id="ALSA-2025:9978" type="self" title="ALSA-2025:9978"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="sudo-python-plugin" version="1.9.5p2" release="10.el9_6.1" epoch="0" arch="s390x" src="sudo-1.9.5p2-10.el9_6.1.src.rpm">
          <filename>sudo-python-plugin-1.9.5p2-10.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">0e97d85c7653a57607f12ac2aa2009df01e5a7607ab10ac13cbf729fe3c304b5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:A005</id>
    <title>Important: libblockdev security update</title>
    <issued date="2025-06-20 00:00:00"/>
    <updated date="2025-06-20 15:05:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libblockdev security update</summary>
    <description>libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology (like LVM, Btrfs, MD RAID, Swap,...) is implemented in a separate plugin, possibly with multiple implementations (e.g. using LVM CLI or the new LVM DBus API).

Security Fix(es):

* libblockdev: Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. (CVE-2025-6019)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6019" id="CVE-2025-6019" type="cve" title="CVE-2025-6019"/>
      <reference href="https://bugzilla.redhat.com/2370051" id="2370051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-A005.html" id="ALSA-2025:A005" type="self" title="ALSA-2025:A005"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_6_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_6_default</name>
        <package name="libblockdev-part" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-part-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">0f74a5052530a8c8ede4e1dc006e9844a0382ab40eb9a3b42b813fd39f45b40b</sum>
        </package>
        <package name="libblockdev-tools" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-tools-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">1017be66e501eb59492f4d1db17d5ef13c0e5749fbd5ac64e1a2ca5e618a5fc1</sum>
        </package>
        <package name="libblockdev-swap" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-swap-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">180f7429ec3b05e6b9aabe9439a0530c30dcf733a47f215efbcc45bf2227331c</sum>
        </package>
        <package name="libblockdev-dm" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-dm-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">1b06e62262bdbd80efad1bef90c0951aff19d18cfdd1a9c6a064f15a6df2f694</sum>
        </package>
        <package name="libblockdev-lvm-dbus" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-lvm-dbus-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">3f7469256fa3cad2b43e63484dd2d04c09d5bd9dec46d9f602b264ebd70a3353</sum>
        </package>
        <package name="libblockdev-plugins-all" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-plugins-all-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">43c4a344c9e50a9784722004d0f8ac1d4a5df4570fc1093045eb18d293e6506d</sum>
        </package>
        <package name="libblockdev-nvme" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-nvme-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">4f721678de0471c403f53256503effecd8fc889d39bcbba75ffe53d00364f5c4</sum>
        </package>
        <package name="libblockdev" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">53af1f19907de7619eba74b9c00a6c674ea994179fea6423c65467c576c4fac9</sum>
        </package>
        <package name="libblockdev-kbd" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-kbd-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">5d4563be5bef3fd6f174654c442e2559a5a366048968b1779d6ac449e1735510</sum>
        </package>
        <package name="libblockdev-utils" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-utils-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">61a51947219b5cbf13d6ca8cef9d8a8392b8a36ea8fd2bc4546aa17b2037a8b8</sum>
        </package>
        <package name="libblockdev-mpath" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-mpath-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">674072cf9a9d6567a9119560d29ae754c56e6167496eebaeb59d22b4a7764e5e</sum>
        </package>
        <package name="libblockdev-lvm" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-lvm-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">79432109b06e4798c809085defec33bd88f53c1106e31aa5cc8dadee7a17c7ab</sum>
        </package>
        <package name="python3-blockdev" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>python3-blockdev-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">9421e34ced6db97eda1a66cf84150a251863bf2f267a6e97452804abf81f9664</sum>
        </package>
        <package name="libblockdev-loop" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-loop-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">a32194b44dcb885719be45041ad88dab52cc74ec78e0abb415217a27c0119ea2</sum>
        </package>
        <package name="libblockdev-s390" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-s390-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">b501e01a12c492e05cb4d1c77d81e9db99cbfa73a94b13b7654d0158f28a9991</sum>
        </package>
        <package name="libblockdev-nvdimm" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-nvdimm-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">b89a1af997ef6de18bba3fe2ebfa57ca816eeec27daf93c89a8d7b01e702be63</sum>
        </package>
        <package name="libblockdev-crypto" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-crypto-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">dfd94bd25f9a42e7354a210fb760612cd0d32fecd7e2d2918ac38faf07fde0c7</sum>
        </package>
        <package name="libblockdev-fs" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-fs-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">e80a43372df9cb881c896361031babb94e28157cd55f03471020c312b02dbd79</sum>
        </package>
        <package name="libblockdev-mdraid" version="2.28" release="13.el9_6.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-13.el9_6.alma.1.src.rpm">
          <filename>libblockdev-mdraid-2.28-13.el9_6.alma.1.s390x.rpm</filename>
          <sum type="sha256">fab9551c48b4e9016db7a6227a5d6c4a202c871d58bb3b19416f89b260fdd08e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0052</id>
    <title>Moderate: gcc-toolset-14-binutils security update</title>
    <issued date="2026-01-05 00:00:00"/>
    <updated date="2026-01-05 20:18:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc-toolset-14-binutils security update</summary>
    <description>Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line).  

Security Fix(es):  

  * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0052" id="RHSA-2026:0052" type="rhsa" title="RHSA-2026:0052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11083" id="CVE-2025-11083" type="cve" title="CVE-2025-11083"/>
      <reference href="https://bugzilla.redhat.com/2399948" id="2399948" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0052.html" id="ALSA-2026:0052" type="self" title="ALSA-2026:0052"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="gcc-toolset-14-binutils-gold" version="2.41" release="5.el9_7.1" epoch="0" arch="s390x" src="gcc-toolset-14-binutils-2.41-5.el9_7.1.src.rpm">
          <filename>gcc-toolset-14-binutils-gold-2.41-5.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">1d1b1aa0ecd28a16c31de2b2e335ad59e7b839944f4ff03a0e28b657e149b975</sum>
        </package>
        <package name="gcc-toolset-14-binutils-devel" version="2.41" release="5.el9_7.1" epoch="0" arch="s390x" src="gcc-toolset-14-binutils-2.41-5.el9_7.1.src.rpm">
          <filename>gcc-toolset-14-binutils-devel-2.41-5.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">6a44449ae328c83417859808646fa5f24f4dfee96ec48d16db1d4f6e310c1389</sum>
        </package>
        <package name="gcc-toolset-14-binutils" version="2.41" release="5.el9_7.1" epoch="0" arch="s390x" src="gcc-toolset-14-binutils-2.41-5.el9_7.1.src.rpm">
          <filename>gcc-toolset-14-binutils-2.41-5.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">98f9327198862bb5d835134c9c77a0a94f434189c68cde86893bb17f90e69247</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0126</id>
    <title>Moderate: poppler security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:21:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0126" id="RHSA-2026:0126" type="rhsa" title="RHSA-2026:0126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32365" id="CVE-2025-32365" type="cve" title="CVE-2025-32365"/>
      <reference href="https://bugzilla.redhat.com/2357656" id="2357656" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0126.html" id="ALSA-2026:0126" type="self" title="ALSA-2026:0126"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="poppler" version="21.01.0" release="23.el9_7" epoch="0" arch="s390x" src="poppler-21.01.0-23.el9_7.src.rpm">
          <filename>poppler-21.01.0-23.el9_7.s390x.rpm</filename>
          <sum type="sha256">2c6a09f83f64d50938aed7054149e806c9a2cd431c271c76084f0dad782d25ea</sum>
        </package>
        <package name="poppler-glib" version="21.01.0" release="23.el9_7" epoch="0" arch="s390x" src="poppler-21.01.0-23.el9_7.src.rpm">
          <filename>poppler-glib-21.01.0-23.el9_7.s390x.rpm</filename>
          <sum type="sha256">30cc1f7b7eb60617c4a1fdae0f5e94c966b0c529a224341edf89db3c57cd713b</sum>
        </package>
        <package name="poppler-qt5" version="21.01.0" release="23.el9_7" epoch="0" arch="s390x" src="poppler-21.01.0-23.el9_7.src.rpm">
          <filename>poppler-qt5-21.01.0-23.el9_7.s390x.rpm</filename>
          <sum type="sha256">346092176cee6650e70b340c6b63df770e65ed6629e43562acf88f4587cd8adf</sum>
        </package>
        <package name="poppler-utils" version="21.01.0" release="23.el9_7" epoch="0" arch="s390x" src="poppler-21.01.0-23.el9_7.src.rpm">
          <filename>poppler-utils-21.01.0-23.el9_7.s390x.rpm</filename>
          <sum type="sha256">955952f8774d2cc0e45a332381f78048680521c3e49a0ecbf045873c54c9f66d</sum>
        </package>
        <package name="poppler-cpp" version="21.01.0" release="23.el9_7" epoch="0" arch="s390x" src="poppler-21.01.0-23.el9_7.src.rpm">
          <filename>poppler-cpp-21.01.0-23.el9_7.s390x.rpm</filename>
          <sum type="sha256">d8c2de81251b5e20859949b4f39c5b39567ad044a9b9cd31d4d3a6195e816e1b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0137</id>
    <title>Important: mariadb security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:24:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mariadb security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.   

Security Fix(es):  

  * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0137" id="RHSA-2026:0137" type="rhsa" title="RHSA-2026:0137"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13699" id="CVE-2025-13699" type="cve" title="CVE-2025-13699"/>
      <reference href="https://bugzilla.redhat.com/2417693" id="2417693" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0137.html" id="ALSA-2026:0137" type="self" title="ALSA-2026:0137"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="mariadb-server-utils" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-server-utils-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">12b92cc8f905ce9f18804a466e76f11ee8bdb3ac3b43c5af95d62680e400c815</sum>
        </package>
        <package name="mariadb-server-galera" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-server-galera-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">769ef66b913f79c2a19e6513752e9a4f7787db97759c3dc661cd34ebff3be446</sum>
        </package>
        <package name="mariadb-pam" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-pam-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">7d6dffc8812db4eb52eb28f01c8dc6fee2531ae4c4f136f60195bbe45ab7ac15</sum>
        </package>
        <package name="mariadb-common" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-common-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">8025e60ed4308dec23c8144ee4b3b0ee758de7d2f7ace66cfa7ceb9d72bd700e</sum>
        </package>
        <package name="mariadb-server" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-server-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">8c7798cb06acecc86fa7fad90bc180d1f8cfa7cb4d88cd5c563f273cac964e7e</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-gssapi-server-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">b31130744791cef0ec499acad3de1518bc6cc7c3ae640ba91df815d7d6f80638</sum>
        </package>
        <package name="mariadb" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">bfa5b054b2d4a027d8808b96788d376236e7e253455908057d08db96a883939f</sum>
        </package>
        <package name="mariadb-embedded" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-embedded-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">c1890b0de1c844b8761c7d2fcd8f33c0ab15115f2008e04f12a445db33a193f2</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-oqgraph-engine-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">c51a5742b9aec42920a5ee1dd0dcfd396744d9b7b3c7db5903903b2c7d3d4094</sum>
        </package>
        <package name="mariadb-backup" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-backup-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">e97e890722d776dee0da109d8fbd3b0d073dd9f034e263bcda02755821e39ec3</sum>
        </package>
        <package name="mariadb-errmsg" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-errmsg-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">f08be1feb5c3fa2e026674c69b9e067e13f2ec699ba0bc1447d70dbad552e871</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0238</id>
    <title>Important: libpng security update</title>
    <issued date="2026-01-07 00:00:00"/>
    <updated date="2026-01-07 21:36:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libpng security update</summary>
    <description>The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files.  

Security Fix(es):  

  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)
  * libpng: LIBPNG out-of-bounds read in png_image_read_composite (CVE-2025-66293)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0238" id="RHSA-2026:0238" type="rhsa" title="RHSA-2026:0238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66293" id="CVE-2025-66293" type="cve" title="CVE-2025-66293"/>
      <reference href="https://bugzilla.redhat.com/2416904" id="2416904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416907" id="2416907" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418711" id="2418711" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0238.html" id="ALSA-2026:0238" type="self" title="ALSA-2026:0238"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libpng" version="1.6.37" release="12.el9_7.1" epoch="2" arch="s390x" src="libpng-1.6.37-12.el9_7.1.src.rpm">
          <filename>libpng-1.6.37-12.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">3dc590a0737fa20bc210653f9e6161e28d3cf432f69ab1f0d5d95e6b0c864143</sum>
        </package>
        <package name="libpng-devel" version="1.6.37" release="12.el9_7.1" epoch="2" arch="s390x" src="libpng-1.6.37-12.el9_7.1.src.rpm">
          <filename>libpng-devel-1.6.37-12.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">4e2e19716a709f29c96094afbf47aeffc5762aebfe3f34bd3be6dc580defe6d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0247</id>
    <title>Important: mariadb:10.11 security update</title>
    <issued date="2026-01-07 00:00:00"/>
    <updated date="2026-01-12 10:57:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mariadb:10.11 security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.   

Security Fix(es):  

  * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
  * mariadb: MariaDB Server Crash (CVE-2023-52971)
  * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
  * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
  * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0247" id="RHSA-2026:0247" type="rhsa" title="RHSA-2026:0247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52969" id="CVE-2023-52969" type="cve" title="CVE-2023-52969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52970" id="CVE-2023-52970" type="cve" title="CVE-2023-52970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52971" id="CVE-2023-52971" type="cve" title="CVE-2023-52971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13699" id="CVE-2025-13699" type="cve" title="CVE-2025-13699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21490" id="CVE-2025-21490" type="cve" title="CVE-2025-21490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30693" id="CVE-2025-30693" type="cve" title="CVE-2025-30693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30722" id="CVE-2025-30722" type="cve" title="CVE-2025-30722"/>
      <reference href="https://bugzilla.redhat.com/2339221" id="2339221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350916" id="2350916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350917" id="2350917" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350918" id="2350918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359885" id="2359885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359963" id="2359963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2417693" id="2417693" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0247.html" id="ALSA-2026:0247" type="self" title="ALSA-2026:0247"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="mariadb" stream="10.11" version="9050020250204093711" context="8cf767d6" arch="s390x"/>
        <package name="mariadb-common" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-common-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">1835d2cbc63607ebc1c0fc8ba2a9ebb2bd00a5ec0b8062651fddb911c63ddfde</sum>
        </package>
        <package name="mariadb-errmsg" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-errmsg-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">2030c66040cc9f394c0e8e8a7f346a5dc6027e1db815239d1f1e647dea884e9e</sum>
        </package>
        <package name="mariadb-embedded" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-embedded-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">270bdb7967cfcdea53440f7df79599ba76c73d6ff1591b7a604e057bf2eb9e24</sum>
        </package>
        <package name="mariadb-test" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-test-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">2a8497610740767788bfa6cabbd329272a1e670503c280f0b5e6edf219bbef14</sum>
        </package>
        <package name="mariadb-server-utils" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-server-utils-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">30dcb100b186adc6c9524bf93d09e0ddb3bbffeffde0b8ef7393e46b3791b39e</sum>
        </package>
        <package name="mariadb-devel" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-devel-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">3dca2fa09024dc4003ea478a0347f9027c146cbd8999501c17597b01c6a7f3bc</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-oqgraph-engine-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">51fc391f6f20592268ad00b70b262c193d49f5a1af3ffcde9f04e20d7756bced</sum>
        </package>
        <package name="mariadb-server-galera" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-server-galera-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">662ab26f43f471a13ff132212770a93d06c39fddfe4c29aad22e6834ae5f6b39</sum>
        </package>
        <package name="mariadb-pam" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-pam-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">6a5efccc910a34e180e1c1ae43dbe2feb667df2b62bd09eb98625414ce5917eb</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-embedded-devel-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">6bc54f07d81e668e0cd6204a6fe71242bf430c44282e94db9ab9eea9a686c55a</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-gssapi-server-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">a8dd40c445352141287aa9d5a536536057f90d61f403df724e1c99b5ffccc907</sum>
        </package>
        <package name="galera" version="26.4.20" release="1.module_el9.5.0+135+c9657a87" epoch="0" arch="s390x" src="galera-26.4.20-1.module_el9.5.0+135+c9657a87.src.rpm">
          <filename>galera-26.4.20-1.module_el9.5.0+135+c9657a87.s390x.rpm</filename>
          <sum type="sha256">b1736be01bc8575b37793302af46791604d60ec5c5eb0f7a3320a2d92b27eef4</sum>
        </package>
        <package name="mariadb-backup" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-backup-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">bc01c668b7e91e43b4920ae43947faf8aadd3e0e5ca07e332447f4c4d46e8881</sum>
        </package>
        <package name="mariadb" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">c5c2629f2af46f28ca9382dca01a18441130d155c9972bc336508dfb7aa3296a</sum>
        </package>
        <package name="mariadb-server" version="10.11.15" release="1.module_el9.7.0+199+a988ea01" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el9.7.0+199+a988ea01.src.rpm">
          <filename>mariadb-server-10.11.15-1.module_el9.7.0+199+a988ea01.s390x.rpm</filename>
          <sum type="sha256">e95ae00d0ffab94135ed138378949470102c4e4381ad2786fea11c09cace4ba7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0312</id>
    <title>Moderate: cups security update</title>
    <issued date="2026-01-08 00:00:00"/>
    <updated date="2026-01-16 15:40:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915)
  * cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0312" id="RHSA-2026:0312" type="rhsa" title="RHSA-2026:0312"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58436" id="CVE-2025-58436" type="cve" title="CVE-2025-58436"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61915" id="CVE-2025-61915" type="cve" title="CVE-2025-61915"/>
      <reference href="https://bugzilla.redhat.com/2416039" id="2416039" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416040" id="2416040" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0312.html" id="ALSA-2026:0312" type="self" title="ALSA-2026:0312"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="cups-lpd" version="2.3.3op2" release="34.el9_7.2" epoch="1" arch="s390x" src="cups-2.3.3op2-34.el9_7.2.src.rpm">
          <filename>cups-lpd-2.3.3op2-34.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">00f8feb4621f56cfae3567a7bea3758fe3282e1f8195be2c3692861c8ddd0348</sum>
        </package>
        <package name="cups-devel" version="2.3.3op2" release="34.el9_7.2" epoch="1" arch="s390x" src="cups-2.3.3op2-34.el9_7.2.src.rpm">
          <filename>cups-devel-2.3.3op2-34.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">0d20a8ed5cd53def3a075d30b18786da60140da2dfd64cd11b6d693a3543dd62</sum>
        </package>
        <package name="cups-ipptool" version="2.3.3op2" release="34.el9_7.2" epoch="1" arch="s390x" src="cups-2.3.3op2-34.el9_7.2.src.rpm">
          <filename>cups-ipptool-2.3.3op2-34.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">4cfbf74c7be34511e8369c865c4a031ae6b18c8243dd262c51dc47f34fb9624f</sum>
        </package>
        <package name="cups-filesystem" version="2.3.3op2" release="34.el9_7.2" epoch="1" arch="noarch" src="cups-2.3.3op2-34.el9_7.2.src.rpm">
          <filename>cups-filesystem-2.3.3op2-34.el9_7.2.noarch.rpm</filename>
          <sum type="sha256">73a56973f3c00f25c9e386d2cbfeb2233ef6c766c8ad30acd4e13b7c6533b6db</sum>
        </package>
        <package name="cups" version="2.3.3op2" release="34.el9_7.2" epoch="1" arch="s390x" src="cups-2.3.3op2-34.el9_7.2.src.rpm">
          <filename>cups-2.3.3op2-34.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">864eb48dc14709500c359a799b5aa6abd4b181304b0f9d1346d746ef7132c054</sum>
        </package>
        <package name="cups-client" version="2.3.3op2" release="34.el9_7.2" epoch="1" arch="s390x" src="cups-2.3.3op2-34.el9_7.2.src.rpm">
          <filename>cups-client-2.3.3op2-34.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">a7a1c51dff5117f00239456ea48855ed61ff166b338de21cde13450d0596d245</sum>
        </package>
        <package name="cups-printerapp" version="2.3.3op2" release="34.el9_7.2" epoch="1" arch="s390x" src="cups-2.3.3op2-34.el9_7.2.src.rpm">
          <filename>cups-printerapp-2.3.3op2-34.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">c555ca09f6321b978088fcf12794d9a58552329a9a341393c816a5c474b410c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0422</id>
    <title>Important: libsoup security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:46:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins) (CVE-2025-14523)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0422" id="RHSA-2026:0422" type="rhsa" title="RHSA-2026:0422"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14523" id="CVE-2025-14523" type="cve" title="CVE-2025-14523"/>
      <reference href="https://bugzilla.redhat.com/2421349" id="2421349" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0422.html" id="ALSA-2026:0422" type="self" title="ALSA-2026:0422"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libsoup-devel" version="2.72.0" release="12.el9_7.3" epoch="0" arch="s390x" src="libsoup-2.72.0-12.el9_7.3.src.rpm">
          <filename>libsoup-devel-2.72.0-12.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">a2d89deffadee3a05e7be1064db6d0e862e6b314ece85c840dd5de21a5e9a2c4</sum>
        </package>
        <package name="libsoup" version="2.72.0" release="12.el9_7.3" epoch="0" arch="s390x" src="libsoup-2.72.0-12.el9_7.3.src.rpm">
          <filename>libsoup-2.72.0-12.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">fd366e82c74f52cf8d6d519812e70f33acbb2365770258f0b802e12348369870</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0437</id>
    <title>Important: buildah security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:38:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.   

Security Fix(es):  

  * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0437" id="RHSA-2026:0437" type="rhsa" title="RHSA-2026:0437"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47913" id="CVE-2025-47913" type="cve" title="CVE-2025-47913"/>
      <reference href="https://bugzilla.redhat.com/2414943" id="2414943" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0437.html" id="ALSA-2026:0437" type="self" title="ALSA-2026:0437"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="buildah-tests" version="1.41.8" release="1.el9_7" epoch="2" arch="s390x" src="buildah-1.41.8-1.el9_7.src.rpm">
          <filename>buildah-tests-1.41.8-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">8bc70fa8bfa6cada47dd3a82f120984ff5fc5df452a8c5c51dbfc686fefaea30</sum>
        </package>
        <package name="buildah" version="1.41.8" release="1.el9_7" epoch="2" arch="s390x" src="buildah-1.41.8-1.el9_7.src.rpm">
          <filename>buildah-1.41.8-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">9b9e194be0749dd9a0378bbdc8dc36953e89ec42f47ca3d4f4b8f0f6be2ccd65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0445</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:31:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806)
  * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840)
  * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
  * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0445" id="RHSA-2026:0445" type="rhsa" title="RHSA-2026:0445"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39806" id="CVE-2025-39806" type="cve" title="CVE-2025-39806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39840" id="CVE-2025-39840" type="cve" title="CVE-2025-39840"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39883" id="CVE-2025-39883" type="cve" title="CVE-2025-39883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40240" id="CVE-2025-40240" type="cve" title="CVE-2025-40240"/>
      <reference href="https://bugzilla.redhat.com/2395807" id="2395807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396936" id="2396936" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397553" id="2397553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418832" id="2418832" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0445.html" id="ALSA-2026:0445" type="self" title="ALSA-2026:0445"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3-perf" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.20.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">0e650ac12532d196eeea89a2d10480e67535381ffebae8857a87cb58470b6412</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.20.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">19f5e32a89986b4cc831ce2d012ab03be8347212686369b676f8817537ce093f</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.20.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">3fb239e4cd46c2aff5ab01ddf437b417dd805a01093fcfc5db2428b356b5b441</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.20.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">44458d42b0f759ebc41f503a5d4bb5c879729ab15661ae9a8d1c8b938fa1e528</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.20.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">51fa12974fdf9063f5a13fe150584a918ef8d855c9fd30b7786eba51d132a04c</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.20.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5bd14aa035ad9fbcebaf273ee263a2d36923e6aaa29461784b2984577f0929ea</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.20.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">891e6af8b7f7639b6585e5f0392ab4b755e9599cde75993cc821fa9dccdec4e3</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.20.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ac87c6b9734d95d6cb85baa1e56ed8ab8d4fc4ee59944d6f694fd1f49c6dcc24</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.20.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">c4746ac8e2a67b931027d2764a050a759fc57058dc65384853bffb64b271a53f</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.20.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">cd00ded33367979fd01eb36fd7430439a7b503324f3aa2a80ba4ca5f1aef8ad7</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.20.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d6b2e4eedb75daece07fad6576066b2776cb7260bcfa2f46aaca74eade6d029d</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.20.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">fdb76002940c9e01d1cf1538cb92f285b29a1ac6ca206264e0bfed7ef7b1c92c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0458</id>
    <title>Moderate: libpq security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:21:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libpq security update</summary>
    <description>The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers.   

Security Fix(es):  

  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0458" id="RHSA-2026:0458" type="rhsa" title="RHSA-2026:0458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0458.html" id="ALSA-2026:0458" type="self" title="ALSA-2026:0458"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libpq" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="libpq-13.23-1.el9_7.src.rpm">
          <filename>libpq-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">173636baa568681401213cb96157373bbca8aa6f2dabb05fac004332e488154f</sum>
        </package>
        <package name="libpq-devel" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="libpq-13.23-1.el9_7.src.rpm">
          <filename>libpq-devel-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">447e719f9c610027b6c5b70ed8956951ce685fb01e14f596942f66f27c71c0d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0470</id>
    <title>Important: podman security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:18:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0470" id="RHSA-2026:0470" type="rhsa" title="RHSA-2026:0470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47913" id="CVE-2025-47913" type="cve" title="CVE-2025-47913"/>
      <reference href="https://bugzilla.redhat.com/2414943" id="2414943" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0470.html" id="ALSA-2026:0470" type="self" title="ALSA-2026:0470"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="podman" version="5.6.0" release="11.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-11.el9_7.src.rpm">
          <filename>podman-5.6.0-11.el9_7.s390x.rpm</filename>
          <sum type="sha256">4c73a85936aeb0b8f354d6664037278a4fc883b4495e473a0cc32acb315ec1a1</sum>
        </package>
        <package name="podman-remote" version="5.6.0" release="11.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-11.el9_7.src.rpm">
          <filename>podman-remote-5.6.0-11.el9_7.s390x.rpm</filename>
          <sum type="sha256">5920622e8af7a63b9f638a1a81ae9efa2ae1065065e448c7c69153c29992d8f4</sum>
        </package>
        <package name="podman-plugins" version="5.6.0" release="11.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-11.el9_7.src.rpm">
          <filename>podman-plugins-5.6.0-11.el9_7.s390x.rpm</filename>
          <sum type="sha256">5d8b3af0cf45ebd74dfcb7f94c99e931ac6f08d2d72a18c18fd568cb9638a052</sum>
        </package>
        <package name="podman-tests" version="5.6.0" release="11.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-11.el9_7.src.rpm">
          <filename>podman-tests-5.6.0-11.el9_7.s390x.rpm</filename>
          <sum type="sha256">6fc78571e8eb8ce13a894c0e478e6f3baf80c0e804b5b7f171d5eaa1d8d39b7b</sum>
        </package>
        <package name="podman-docker" version="5.6.0" release="11.el9_7" epoch="6" arch="noarch" src="podman-5.6.0-11.el9_7.src.rpm">
          <filename>podman-docker-5.6.0-11.el9_7.noarch.rpm</filename>
          <sum type="sha256">fe388f5da95af53e2b93750e8ad166315cfc9110e62c0b4194048f6e5a01a136</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0491</id>
    <title>Moderate: postgresql security update</title>
    <issued date="2026-01-13 00:00:00"/>
    <updated date="2026-01-16 15:16:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817)
  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0491" id="RHSA-2026:0491" type="rhsa" title="RHSA-2026:0491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12817" id="CVE-2025-12817" type="cve" title="CVE-2025-12817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414825" id="2414825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0491.html" id="ALSA-2026:0491" type="self" title="ALSA-2026:0491"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="postgresql-server" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-server-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">0c016b536a7196f7eb40a8be5317cd73a87ffa401ce2fc65ca9ebe53678ad7ed</sum>
        </package>
        <package name="postgresql-plperl" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-plperl-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">0d7f92c20cda2ddae279a05ac3f071069a935da6d98ce1984ffe28619847ddf1</sum>
        </package>
        <package name="postgresql-plpython3" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-plpython3-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">40c7118c944687dfd45e8f128459ff352359f25da222fe3cf4ff4a1d3b1cae64</sum>
        </package>
        <package name="postgresql-upgrade" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-upgrade-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4728d00e4de73963baa73d837b4a0dd6a36054ed97c20e1a1fc7fa720c80247d</sum>
        </package>
        <package name="postgresql-pltcl" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-pltcl-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">a27dbb056fe9d4b860403b239ede7021de2541f7e2f19732e5d39578eaf3a5e0</sum>
        </package>
        <package name="postgresql-contrib" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-contrib-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">bb377ffafd3b0a61cc4e482b0174edcce4505f045d6cfebdd40955ffdc42508c</sum>
        </package>
        <package name="postgresql" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">bce877845aa1c84fb675372e98b0d6ba091c64d28cf32981433904915f451e47</sum>
        </package>
        <package name="postgresql-private-libs" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-private-libs-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">efb386035faa0d8aee75b8a0fd55119a764f5995cacd633ba331cc47dc3e5243</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0492</id>
    <title>Moderate: postgresql:15 security update</title>
    <issued date="2026-01-13 00:00:00"/>
    <updated date="2026-01-19 10:02:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817)
  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0492" id="RHSA-2026:0492" type="rhsa" title="RHSA-2026:0492"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12817" id="CVE-2025-12817" type="cve" title="CVE-2025-12817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414825" id="2414825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0492.html" id="ALSA-2026:0492" type="self" title="ALSA-2026:0492"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="postgresql" stream="15" version="9050020241004143704" context="8cf767d6" arch="s390x"/>
        <package name="pgaudit" version="1.7.0" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89</sum>
        </package>
        <package name="postgresql-contrib" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-contrib-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">136a159d6b2f4fd85b0ae47be789e992a2bd13b96023ecb1b0b8bd6085a1603b</sum>
        </package>
        <package name="postgresql-plpython3" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-plpython3-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">25f9d6834894296066d1fca80af6911dbea32c68e7a64ac9e253619cc13d8d63</sum>
        </package>
        <package name="postgresql-server-devel" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-server-devel-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">2f9eab42901f16c59e75d52e77be960a40b38e234b0d3df282b72755b4c1e05f</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="noarch" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-test-rpm-macros-15.15-2.module_el9.7.0+203+960b74c0.noarch.rpm</filename>
          <sum type="sha256">330684e3e7b8642ae37e872a613159ce42281f3d78c2649c0e26b56c1c939197</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445</sum>
        </package>
        <package name="postgresql-docs" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-docs-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">483acb9d7f9c6044bee3c4d776bb410920c90666477ad482343c87e43ccb3fc2</sum>
        </package>
        <package name="postgresql-private-devel" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-private-devel-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">489662f7fddc169fcc32ffb6f0da0477fafc7c8c66e0f5c477cbb762a781ad0a</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="2.module_el9.5.0+119+18833d03" epoch="0" arch="s390x" src="pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.src.rpm">
          <filename>pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.s390x.rpm</filename>
          <sum type="sha256">565b4d4edc782cf6df048e990f78d9a96ef21d4a91af2800aa9a0d66ac77ae8f</sum>
        </package>
        <package name="postgresql-pltcl" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-pltcl-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">7de33f0887204f846f2335016403d0921fb5f7a1329f296e22e423d93a93086e</sum>
        </package>
        <package name="postgresql-static" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-static-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">8f00378fb1f172fb102373d8acc537740bf7d55f5d828dbdfac7da8f69c428d2</sum>
        </package>
        <package name="postgresql" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">94d69e80a718fa28b530c4fb2df4ded9f56448ba22291be86f8b1f70428f8e9c</sum>
        </package>
        <package name="postgresql-upgrade" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-upgrade-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">a3f67547d7ca4fdd92f3c2fa837c80446146669aeb29e80f5aa0743764be8831</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-upgrade-devel-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">af194c47d033d3f88098636f02304e351cab43c2717ca2fd517cbdeb8a495553</sum>
        </package>
        <package name="postgresql-server" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-server-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">b828d332d6107ef3a76338fb3f66932431a823ce06ff401553cc5895701e6f30</sum>
        </package>
        <package name="postgresql-test" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-test-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">c2640ee3705ec50e9b958146a1022909bea8798bfcd18100dbdef3ddbe319159</sum>
        </package>
        <package name="postgresql-plperl" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-plperl-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">db20f43fba0d1cc78ade1106a40296aa6801d84afea4173410ffc7d69029420f</sum>
        </package>
        <package name="postgresql-private-libs" version="15.15" release="2.module_el9.7.0+203+960b74c0" epoch="0" arch="s390x" src="postgresql-15.15-2.module_el9.7.0+203+960b74c0.src.rpm">
          <filename>postgresql-private-libs-15.15-2.module_el9.7.0+203+960b74c0.s390x.rpm</filename>
          <sum type="sha256">e6d546b113ddef885949fd03f760da06e17d055b8f39f47269ce7267fc03db3e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0493</id>
    <title>Moderate: postgresql:16 security update</title>
    <issued date="2026-01-13 00:00:00"/>
    <updated date="2026-01-19 09:45:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql:16 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817)
  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0493" id="RHSA-2026:0493" type="rhsa" title="RHSA-2026:0493"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12817" id="CVE-2025-12817" type="cve" title="CVE-2025-12817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414825" id="2414825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0493.html" id="ALSA-2026:0493" type="self" title="ALSA-2026:0493"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="postgresql" stream="16" version="9060020250317150833" context="8cf767d6" arch="s390x"/>
        <package name="pgvector" version="0.6.2" release="2.module_el9.6.0+167+4e561146" epoch="0" arch="s390x" src="pgvector-0.6.2-2.module_el9.6.0+167+4e561146.src.rpm">
          <filename>pgvector-0.6.2-2.module_el9.6.0+167+4e561146.s390x.rpm</filename>
          <sum type="sha256">0189f49bef1c20bac87922d6991e5f0b0b8b5aa7a6b04cfdca3876c35810d906</sum>
        </package>
        <package name="postgresql-contrib" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-contrib-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">0bab335fa28612069b4676472e9afbe39486408db19a22482474cd8f5b648d42</sum>
        </package>
        <package name="postgresql-private-devel" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-private-devel-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">28ce8ff44ba64c091377fe4f8d0b26b8619a5d4509b557f95472e3fa4bebe6e4</sum>
        </package>
        <package name="postgis-client" version="3.5.3" release="3.module_el9.7.0+187+2286ff0a" epoch="0" arch="s390x" src="postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.src.rpm">
          <filename>postgis-client-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm</filename>
          <sum type="sha256">3e3c27086d65ab7f69141c813b7afdff70bd3074e3f2e8149c2c95b454a7066a</sum>
        </package>
        <package name="postgis-docs" version="3.5.3" release="3.module_el9.7.0+187+2286ff0a" epoch="0" arch="s390x" src="postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.src.rpm">
          <filename>postgis-docs-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm</filename>
          <sum type="sha256">3ea30af2681c7b274e13cfbc4196f9f05c7bdb2be71edb1a25341dc766227d60</sum>
        </package>
        <package name="postgresql-private-libs" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-private-libs-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">4437185bbb6bfcc4039994eca94e481a90d064ea79c66c6e727df8bf3067642d</sum>
        </package>
        <package name="postgresql-pltcl" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-pltcl-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">4c8e9867a148a4412ed204a9b807bd4e0a78a70989232230685d17a98ea37aa2</sum>
        </package>
        <package name="postgis" version="3.5.3" release="3.module_el9.7.0+187+2286ff0a" epoch="0" arch="s390x" src="postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.src.rpm">
          <filename>postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm</filename>
          <sum type="sha256">5350562fab47f66524d7dbda44510b5a76ba5301664983bb3bd6392d6ec91740</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-upgrade-devel-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">86815bde16238a6762ae3ec6407960660a6005be52aefe10f3103879cac51718</sum>
        </package>
        <package name="postgis-upgrade" version="3.5.3" release="3.module_el9.7.0+187+2286ff0a" epoch="0" arch="s390x" src="postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.src.rpm">
          <filename>postgis-upgrade-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm</filename>
          <sum type="sha256">902fb1ceb74b0812bb672b8ed413fda3b5af06ce924da22ca89bc31b3da262ee</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="noarch" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-test-rpm-macros-16.11-1.module_el9.7.0+202+21427d8a.noarch.rpm</filename>
          <sum type="sha256">940c8264e2782e3c00d22deefd96195ab5ac1c317555d15c38115f2ca94b6bda</sum>
        </package>
        <package name="postgis-utils" version="3.5.3" release="3.module_el9.7.0+187+2286ff0a" epoch="0" arch="s390x" src="postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.src.rpm">
          <filename>postgis-utils-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm</filename>
          <sum type="sha256">a3245da7fd72a14cb42d07e048ccae6530d0f4233e1cf691eb2a1d7d31d7e26e</sum>
        </package>
        <package name="postgresql" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">a430c03007f86d170c3915c0a6c5e168677e750873f1cb0bb309fc3b75e78af0</sum>
        </package>
        <package name="postgresql-upgrade" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-upgrade-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">a4601e53be6438cd62172dce7289f6ce70f3a8bcf4a712dbb7e46c4bb47fdad7</sum>
        </package>
        <package name="pg_repack" version="1.5.1" release="1.module_el9.6.0+146+c54fdeca" epoch="0" arch="s390x" src="pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.src.rpm">
          <filename>pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.s390x.rpm</filename>
          <sum type="sha256">a56cf5176cd4cb07287fa3fdddaa1e11739b70444afbb4d23f7669dd0b4b3360</sum>
        </package>
        <package name="postgresql-server" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-server-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">aac05c3d7fd2725e6339adb920ab06a80712aea169d6dfce64334e3c72ae51c8</sum>
        </package>
        <package name="postgresql-static" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-static-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">b11a9d5e9510f148d882e2f69841095038d720cabe556a45603e125303e8fba2</sum>
        </package>
        <package name="postgres-decoderbufs" version="2.4.0" release="1.Final.module_el9.4.0+66+eb9878bc" epoch="0" arch="s390x" src="postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.src.rpm">
          <filename>postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm</filename>
          <sum type="sha256">b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c</sum>
        </package>
        <package name="postgresql-test" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-test-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">b93aae42f3726656aa1b94a913ad2a2d5c426ea73f4dc091ebc21da888b4b1ab</sum>
        </package>
        <package name="postgresql-plperl" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-plperl-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">b9568c59aedbde65ac6edfd76b56d5237026dbf26f7db3213f8306e617127637</sum>
        </package>
        <package name="postgresql-server-devel" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-server-devel-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">cdc07c0a30c4ab79757919f459b295666875cc7f834a0bc86e338c50704212f4</sum>
        </package>
        <package name="pgaudit" version="16.0" release="1.module_el9.4.0+66+eb9878bc" epoch="0" arch="s390x" src="pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.src.rpm">
          <filename>pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm</filename>
          <sum type="sha256">dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739</sum>
        </package>
        <package name="postgresql-docs" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-docs-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">e440c521e802aa52ff804ba5d016d513ae36516467159d9e6f375a339d66831e</sum>
        </package>
        <package name="postgresql-plpython3" version="16.11" release="1.module_el9.7.0+202+21427d8a" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el9.7.0+202+21427d8a.src.rpm">
          <filename>postgresql-plpython3-16.11-1.module_el9.7.0+202+21427d8a.s390x.rpm</filename>
          <sum type="sha256">f93d1ad0b2b36a065b2ca80140abcedf6b403df470e33be13442c2f64d8d398f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0605</id>
    <title>Moderate: vsftpd security update</title>
    <issued date="2026-01-14 00:00:00"/>
    <updated date="2026-01-16 14:57:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vsftpd security update</summary>
    <description>The vsftpd packages include a Very Secure File Transfer Protocol (FTP) daemon, which is used to serve files over a network.  

Security Fix(es):  

  * vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing (CVE-2025-14242)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0605" id="RHSA-2026:0605" type="rhsa" title="RHSA-2026:0605"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14242" id="CVE-2025-14242" type="cve" title="CVE-2025-14242"/>
      <reference href="https://bugzilla.redhat.com/2419826" id="2419826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0605.html" id="ALSA-2026:0605" type="self" title="ALSA-2026:0605"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="vsftpd" version="3.0.5" release="6.el9_7.2" epoch="0" arch="s390x" src="vsftpd-3.0.5-6.el9_7.2.src.rpm">
          <filename>vsftpd-3.0.5-6.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">6de167b6f495ad6e44c257116680c3a18c6f598ca63d8899e4007f6ebea1a1a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0694</id>
    <title>Important: firefox security update</title>
    <issued date="2026-01-15 00:00:00"/>
    <updated date="2026-01-16 14:51:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Spoofing issue in the Downloads Panel component (CVE-2025-14327)
  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-0885)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 (CVE-2026-0891)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-0878)
  * firefox: Use-after-free in the IPC component (CVE-2026-0882)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-0884)
  * firefox: Information disclosure in the Networking component (CVE-2026-0883)
  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-0877)
  * firefox: Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop component (CVE-2026-0890)
  * firefox: Clickjacking issue, information disclosure in the PDF Viewer component (CVE-2026-0887)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-0879)
  * firefox: Sandbox escape due to integer overflow in the Graphics component (CVE-2026-0880)
  * firefox: Incorrect boundary conditions in the Graphics component (CVE-2026-0886)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0694" id="RHSA-2026:0694" type="rhsa" title="RHSA-2026:0694"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14327" id="CVE-2025-14327" type="cve" title="CVE-2025-14327"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0877" id="CVE-2026-0877" type="cve" title="CVE-2026-0877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0878" id="CVE-2026-0878" type="cve" title="CVE-2026-0878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0879" id="CVE-2026-0879" type="cve" title="CVE-2026-0879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0880" id="CVE-2026-0880" type="cve" title="CVE-2026-0880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0882" id="CVE-2026-0882" type="cve" title="CVE-2026-0882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0883" id="CVE-2026-0883" type="cve" title="CVE-2026-0883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0884" id="CVE-2026-0884" type="cve" title="CVE-2026-0884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0885" id="CVE-2026-0885" type="cve" title="CVE-2026-0885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0886" id="CVE-2026-0886" type="cve" title="CVE-2026-0886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0887" id="CVE-2026-0887" type="cve" title="CVE-2026-0887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0890" id="CVE-2026-0890" type="cve" title="CVE-2026-0890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0891" id="CVE-2026-0891" type="cve" title="CVE-2026-0891"/>
      <reference href="https://bugzilla.redhat.com/2420507" id="2420507" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428961" id="2428961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428963" id="2428963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428965" id="2428965" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428966" id="2428966" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428967" id="2428967" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428968" id="2428968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428969" id="2428969" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428971" id="2428971" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428972" id="2428972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428973" id="2428973" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428975" id="2428975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428978" id="2428978" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0694.html" id="ALSA-2026:0694" type="self" title="ALSA-2026:0694"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="firefox" version="140.7.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.7.0-1.el9_7.alma.1.src.rpm">
          <filename>firefox-140.7.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">17c239680542a67170e75e25a3b1f91da699dfe7237fe20fab2aad93e356e260</sum>
        </package>
        <package name="firefox-x11" version="140.7.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.7.0-1.el9_7.alma.1.src.rpm">
          <filename>firefox-x11-140.7.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">b6d051017e5000e64db2936637daa438734b7e8ff89726228874f6a66bbd70d8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0696</id>
    <title>Important: net-snmp security update</title>
    <issued date="2026-01-15 00:00:00"/>
    <updated date="2026-01-26 10:04:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>net-snmp security update</summary>
    <description>The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser.  

Security Fix(es):  

  * net-snmp: buffer overflow via a specially crafted packet can cause a crash in snmptrapd (CVE-2025-68615)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0696" id="RHSA-2026:0696" type="rhsa" title="RHSA-2026:0696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68615" id="CVE-2025-68615" type="cve" title="CVE-2025-68615"/>
      <reference href="https://bugzilla.redhat.com/2424618" id="2424618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0696.html" id="ALSA-2026:0696" type="self" title="ALSA-2026:0696"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="net-snmp-devel" version="5.9.1" release="17.el9_7.1" epoch="1" arch="s390x" src="net-snmp-5.9.1-17.el9_7.1.src.rpm">
          <filename>net-snmp-devel-5.9.1-17.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">04f83934ce72aa296602538d9f35124c6bf1831e066a688fae6160a6058ba53c</sum>
        </package>
        <package name="net-snmp" version="5.9.1" release="17.el9_7.1" epoch="1" arch="s390x" src="net-snmp-5.9.1-17.el9_7.1.src.rpm">
          <filename>net-snmp-5.9.1-17.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">24725f53fec041962e68bb81296c0c16fc1a9da96cf21114e64be9cfe6cde89e</sum>
        </package>
        <package name="net-snmp-libs" version="5.9.1" release="17.el9_7.1" epoch="1" arch="s390x" src="net-snmp-5.9.1-17.el9_7.1.src.rpm">
          <filename>net-snmp-libs-5.9.1-17.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">3dcd35b8c8b7f9ad37d7358b3006ebfe2f4f045cd01f786922ae4dba335d7800</sum>
        </package>
        <package name="python3-net-snmp" version="5.9.1" release="17.el9_7.1" epoch="1" arch="s390x" src="net-snmp-5.9.1-17.el9_7.1.src.rpm">
          <filename>python3-net-snmp-5.9.1-17.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">63acc73cf9a69248c66313d48bea2b3cff67aebfbaabfc6d99d34c56c369f42f</sum>
        </package>
        <package name="net-snmp-utils" version="5.9.1" release="17.el9_7.1" epoch="1" arch="s390x" src="net-snmp-5.9.1-17.el9_7.1.src.rpm">
          <filename>net-snmp-utils-5.9.1-17.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">70a057f3031f04e36bd78aafd7751c8d2f148f8874a7fdab195feb3504e5c5d6</sum>
        </package>
        <package name="net-snmp-agent-libs" version="5.9.1" release="17.el9_7.1" epoch="1" arch="s390x" src="net-snmp-5.9.1-17.el9_7.1.src.rpm">
          <filename>net-snmp-agent-libs-5.9.1-17.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">92b26f0899bb907ac1a31e5bb58f6e34ff341e9fa0fb184a2da2bd0b2603d79d</sum>
        </package>
        <package name="net-snmp-perl" version="5.9.1" release="17.el9_7.1" epoch="1" arch="s390x" src="net-snmp-5.9.1-17.el9_7.1.src.rpm">
          <filename>net-snmp-perl-5.9.1-17.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">b789510362a31a556743de473baf1613d82d895e8f377f317ebcff5af3a99ad2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0719</id>
    <title>Important: gnupg2 security update</title>
    <issued date="2026-01-15 00:00:00"/>
    <updated date="2026-01-16 08:23:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gnupg2 security update</summary>
    <description>The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.  

Security Fix(es):  

  * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0719" id="RHSA-2026:0719" type="rhsa" title="RHSA-2026:0719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68973" id="CVE-2025-68973" type="cve" title="CVE-2025-68973"/>
      <reference href="https://bugzilla.redhat.com/2425966" id="2425966" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0719.html" id="ALSA-2026:0719" type="self" title="ALSA-2026:0719"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="gnupg2-smime" version="2.3.3" release="5.el9_7" epoch="0" arch="s390x" src="gnupg2-2.3.3-5.el9_7.src.rpm">
          <filename>gnupg2-smime-2.3.3-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">c2b485d5a1bc174db7852f78b3d236dc42c6e515c15b41c86fa51e62706e6768</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0771</id>
    <title>Important: gpsd-minimal security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-20 11:54:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gpsd-minimal security update</summary>
    <description>gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. The AlmaLinux support for this package is limited. See &lt;https://access.AlmaLinux.com/support/policy/gpsd-support&gt; for more details.  

Security Fix(es):  

  * gpsd: gpsd: Denial of Service due to malformed NAVCOM packet parsing (CVE-2025-67269)
  * gpsd: gpsd: Arbitrary code execution via heap-based out-of-bounds write in NMEA2000 packet handling (CVE-2025-67268)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0771" id="RHSA-2026:0771" type="rhsa" title="RHSA-2026:0771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-67268" id="CVE-2025-67268" type="cve" title="CVE-2025-67268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-67269" id="CVE-2025-67269" type="cve" title="CVE-2025-67269"/>
      <reference href="https://bugzilla.redhat.com/2426810" id="2426810" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2426835" id="2426835" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0771.html" id="ALSA-2026:0771" type="self" title="ALSA-2026:0771"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="gpsd-minimal" version="3.26.1" release="1.el9_7.1" epoch="1" arch="s390x" src="gpsd-minimal-3.26.1-1.el9_7.1.src.rpm">
          <filename>gpsd-minimal-3.26.1-1.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">2eecd839576ef40dd99b20427c25c70ffcb3e541707b5cd73e426775be0fe982</sum>
        </package>
        <package name="gpsd-minimal-clients" version="3.26.1" release="1.el9_7.1" epoch="1" arch="s390x" src="gpsd-minimal-3.26.1-1.el9_7.1.src.rpm">
          <filename>gpsd-minimal-clients-3.26.1-1.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">bb2d4099fd12096fb3703c012eb6a09c99d1e7011962c2ab85ace64ea767b034</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0793</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-23 13:22:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: drm/xe: Make dma-fences compliant with the safe access rules (CVE-2025-38703)
  * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933)
  * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)
  * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287)
  * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0793" id="RHSA-2026:0793" type="rhsa" title="RHSA-2026:0793"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38703" id="CVE-2025-38703" type="cve" title="CVE-2025-38703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39933" id="CVE-2025-39933" type="cve" title="CVE-2025-39933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40277" id="CVE-2025-40277" type="cve" title="CVE-2025-40277"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68285" id="CVE-2025-68285" type="cve" title="CVE-2025-68285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68287" id="CVE-2025-68287" type="cve" title="CVE-2025-68287"/>
      <reference href="https://bugzilla.redhat.com/2393157" id="2393157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401432" id="2401432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419954" id="2419954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422788" id="2422788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422801" id="2422801" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0793.html" id="ALSA-2026:0793" type="self" title="ALSA-2026:0793"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3-perf" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.24.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">09e42c6e5fed02772987845db9888d342511f87ec468fbfd1e186a198ec1758a</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.24.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">1fd5ab52faa89ada656f1e1078515035d1ce98ed29a6627a683ea76cf3995997</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.24.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">30cd510192c022a6a10174325fba72dcebd87a6012fbece7d4353fc2c2eef025</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.24.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">3e3566544ffcc913d62e40889e68ef64a6dbd2d44e1a21c1066a79a117f654a4</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.24.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">3f35d54970ac8d753b6a3ebf8ffa9d4b4fb5978ab7022e9ec98cb8eefc90fe47</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.24.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4ca2e0f88f5edc6471bb52e7c306465d2cae9d9c949354b2f82e5455dc044de9</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.24.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5a052a3c25868dfc79c9b5821f00e8e184b1325376262820023a72da82ce2dc1</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.24.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">608142f9673de3c091e0b48cb78e9ec906d9cea7c51d001185b19b64f8bc48f2</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.24.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">85742b854399afbf7b46d5e8f4493979525063b8c7dfc030eca6ec72c16f59e1</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.24.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">a13cc62ba65baa62b2b46cdd079e6b75439e0305c922e66281a008f42edcdcac</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.24.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">c52f6892441f0e19552b4672fa132ea11045ba4017d3145ef3148f283efa65c5</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.24.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ed4aa5d17394b63b5e4e83188493dd59d70024809a6c1a88a4cd4a639d92fa91</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0923</id>
    <title>Important: golang security update</title>
    <issued date="2026-01-21 00:00:00"/>
    <updated date="2026-01-24 01:54:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.  

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0923" id="RHSA-2026:0923" type="rhsa" title="RHSA-2026:0923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0923.html" id="ALSA-2026:0923" type="self" title="ALSA-2026:0923"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="golang-docs" version="1.25.5" release="2.el9_7" epoch="0" arch="noarch" src="golang-1.25.5-2.el9_7.src.rpm">
          <filename>golang-docs-1.25.5-2.el9_7.noarch.rpm</filename>
          <sum type="sha256">017697f71acf4d64b058879907fa309ac1e13d27452eba8eac1a23e4d54acb67</sum>
        </package>
        <package name="golang" version="1.25.5" release="2.el9_7" epoch="0" arch="s390x" src="golang-1.25.5-2.el9_7.src.rpm">
          <filename>golang-1.25.5-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">0f116af74ff4e77bb94e466d2a9828252dbf4b1cc65b8189e626c8efc9c10741</sum>
        </package>
        <package name="golang-bin" version="1.25.5" release="2.el9_7" epoch="0" arch="s390x" src="golang-1.25.5-2.el9_7.src.rpm">
          <filename>golang-bin-1.25.5-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">17eb3d08bb68d1e4b1fbcf2e5d1fa2be4905a4fb0ae088ee647a5afbb018c34d</sum>
        </package>
        <package name="golang-misc" version="1.25.5" release="2.el9_7" epoch="0" arch="noarch" src="golang-1.25.5-2.el9_7.src.rpm">
          <filename>golang-misc-1.25.5-2.el9_7.noarch.rpm</filename>
          <sum type="sha256">4ac06a4a09988615efa6f169678a08486a491e66c064483e6b2e7455d1ff8925</sum>
        </package>
        <package name="golang-tests" version="1.25.5" release="2.el9_7" epoch="0" arch="noarch" src="golang-1.25.5-2.el9_7.src.rpm">
          <filename>golang-tests-1.25.5-2.el9_7.noarch.rpm</filename>
          <sum type="sha256">55d6d6285f19148b604e70e01e03b893ba654ea41093344e35b5ab2642db501c</sum>
        </package>
        <package name="golang-race" version="1.25.5" release="2.el9_7" epoch="0" arch="s390x" src="golang-1.25.5-2.el9_7.src.rpm">
          <filename>golang-race-1.25.5-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">a4bfa1cfb52e3cec9004def6db38001621bc81fa38b63e961bfe97d5ae1622b9</sum>
        </package>
        <package name="go-toolset" version="1.25.5" release="2.el9_7" epoch="0" arch="s390x" src="golang-1.25.5-2.el9_7.src.rpm">
          <filename>go-toolset-1.25.5-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">ae4189d82107a7fa95b0978d5892d9bbe92e6eb1c6bd96b033934fdbe0a3a0e5</sum>
        </package>
        <package name="golang-src" version="1.25.5" release="2.el9_7" epoch="0" arch="noarch" src="golang-1.25.5-2.el9_7.src.rpm">
          <filename>golang-src-1.25.5-2.el9_7.noarch.rpm</filename>
          <sum type="sha256">bc52f91659c22e783be8b4ce726ce162e9e98ad2e1699408e3ef87111736c50b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0924</id>
    <title>Important: thunderbird security update</title>
    <issued date="2026-01-21 00:00:00"/>
    <updated date="2026-01-24 01:47:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: Spoofing issue in the Downloads Panel component (CVE-2025-14327)
  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-0885)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 (CVE-2026-0891)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-0878)
  * firefox: Use-after-free in the IPC component (CVE-2026-0882)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-0884)
  * firefox: Information disclosure in the Networking component (CVE-2026-0883)
  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-0877)
  * firefox: Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop component (CVE-2026-0890)
  * firefox: Clickjacking issue, information disclosure in the PDF Viewer component (CVE-2026-0887)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-0879)
  * firefox: Sandbox escape due to integer overflow in the Graphics component (CVE-2026-0880)
  * firefox: Incorrect boundary conditions in the Graphics component (CVE-2026-0886)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0924" id="RHSA-2026:0924" type="rhsa" title="RHSA-2026:0924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14327" id="CVE-2025-14327" type="cve" title="CVE-2025-14327"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0877" id="CVE-2026-0877" type="cve" title="CVE-2026-0877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0878" id="CVE-2026-0878" type="cve" title="CVE-2026-0878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0879" id="CVE-2026-0879" type="cve" title="CVE-2026-0879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0880" id="CVE-2026-0880" type="cve" title="CVE-2026-0880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0882" id="CVE-2026-0882" type="cve" title="CVE-2026-0882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0883" id="CVE-2026-0883" type="cve" title="CVE-2026-0883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0884" id="CVE-2026-0884" type="cve" title="CVE-2026-0884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0885" id="CVE-2026-0885" type="cve" title="CVE-2026-0885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0886" id="CVE-2026-0886" type="cve" title="CVE-2026-0886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0887" id="CVE-2026-0887" type="cve" title="CVE-2026-0887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0890" id="CVE-2026-0890" type="cve" title="CVE-2026-0890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0891" id="CVE-2026-0891" type="cve" title="CVE-2026-0891"/>
      <reference href="https://bugzilla.redhat.com/2420507" id="2420507" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428961" id="2428961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428963" id="2428963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428965" id="2428965" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428966" id="2428966" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428967" id="2428967" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428968" id="2428968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428969" id="2428969" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428971" id="2428971" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428972" id="2428972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428973" id="2428973" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428975" id="2428975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428978" id="2428978" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0924.html" id="ALSA-2026:0924" type="self" title="ALSA-2026:0924"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="thunderbird" version="140.7.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="thunderbird-140.7.0-1.el9_7.alma.1.src.rpm">
          <filename>thunderbird-140.7.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">fef31c00c698f8d7270c8a68f3f9d9bfea32fe76da86dad31f050801f7d9be7d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0927</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-24 01:49:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142862, AlmaLinux-142881, AlmaLinux-142882, AlmaLinux-142883, AlmaLinux-142884, AlmaLinux-142885, AlmaLinux-142886, AlmaLinux-142887, AlmaLinux-142888)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0927" id="RHSA-2026:0927" type="rhsa" title="RHSA-2026:0927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0927.html" id="ALSA-2026:0927" type="self" title="ALSA-2026:0927"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">096f7a42c9333897faa587e1079b8ca960ebba9eb25836fa75a950824bf066aa</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">1fd114c63944d23badfda235e77a3f58754a1a728a94a3c05f84af8d5363859a</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">3168a972db501242a91dc421507042676ee47b72ed940b6aef5156b038b844c3</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">4de822b42c08088d0a46bd45c588513573271e810f9932381b3cdc0e32afde94</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d4049cfdacb7cf056b7d64bfde9ad19cd29b9a6ea3ba0bdd7891aec1eba4f2a4</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ed87758ef7367fc94e1b70d69d1fd10e26171a217d167535250f26ae3f3534f9</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f212693a226c50cd38d88171a41086f927fa1247b15efdc649f02306557b2002</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f4047e158608df8e3f8eb5198a36a28ab7f9183be85bfe3ebddcea0a21d601fc</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f820dba301668f262bf0703416211fc92b218169f9b18b724db614bebda86f70</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0928</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-24 01:32:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142860, AlmaLinux-142876, AlmaLinux-142877, AlmaLinux-142878, AlmaLinux-142879, AlmaLinux-142880)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0928" id="RHSA-2026:0928" type="rhsa" title="RHSA-2026:0928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0928.html" id="ALSA-2026:0928" type="self" title="ALSA-2026:0928"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="java-21-openjdk-jmods" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">12cbc42f31a374f59af416fa43f179e8ea0788535ee5c69b79691f9f9ca4ce85</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">4ef7a3bca22d191c211792d36f1822dfa4106375e0bdc8a6712c080ac2ad31ba</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">673f036cf41c416d3384421551fdb825f584ceb6a2a9f7ec527cf1db91b1b1d5</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">af3a88e0ce4a285839e0e0bb8b87994ddb5f21ca6484e42fa10d95a153b73960</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b830ed8bb48184bd922b0dd79297cef8bbe5335d2423bccf5a2c1e80c388c8a8</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">befb834bc89bea3819fa93bea42e0fe9996a8feb5e8403a7db450e347d36cda7</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c54a7ba696c9f16168bb190fd22d3e99d7e211df06d2752d2d4c1e4cd498ed9e</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d22dfa66f5ac9066fc45f6c5b0ee9bd95c574fd074ddb6a62c42f8a9af3894b3</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e6ecc16ce105bf6f7c7c09590fb5b7daed6807aea8079804f4510a7d0a46d1c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0932</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-29 13:07:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142865, AlmaLinux-142866, AlmaLinux-142867, AlmaLinux-142868, AlmaLinux-142869, AlmaLinux-142870, AlmaLinux-142871, AlmaLinux-142872, AlmaLinux-142873, AlmaLinux-142874)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0932" id="RHSA-2026:0932" type="rhsa" title="RHSA-2026:0932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0932.html" id="ALSA-2026:0932" type="self" title="ALSA-2026:0932"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.482.b08" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.482.b08-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">015fd29a9acd29319ef4b55b801c3d7278ab689eb6752d3074efe4844db8a436</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.482.b08" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.482.b08-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">09550a37115eeca68d31ba825ef67b3a17c983461dd9bb8827ca8144c884d157</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.482.b08" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.482.b08-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">4dcd2ad740f51e391e423576078bd04f1c72792df6a46054e3e0787bcdd61b6d</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.482.b08" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.482.b08-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">8cae677402e07b118cf99fb08b7cdf1295386616d638006c3885229630498fdf</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.482.b08" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.482.b08-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b67d6ac534e471c037e6ad83b47a0cd3e97923b5ebae1fc5ea9c5bb4f549f993</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.482.b08" release="1.el9.alma.1" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.482.b08-1.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">d1665a0e2c7d7440ada16a71ba16415ea2ae7ad001de712c7619cb874af50054</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.482.b08" release="1.el9.alma.1" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.482.b08-1.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">fb04d6b0265ca8491c2b7ba3eef588a6f893083aebbbdbf01172e6e6e12db50f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0933</id>
    <title>Important: java-25-openjdk security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-28 14:34:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-25-openjdk security update</summary>
    <description>The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0933" id="RHSA-2026:0933" type="rhsa" title="RHSA-2026:0933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0933.html" id="ALSA-2026:0933" type="self" title="ALSA-2026:0933"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="java-25-openjdk-javadoc-zip" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-javadoc-zip-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">16e6bdf30005caeeee894edd26d2ef76f8e6a573a8e73f63672094b9a5b6857a</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">2e84bc3d52263b5fca890d697b28ab60139af3acec5513e2094f3e7984724e07</sum>
        </package>
        <package name="java-25-openjdk-headless" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-headless-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">6023ddded9327485e2bb658bd7554e4bbee3daa9f1c78f4796ba0a0cfb4ff882</sum>
        </package>
        <package name="java-25-openjdk-javadoc" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-javadoc-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">82fd73944eb2e9ba20cc7e2e7e9e2a1e8a1e76705aa58aad4e7eb905901b0d33</sum>
        </package>
        <package name="java-25-openjdk-src" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-src-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">9d8f9a00bc34270887184a2b16935ab5a08b92279d96331e37ca8a288c01a08a</sum>
        </package>
        <package name="java-25-openjdk-jmods" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-jmods-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ab5d6634bac92fb13004332625aed73ab71a205a5a62424cfd4cb4442102b796</sum>
        </package>
        <package name="java-25-openjdk-static-libs" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-static-libs-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b4ec2f9e7f5668f19909a3eb86e6a33c3cdbe5bd8ea7b00dc09be7d1a48eb741</sum>
        </package>
        <package name="java-25-openjdk" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d8c13411b09d4833e438018083d0639e811f6ff99b5b106dcc3e45489f57120c</sum>
        </package>
        <package name="java-25-openjdk-demo" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-demo-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">dcb6f1e1114d001c2fd40122db197fab0232f81923af74bc21761641cf42d0af</sum>
        </package>
        <package name="java-25-openjdk-devel" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-devel-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">de6c1ec8006703736880c9e98f3785c94e7ab79aabd0274d2d492ce880ee83c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0936</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-01-21 00:00:00"/>
    <updated date="2026-01-24 01:44:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0936" id="RHSA-2026:0936" type="rhsa" title="RHSA-2026:0936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13601" id="CVE-2025-13601" type="cve" title="CVE-2025-13601"/>
      <reference href="https://bugzilla.redhat.com/2416741" id="2416741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0936.html" id="ALSA-2026:0936" type="self" title="ALSA-2026:0936"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="glib2-doc" version="2.68.4" release="18.el9_7.1" epoch="0" arch="noarch" src="glib2-2.68.4-18.el9_7.1.src.rpm">
          <filename>glib2-doc-2.68.4-18.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">6c6a2d7e6276ee535a450ca9a72cd6b2b72f16a015e765b04ca6a049a1e9a5b1</sum>
        </package>
        <package name="glib2-devel" version="2.68.4" release="18.el9_7.1" epoch="0" arch="s390x" src="glib2-2.68.4-18.el9_7.1.src.rpm">
          <filename>glib2-devel-2.68.4-18.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">c8fb65a53c0b73a286575ef9f99c27be5dbade436762656057fefd8ec76d8116</sum>
        </package>
        <package name="glib2-tests" version="2.68.4" release="18.el9_7.1" epoch="0" arch="s390x" src="glib2-2.68.4-18.el9_7.1.src.rpm">
          <filename>glib2-tests-2.68.4-18.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">e8bf7558f7af071382d5c35af0743b93b00a05dd30ed636964aafb4561b8894a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10135</id>
    <title>Important: buildah security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-30 07:28:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.   

Security Fix(es):  

  * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10135" id="RHSA-2026:10135" type="rhsa" title="RHSA-2026:10135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34986" id="CVE-2026-34986" type="cve" title="CVE-2026-34986"/>
      <reference href="https://bugzilla.redhat.com/2455470" id="2455470" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-10135.html" id="ALSA-2026:10135" type="self" title="ALSA-2026:10135"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="buildah-tests" version="1.41.8" release="3.el9_7" epoch="2" arch="s390x" src="buildah-1.41.8-3.el9_7.src.rpm">
          <filename>buildah-tests-1.41.8-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">a379b3e00edb1d0b1bd1c0dbcc2ce363b2952e962795ef952f3c2d39755e5d6c</sum>
        </package>
        <package name="buildah" version="1.41.8" release="3.el9_7" epoch="2" arch="s390x" src="buildah-1.41.8-3.el9_7.src.rpm">
          <filename>buildah-1.41.8-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">f9f90fb9abc1d34d82864e3fc270f4c97f5c61bfb980f7cdd8bd0dd986d17b0a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10226</id>
    <title>Important: grafana security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-30 07:30:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * grafana: Grafana: Information disclosure of data-source passwords via public dashboards (CVE-2026-27877)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10226" id="RHSA-2026:10226" type="rhsa" title="RHSA-2026:10226"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27877" id="CVE-2026-27877" type="cve" title="CVE-2026-27877"/>
      <reference href="https://bugzilla.redhat.com/2452293" id="2452293" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-10226.html" id="ALSA-2026:10226" type="self" title="ALSA-2026:10226"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="grafana-selinux" version="10.2.6" release="20.el9_7" epoch="0" arch="s390x" src="grafana-10.2.6-20.el9_7.src.rpm">
          <filename>grafana-selinux-10.2.6-20.el9_7.s390x.rpm</filename>
          <sum type="sha256">0f482eee6baaca460d1f513bb323a2cb10ab601465d968a5aeb79fa9282f7677</sum>
        </package>
        <package name="grafana" version="10.2.6" release="20.el9_7" epoch="0" arch="s390x" src="grafana-10.2.6-20.el9_7.src.rpm">
          <filename>grafana-10.2.6-20.el9_7.s390x.rpm</filename>
          <sum type="sha256">6db3910a15e1e06a42e697971882af9ef7c27a8d6fa0bd02c4ef5c8150c0b858</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10708</id>
    <title>Important: gdk-pixbuf2 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-30 07:14:51"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gdk-pixbuf2 security update</summary>
    <description>The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.  

Security Fix(es):  

  * gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (CVE-2026-5201)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10708" id="RHSA-2026:10708" type="rhsa" title="RHSA-2026:10708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5201" id="CVE-2026-5201" type="cve" title="CVE-2026-5201"/>
      <reference href="https://bugzilla.redhat.com/2453291" id="2453291" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-10708.html" id="ALSA-2026:10708" type="self" title="ALSA-2026:10708"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="gdk-pixbuf2-devel" version="2.42.6" release="6.el9_7.1" epoch="0" arch="s390x" src="gdk-pixbuf2-2.42.6-6.el9_7.1.src.rpm">
          <filename>gdk-pixbuf2-devel-2.42.6-6.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">132cbadd2d355983913c6ef65766dab551ac0bff3de77e4fab9a3e8ce536dedd</sum>
        </package>
        <package name="gdk-pixbuf2-modules" version="2.42.6" release="6.el9_7.1" epoch="0" arch="s390x" src="gdk-pixbuf2-2.42.6-6.el9_7.1.src.rpm">
          <filename>gdk-pixbuf2-modules-2.42.6-6.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">62d5a1fe675a60a2bc392e5f5735eae28d771668e93b27d3664303e94037ed9f</sum>
        </package>
        <package name="gdk-pixbuf2" version="2.42.6" release="6.el9_7.1" epoch="0" arch="s390x" src="gdk-pixbuf2-2.42.6-6.el9_7.1.src.rpm">
          <filename>gdk-pixbuf2-2.42.6-6.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">ef690270b56df548dd95a4a2a093430881d397eb24ecb87bfc995eef6033fe77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10739</id>
    <title>Important: tigervnc security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:27:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)
  * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10739" id="RHSA-2026:10739" type="rhsa" title="RHSA-2026:10739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34352" id="CVE-2026-34352" type="cve" title="CVE-2026-34352"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452022" id="2452022" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-10739.html" id="ALSA-2026:10739" type="self" title="ALSA-2026:10739"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="tigervnc-license" version="1.15.0" release="6.el9_7.1" epoch="0" arch="noarch" src="tigervnc-1.15.0-6.el9_7.1.src.rpm">
          <filename>tigervnc-license-1.15.0-6.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">005a38e72a0b9894aa19c3c034f42447a4073f5f9b3ad8b87841ded9c8de8647</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.15.0" release="6.el9_7.1" epoch="0" arch="s390x" src="tigervnc-1.15.0-6.el9_7.1.src.rpm">
          <filename>tigervnc-server-minimal-1.15.0-6.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">0705800e655a88b594eebe36817a0ee6012103909cafb7db3b1201c2f402e857</sum>
        </package>
        <package name="tigervnc-selinux" version="1.15.0" release="6.el9_7.1" epoch="0" arch="noarch" src="tigervnc-1.15.0-6.el9_7.1.src.rpm">
          <filename>tigervnc-selinux-1.15.0-6.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">1fd83a9aeafe3d2b0e2ce13bf6ec681a0ee8cfc847001cc628bd8105138c5560</sum>
        </package>
        <package name="tigervnc" version="1.15.0" release="6.el9_7.1" epoch="0" arch="s390x" src="tigervnc-1.15.0-6.el9_7.1.src.rpm">
          <filename>tigervnc-1.15.0-6.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">2d186bc988931bca171ee59be1a0a580a2fe72301503930bfaeb7db1c423fa48</sum>
        </package>
        <package name="tigervnc-icons" version="1.15.0" release="6.el9_7.1" epoch="0" arch="noarch" src="tigervnc-1.15.0-6.el9_7.1.src.rpm">
          <filename>tigervnc-icons-1.15.0-6.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">40aef8541922e405fe3a7aab99933f17fc446a5e1226353e25fe1f359bd5f760</sum>
        </package>
        <package name="tigervnc-server-module" version="1.15.0" release="6.el9_7.1" epoch="0" arch="s390x" src="tigervnc-1.15.0-6.el9_7.1.src.rpm">
          <filename>tigervnc-server-module-1.15.0-6.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">5ab63f3cc292e066c7c032dec56717f8e0f13fc76e2761146e46bf8fd1487b65</sum>
        </package>
        <package name="tigervnc-server" version="1.15.0" release="6.el9_7.1" epoch="0" arch="s390x" src="tigervnc-1.15.0-6.el9_7.1.src.rpm">
          <filename>tigervnc-server-1.15.0-6.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">c1e7d0e50660f3ec312bbb6472dcaea4ee21984584f15d804868f88149ed78b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10745</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:32:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10745" id="RHSA-2026:10745" type="rhsa" title="RHSA-2026:10745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-10745.html" id="ALSA-2026:10745" type="self" title="ALSA-2026:10745"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3.12-devel" version="3.12.12" release="4.el9_7.3" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.3.src.rpm">
          <filename>python3.12-devel-3.12.12-4.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">0f6c645e158b51a0689859eccc84ff14fef24125b5d82f39ebbeea64da07581a</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.12" release="4.el9_7.3" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.3.src.rpm">
          <filename>python3.12-tkinter-3.12.12-4.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">1da3a4a318e70fd220149aa318a5a1e9519249f59bc5b507d0c20edc3a3cfe74</sum>
        </package>
        <package name="python3.12-libs" version="3.12.12" release="4.el9_7.3" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.3.src.rpm">
          <filename>python3.12-libs-3.12.12-4.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">98919714a2b3ef41ce42169250b0ecea28aaeb79628ca83475bb736c2e2b2e32</sum>
        </package>
        <package name="python3.12" version="3.12.12" release="4.el9_7.3" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.3.src.rpm">
          <filename>python3.12-3.12.12-4.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">9e8cc2316b30b3a605009166610a3a16a9dbcf935b429f549a46e9c4e1a2a7ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10757</id>
    <title>Important: firefox security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-29 08:58:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)
  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)
  * firefox: thunderbird: Spoofing issue in the DOM: Core &amp; HTML component (CVE-2026-6762)
  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)
  * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)
  * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)
  * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)
  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)
  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)
  * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)
  * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)
  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)
  * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)
  * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)
  * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)
  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)
  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)
  * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)
  * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)
  * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)
  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)
  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)
  * firefox: thunderbird: Use-after-free in the DOM: Core &amp; HTML component (CVE-2026-6746)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10757" id="RHSA-2026:10757" type="rhsa" title="RHSA-2026:10757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6746" id="CVE-2026-6746" type="cve" title="CVE-2026-6746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6747" id="CVE-2026-6747" type="cve" title="CVE-2026-6747"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6748" id="CVE-2026-6748" type="cve" title="CVE-2026-6748"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6749" id="CVE-2026-6749" type="cve" title="CVE-2026-6749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6750" id="CVE-2026-6750" type="cve" title="CVE-2026-6750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6751" id="CVE-2026-6751" type="cve" title="CVE-2026-6751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6752" id="CVE-2026-6752" type="cve" title="CVE-2026-6752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6753" id="CVE-2026-6753" type="cve" title="CVE-2026-6753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6754" id="CVE-2026-6754" type="cve" title="CVE-2026-6754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6757" id="CVE-2026-6757" type="cve" title="CVE-2026-6757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6759" id="CVE-2026-6759" type="cve" title="CVE-2026-6759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6761" id="CVE-2026-6761" type="cve" title="CVE-2026-6761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6762" id="CVE-2026-6762" type="cve" title="CVE-2026-6762"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6763" id="CVE-2026-6763" type="cve" title="CVE-2026-6763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6764" id="CVE-2026-6764" type="cve" title="CVE-2026-6764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6765" id="CVE-2026-6765" type="cve" title="CVE-2026-6765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6766" id="CVE-2026-6766" type="cve" title="CVE-2026-6766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6767" id="CVE-2026-6767" type="cve" title="CVE-2026-6767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6769" id="CVE-2026-6769" type="cve" title="CVE-2026-6769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6770" id="CVE-2026-6770" type="cve" title="CVE-2026-6770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6771" id="CVE-2026-6771" type="cve" title="CVE-2026-6771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6772" id="CVE-2026-6772" type="cve" title="CVE-2026-6772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6776" id="CVE-2026-6776" type="cve" title="CVE-2026-6776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6785" id="CVE-2026-6785" type="cve" title="CVE-2026-6785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6786" id="CVE-2026-6786" type="cve" title="CVE-2026-6786"/>
      <reference href="https://bugzilla.redhat.com/2460074" id="2460074" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460075" id="2460075" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460076" id="2460076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460078" id="2460078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460079" id="2460079" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460085" id="2460085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460086" id="2460086" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460088" id="2460088" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460092" id="2460092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460094" id="2460094" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460095" id="2460095" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460096" id="2460096" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460097" id="2460097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460099" id="2460099" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460101" id="2460101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460102" id="2460102" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460103" id="2460103" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460104" id="2460104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460105" id="2460105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460106" id="2460106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460107" id="2460107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460108" id="2460108" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460109" id="2460109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460110" id="2460110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460112" id="2460112" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-10757.html" id="ALSA-2026:10757" type="self" title="ALSA-2026:10757"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="firefox-x11" version="140.10.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.10.0-1.el9_7.alma.1.src.rpm">
          <filename>firefox-x11-140.10.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">779d0dee470d509881b95c8391186bf333398d81320bfe256af597f05e531080</sum>
        </package>
        <package name="firefox" version="140.10.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.10.0-1.el9_7.alma.1.src.rpm">
          <filename>firefox-140.10.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">b859822c866139a2542ffbf2735edc8fbe8908c5cb7034b242deae198c9ffbe8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10774</id>
    <title>Important: python3.11 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:35:53"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10774" id="RHSA-2026:10774" type="rhsa" title="RHSA-2026:10774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-10774.html" id="ALSA-2026:10774" type="self" title="ALSA-2026:10774"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3.11-tkinter" version="3.11.13" release="5.3.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.3.el9_7.src.rpm">
          <filename>python3.11-tkinter-3.11.13-5.3.el9_7.s390x.rpm</filename>
          <sum type="sha256">3809c5787cb37bef156e5caec425de855ae843c2bd1363fc00390b7d194d93ca</sum>
        </package>
        <package name="python3.11-libs" version="3.11.13" release="5.3.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.3.el9_7.src.rpm">
          <filename>python3.11-libs-3.11.13-5.3.el9_7.s390x.rpm</filename>
          <sum type="sha256">4ec24dff8de939db7573c0d06e9d6cf4ba0d4818ccbcda4c92952f15e3ec28a7</sum>
        </package>
        <package name="python3.11" version="3.11.13" release="5.3.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.3.el9_7.src.rpm">
          <filename>python3.11-3.11.13-5.3.el9_7.s390x.rpm</filename>
          <sum type="sha256">b3e0167d66f8cfe429f086845b3c2b3d0a88813e0a8a0cdf43c4d1f8ce8f7e95</sum>
        </package>
        <package name="python3.11-devel" version="3.11.13" release="5.3.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.3.el9_7.src.rpm">
          <filename>python3.11-devel-3.11.13-5.3.el9_7.s390x.rpm</filename>
          <sum type="sha256">def42b2fc199b003398fa134c78b6520b35018ed390cfb2040d42fd42a61905b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1088</id>
    <title>Important: python3.12-urllib3 security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-27 08:17:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-urllib3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
  * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
  * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1088" id="RHSA-2026:1088" type="rhsa" title="RHSA-2026:1088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66418" id="CVE-2025-66418" type="cve" title="CVE-2025-66418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66471" id="CVE-2025-66471" type="cve" title="CVE-2025-66471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21441" id="CVE-2026-21441" type="cve" title="CVE-2026-21441"/>
      <reference href="https://bugzilla.redhat.com/2419455" id="2419455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419467" id="2419467" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2427726" id="2427726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1088.html" id="ALSA-2026:1088" type="self" title="ALSA-2026:1088"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3.12-urllib3" version="1.26.19" release="1.el9_7.1" epoch="0" arch="noarch" src="python3.12-urllib3-1.26.19-1.el9_7.1.src.rpm">
          <filename>python3.12-urllib3-1.26.19-1.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">f2dfa0dfa555bd4576f1b672fa74ac00b98f720279157f2b1757be876c17e56d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1089</id>
    <title>Important: python3.11-urllib3 security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-27 08:15:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11-urllib3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
  * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
  * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1089" id="RHSA-2026:1089" type="rhsa" title="RHSA-2026:1089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66418" id="CVE-2025-66418" type="cve" title="CVE-2025-66418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66471" id="CVE-2025-66471" type="cve" title="CVE-2025-66471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21441" id="CVE-2026-21441" type="cve" title="CVE-2026-21441"/>
      <reference href="https://bugzilla.redhat.com/2419455" id="2419455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419467" id="2419467" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2427726" id="2427726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1089.html" id="ALSA-2026:1089" type="self" title="ALSA-2026:1089"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3.11-urllib3" version="1.26.12" release="5.el9_7.1" epoch="0" arch="noarch" src="python3.11-urllib3-1.26.12-5.el9_7.1.src.rpm">
          <filename>python3.11-urllib3-1.26.12-5.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">6e373f5afd2a4649c04095e7c6eaa3f5e8fc5ff00f5ca28f18cbac8c0431ba56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10949</id>
    <title>Important: python3.9 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:38:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10949" id="RHSA-2026:10949" type="rhsa" title="RHSA-2026:10949"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-10949.html" id="ALSA-2026:10949" type="self" title="ALSA-2026:10949"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3-tkinter" version="3.9.25" release="3.el9_7.3" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.3.src.rpm">
          <filename>python3-tkinter-3.9.25-3.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">4f77ac1b5eafa80fc786ef6fcbefbc322fc9e01f83d84ab7baf6237d6d1e2f5b</sum>
        </package>
        <package name="python3-devel" version="3.9.25" release="3.el9_7.3" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.3.src.rpm">
          <filename>python3-devel-3.9.25-3.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">b92f6aa6f77b3a9c5cfb553f0c5d405e4a5dddd7c01bfa42a15c084441883413</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.25" release="3.el9_7.3" epoch="0" arch="noarch" src="python3.9-3.9.25-3.el9_7.3.src.rpm">
          <filename>python-unversioned-command-3.9.25-3.el9_7.3.noarch.rpm</filename>
          <sum type="sha256">c5541934c80761357f3dfe9a92939bf309fbe7532439c6f05a4499c6d71150a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11360</id>
    <title>Important: LibRaw security update</title>
    <issued date="2026-04-28 00:00:00"/>
    <updated date="2026-04-29 08:47:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>LibRaw security update</summary>
    <description>LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).  

Security Fix(es):  

  * LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file (CVE-2026-24450)
  * LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading (CVE-2026-21413)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11360" id="RHSA-2026:11360" type="rhsa" title="RHSA-2026:11360"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21413" id="CVE-2026-21413" type="cve" title="CVE-2026-21413"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24450" id="CVE-2026-24450" type="cve" title="CVE-2026-24450"/>
      <reference href="https://bugzilla.redhat.com/2455925" id="2455925" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455929" id="2455929" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-11360.html" id="ALSA-2026:11360" type="self" title="ALSA-2026:11360"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="LibRaw" version="0.21.1" release="2.el9_7" epoch="0" arch="s390x" src="LibRaw-0.21.1-2.el9_7.src.rpm">
          <filename>LibRaw-0.21.1-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">bdd065fcdec02ce29640fc41558cc75ee226932dc1c06cc8d9a901db010a3bd2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11369</id>
    <title>Important: xorg-x11-server-Xwayland security update</title>
    <issued date="2026-04-28 00:00:00"/>
    <updated date="2026-04-29 08:45:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11369" id="RHSA-2026:11369" type="rhsa" title="RHSA-2026:11369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-11369.html" id="ALSA-2026:11369" type="self" title="ALSA-2026:11369"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="xorg-x11-server-Xwayland" version="23.2.7" release="6.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-23.2.7-6.el9_7.src.rpm">
          <filename>xorg-x11-server-Xwayland-23.2.7-6.el9_7.s390x.rpm</filename>
          <sum type="sha256">b1c0cec7413f1b18b834394ae6ead17fd99d55db4b0e6b68c33bcc6c847b8d06</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11388</id>
    <title>Important: xorg-x11-server security update</title>
    <issued date="2026-04-28 00:00:00"/>
    <updated date="2026-04-29 08:43:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11388" id="RHSA-2026:11388" type="rhsa" title="RHSA-2026:11388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-11388.html" id="ALSA-2026:11388" type="self" title="ALSA-2026:11388"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="33.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-33.el9_7.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-33.el9_7.s390x.rpm</filename>
          <sum type="sha256">570c1b8b9d3c59b2f2d3748a7df4cf3d3625faacf1ae2aa4ac585c16dd5d45de</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="33.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-33.el9_7.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-33.el9_7.s390x.rpm</filename>
          <sum type="sha256">66f79f5ef9e6bf5c6f8985c9576eb8f783416d10dd0010cc7fa356d14a640a7c</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="33.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-33.el9_7.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-33.el9_7.s390x.rpm</filename>
          <sum type="sha256">8596762e74b1c6395d3feb5b244ce6aee8462347093ea3043f723906099be11d</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="33.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-33.el9_7.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-33.el9_7.s390x.rpm</filename>
          <sum type="sha256">999fec57d919270c56b8cbc4af121e57e967d51696ad0b4c3be3eee15faacacb</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="33.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-33.el9_7.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-33.el9_7.s390x.rpm</filename>
          <sum type="sha256">e483a2af7e86fab8bea605ed0cd4636e725a3fc75a08de42f3cde6376e63a6f0</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="33.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-33.el9_7.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-33.el9_7.s390x.rpm</filename>
          <sum type="sha256">f1f7ff2b84786e4d7d23214221d45964f4b26533e6a1f6280d14f7587291668c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1143</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-30 09:51:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting (CVE-2025-38141)
  * kernel: Linux kernel use-after-free in eventpoll (CVE-2025-38349)
  * kernel: drm/xe: Fix vm_bind_ioctl double free bug (CVE-2025-38731)
  * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248)
  * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258)
  * kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and denial of service (CVE-2025-40294)
  * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)
  * kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CVE-2025-68305)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1143" id="RHSA-2026:1143" type="rhsa" title="RHSA-2026:1143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38141" id="CVE-2025-38141" type="cve" title="CVE-2025-38141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38349" id="CVE-2025-38349" type="cve" title="CVE-2025-38349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38731" id="CVE-2025-38731" type="cve" title="CVE-2025-38731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40248" id="CVE-2025-40248" type="cve" title="CVE-2025-40248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40258" id="CVE-2025-40258" type="cve" title="CVE-2025-40258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40294" id="CVE-2025-40294" type="cve" title="CVE-2025-40294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68301" id="CVE-2025-68301" type="cve" title="CVE-2025-68301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68305" id="CVE-2025-68305" type="cve" title="CVE-2025-68305"/>
      <reference href="https://bugzilla.redhat.com/2376052" id="2376052" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2381870" id="2381870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393488" id="2393488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418872" id="2418872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418876" id="2418876" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419891" id="2419891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422836" id="2422836" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422840" id="2422840" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1143.html" id="ALSA-2026:1143" type="self" title="ALSA-2026:1143"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.26.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">1efbe2c2e199e846cb8a22f4d141888e47c5f91b4b76f89d919932f58ae57dfb</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.26.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">30b49176c89c272658f9a9372db7e6be5a86d51115c79404dcb877a84a40b681</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.26.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4c337b7f17333020988d37a5f481d3f4ca6b0c4fefb6fe8d97d42d201d1ee364</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.26.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">51197843401d1693a4f14257ce0b8959c5be5992f2aafac0a299c9ba1f4ec927</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.26.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5fe2108e1210a9140897b34b77eeb4b87252e31a387c6de711d6e27e5cc2e8a2</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.26.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">68da28324ce6deab42d932ee5c01853b8897cda57c3c2c08b71936136aae462e</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.26.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">88c20012f0fe023c8a0252a797b6fee657bfe1e14f106b6f8cc12863ab79940b</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.26.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">89678f73e81776f6b7bc8a8dd3d28ec38d19c5d10921703845f75f3e3d3d899a</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.26.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">9fe209ed8ac3d91c9cee2a8aa837649a81ba564cc3b3aa8f15db7cc55fca0a72</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.26.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">cc99659e10ec83875572851ca770d537b242a91cc866058447832a308107a136</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.26.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d46534d3b30136c82ec4a181bda0be0dab062fed081c3fd12923a6ea11ed98e7</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.26.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">eb31e8b6f9688d14cd2ee61936b8d1729cfb3517e22d70f64448e3c7fd96ae81</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11504</id>
    <title>Important: PackageKit security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-04-30 08:54:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>PackageKit security update</summary>
    <description>PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.  

Security Fix(es):  

  * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11504" id="RHSA-2026:11504" type="rhsa" title="RHSA-2026:11504"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41651" id="CVE-2026-41651" type="cve" title="CVE-2026-41651"/>
      <reference href="https://bugzilla.redhat.com/2460604" id="2460604" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-11504.html" id="ALSA-2026:11504" type="self" title="ALSA-2026:11504"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="PackageKit-gtk3-module" version="1.2.6" release="2.el9_7" epoch="0" arch="s390x" src="PackageKit-1.2.6-2.el9_7.src.rpm">
          <filename>PackageKit-gtk3-module-1.2.6-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">5bb0af8909ea078bc36f28ddd8e209fe3f45be04eace63137d513de2c74ed714</sum>
        </package>
        <package name="PackageKit-glib" version="1.2.6" release="2.el9_7" epoch="0" arch="s390x" src="PackageKit-1.2.6-2.el9_7.src.rpm">
          <filename>PackageKit-glib-1.2.6-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">bde63a87653da8ff3adba4e7b240c811b6b5a2517bbaf0ae6a1673d951926d32</sum>
        </package>
        <package name="PackageKit-command-not-found" version="1.2.6" release="2.el9_7" epoch="0" arch="s390x" src="PackageKit-1.2.6-2.el9_7.src.rpm">
          <filename>PackageKit-command-not-found-1.2.6-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">cc7087c37812104cbc11fa57b94393957b46fd815b8ca5f64b71fbdef6388dc9</sum>
        </package>
        <package name="PackageKit" version="1.2.6" release="2.el9_7" epoch="0" arch="s390x" src="PackageKit-1.2.6-2.el9_7.src.rpm">
          <filename>PackageKit-1.2.6-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">ecda81200b47115411a279297a05afd4174e380ee1c9567dce3d3f0b7058cb61</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11510</id>
    <title>Important: vim security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-04-29 10:04:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: arbitrary command execution via modeline sandbox bypass (CVE-2026-34982)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11510" id="RHSA-2026:11510" type="rhsa" title="RHSA-2026:11510"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34982" id="CVE-2026-34982" type="cve" title="CVE-2026-34982"/>
      <reference href="https://bugzilla.redhat.com/2455400" id="2455400" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-11510.html" id="ALSA-2026:11510" type="self" title="ALSA-2026:11510"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="vim-enhanced" version="8.2.2637" release="23.el9_7.3" epoch="2" arch="s390x" src="vim-8.2.2637-23.el9_7.3.src.rpm">
          <filename>vim-enhanced-8.2.2637-23.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">17b8ef0cb8167a5aca1a2b96b344d07f78177480e179e7f8c645d75453c67322</sum>
        </package>
        <package name="vim-X11" version="8.2.2637" release="23.el9_7.3" epoch="2" arch="s390x" src="vim-8.2.2637-23.el9_7.3.src.rpm">
          <filename>vim-X11-8.2.2637-23.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">74be5eabe2c1234af19d58ad68be80c5afa36cb7e8a2bae46ead4c20348321b3</sum>
        </package>
        <package name="vim-common" version="8.2.2637" release="23.el9_7.3" epoch="2" arch="s390x" src="vim-8.2.2637-23.el9_7.3.src.rpm">
          <filename>vim-common-8.2.2637-23.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">fcbf9debe9e59c55de91c84e8d587da64ccd6e97177bef010c748acc440eefcc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:12271</id>
    <title>Important: libtiff security update</title>
    <issued date="2026-04-30 00:00:00"/>
    <updated date="2026-05-01 06:49:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:12271" id="RHSA-2026:12271" type="rhsa" title="RHSA-2026:12271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4775" id="CVE-2026-4775" type="cve" title="CVE-2026-4775"/>
      <reference href="https://bugzilla.redhat.com/2450768" id="2450768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-12271.html" id="ALSA-2026:12271" type="self" title="ALSA-2026:12271"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libtiff-devel" version="4.4.0" release="15.el9_7.3" epoch="0" arch="s390x" src="libtiff-4.4.0-15.el9_7.3.src.rpm">
          <filename>libtiff-devel-4.4.0-15.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">6b7539d952342655c4ab2e3223033723d1975af1e65444baef20475a5f9927e4</sum>
        </package>
        <package name="libtiff" version="4.4.0" release="15.el9_7.3" epoch="0" arch="s390x" src="libtiff-4.4.0-15.el9_7.3.src.rpm">
          <filename>libtiff-4.4.0-15.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">94fbf7c2f8e6d51d1eb8948a264c36a93d8fd406b3375cf743cee8911ca22dbd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:12310</id>
    <title>Important: sudo security update</title>
    <issued date="2026-04-30 00:00:00"/>
    <updated date="2026-05-01 06:38:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sudo security update</summary>
    <description>The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.  

Security Fix(es):  

  * sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:12310" id="RHSA-2026:12310" type="rhsa" title="RHSA-2026:12310"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35535" id="CVE-2026-35535" type="cve" title="CVE-2026-35535"/>
      <reference href="https://bugzilla.redhat.com/2454714" id="2454714" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-12310.html" id="ALSA-2026:12310" type="self" title="ALSA-2026:12310"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="sudo-python-plugin" version="1.9.5p2" release="15.el9_7" epoch="0" arch="s390x" src="sudo-1.9.5p2-15.el9_7.src.rpm">
          <filename>sudo-python-plugin-1.9.5p2-15.el9_7.s390x.rpm</filename>
          <sum type="sha256">1134634d8c0e787f66f60a7a8cf4225cebdaadf15d4f1932363d3e677661fc7b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1239</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-02-02 11:30:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
  * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
  * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1239" id="RHSA-2026:1239" type="rhsa" title="RHSA-2026:1239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66418" id="CVE-2025-66418" type="cve" title="CVE-2025-66418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66471" id="CVE-2025-66471" type="cve" title="CVE-2025-66471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21441" id="CVE-2026-21441" type="cve" title="CVE-2026-21441"/>
      <reference href="https://bugzilla.redhat.com/2419455" id="2419455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419467" id="2419467" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2427726" id="2427726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1239.html" id="ALSA-2026:1239" type="self" title="ALSA-2026:1239"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="fence-agents-virsh" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-virsh-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">0d610e37f5246d244b19b964a955fd204c908a418f3c1f2536b92147daf6e864</sum>
        </package>
        <package name="fence-agents-rhevm" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-rhevm-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">0db1baf79ebb2be2de9c5629ed4d35cfc743e3c11e90d4b9a2da1e15046bb8cd</sum>
        </package>
        <package name="fence-agents-cisco-mds" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-cisco-mds-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">138f15e7b85701caa33bd10c03423a63b8019988506e977690f03a5bac79d008</sum>
        </package>
        <package name="fence-agents-bladecenter" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-bladecenter-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">15732f541480add65f90255d2302497c4aaa4db28b51a7bb2631c1e743c4c300</sum>
        </package>
        <package name="fence-agents-ilo-moonshot" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-ilo-moonshot-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">161cfb14fea2f2aed70eff32076bcb07d62f7b0c8f7d97240d67b42bef3601da</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-ibm-vpc-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">1af8e6832deef48393b1409b2db5f4876ca3c78cca053cdfb304e386b7b7e669</sum>
        </package>
        <package name="fence-agents-apc" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-apc-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">1d76f9c447286267739762f7612088d49bdbbbda997ac040104307ad1710becf</sum>
        </package>
        <package name="fence-agents-ilo2" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-ilo2-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">1db2a26c923c8a8f384ca86d8877e753897d53b662bf9cda7811d436718672ed</sum>
        </package>
        <package name="fence-agents-ipdu" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-ipdu-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">248bc6380a6e11a7bb95b53ee7b2f5d97c4a4100a8f3661978cfb4fe80623f21</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.10.0" release="98.el9_7.4" epoch="0" arch="s390x" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-kubevirt-4.10.0-98.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">2ad04c4918de49b862b067cce51fe77e94721440208183dfaf70b56193caf9ef</sum>
        </package>
        <package name="fence-agents-eaton-snmp" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-eaton-snmp-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">2df1dc85dd928062fb8526e3fcb6702eb26d471cdc964d20c48c057cc6c1a3c2</sum>
        </package>
        <package name="fence-agents-ibmblade" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-ibmblade-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">2e9c11a01af961daac3dffb5019138d05524992221548997843fd4ca87f2a021</sum>
        </package>
        <package name="fence-agents-zvm" version="4.10.0" release="98.el9_7.4" epoch="0" arch="s390x" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-zvm-4.10.0-98.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">3430a3c44348d11f94ecd9cf4a73005f85e48815a6dc75f3bf1a210b7b7904c8</sum>
        </package>
        <package name="fence-agents-nutanix-ahv" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-nutanix-ahv-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">35a5b8f4e58c100db4d18c2abf025c5df05835ae62c328a35c3267cd162198f1</sum>
        </package>
        <package name="fence-agents-sbd" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-sbd-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">4ad7a464a4aa963a7f661ae36c98566f15e462fcb3b617bf82810f7cc3b0c2dc</sum>
        </package>
        <package name="fence-agents-mpath" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-mpath-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">5ef29a003c601fc5a6433efd6a69f7dd36d9062edafcc5106f7bd68c0bfd7ff8</sum>
        </package>
        <package name="fence-agents-emerson" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-emerson-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">5fa9769156f3e6e84604cb82f1c305733cbcc70bca5832efa03b84f4fda7f7ff</sum>
        </package>
        <package name="fence-agents-wti" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-wti-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">65c08d857e44b117c1af02f73420937807f9e296d2eb54b48cda5a65e35a6bee</sum>
        </package>
        <package name="fence-agents-scsi" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-scsi-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">6c637a686491d56ddeabee447596f3c9e4f88d460084ed0b29d7d9fce2256084</sum>
        </package>
        <package name="fence-agents-drac5" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-drac5-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">7b7f3ef958a387a25f05ccf0e8588049fd8c21ee8cb4c758f984f23bc8f28095</sum>
        </package>
        <package name="fence-agents-lpar" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-lpar-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">81c2e55c3a81389b8bf84c689516d902115215f984aea5df9f7182e7cb81c80d</sum>
        </package>
        <package name="fence-agents-rsa" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-rsa-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">84b0abaeabd4e2abf041f9e3a392f0b68816c9124b9fc77d69b334ea8a7a1c8b</sum>
        </package>
        <package name="fence-agents-redfish" version="4.10.0" release="98.el9_7.4" epoch="0" arch="s390x" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-redfish-4.10.0-98.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">8f0302ea279df7f053038dfd928e0d28384e3d06d4aca58ef48dccd8f50d8622</sum>
        </package>
        <package name="fence-agents-ilo-mp" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-ilo-mp-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">91f77135bdeb78abb48be05ca6b92a3198003c2cf2bd151683465e5fde87df07</sum>
        </package>
        <package name="fence-agents-hpblade" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-hpblade-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">929eae774ce4309db511bebe9b9bdcb417c23b5f234075a0a99335937ceb893c</sum>
        </package>
        <package name="fence-agents-cisco-ucs" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-cisco-ucs-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">a51e6aaa970c97d56e2f77832b2726c1b099f927b1625c11a0b2b067d5b58320</sum>
        </package>
        <package name="fence-agents-kdump" version="4.10.0" release="98.el9_7.4" epoch="0" arch="s390x" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-kdump-4.10.0-98.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">a6c55ebfb188a8c72bcc8ba938857e39dfa0bef1d3f39db91c9bfd263493c1d3</sum>
        </package>
        <package name="fence-agents-eps" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-eps-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">ac139153f7f3e3d9b6db9113bf74dcb4d628083c0923bfd97a195b9bf9c1e6cc</sum>
        </package>
        <package name="fence-agents-vmware-rest" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-vmware-rest-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">b2f95060d4c89c0cffb8afea8b5896a680f85c69f2c084c707fc68e362229b20</sum>
        </package>
        <package name="fence-agents-ibm-powervs" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-ibm-powervs-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">b6b52bc2673ea6f29d767a04d05023d71b94a86503e3d83e1b9560feb925d784</sum>
        </package>
        <package name="fence-agents-heuristics-ping" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-heuristics-ping-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">bfe4bd12ee15ef6acacd8a2b7884ab2866f6fc54865798db118e029c9802ceb9</sum>
        </package>
        <package name="fence-agents-brocade" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-brocade-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">cbf8f508c639699281b4f259ddd4ab1ebdd78b960bd0e3601e26204a332112a2</sum>
        </package>
        <package name="fence-agents-ilo-ssh" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-ilo-ssh-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">cd92a1ba43deda5065815657e7b779a1b690407d2148739dc98e5f0ea4ab4a67</sum>
        </package>
        <package name="fence-agents-rsb" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-rsb-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">d0e454e0fbd0ce0dd6cdadab555dd2e295eecea15b765da92502b2924949f6e3</sum>
        </package>
        <package name="fence-agents-apc-snmp" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-apc-snmp-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">d493b61707a277cd9449c39dedf737343f703984fedef60432da77905fce9935</sum>
        </package>
        <package name="fence-agents-intelmodular" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-intelmodular-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">e2c6f75415feb280636a2f193880cb5d8321c585ebe6234914167834cf9f3e03</sum>
        </package>
        <package name="fence-agents-all" version="4.10.0" release="98.el9_7.4" epoch="0" arch="s390x" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-all-4.10.0-98.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">e73fb60f38eb356c1119e3c0738e832654f287d1b8e1f3f72a8fd26a89cd00cb</sum>
        </package>
        <package name="fence-agents-amt-ws" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-amt-ws-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">f0008dfc354d3719ba8d6fb2582af93d6178de9472f214efa2cad397e217d5c1</sum>
        </package>
        <package name="fence-agents-ipmilan" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-ipmilan-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">f25fe64093983d35c93af92b65f1a5cf3b400a6497864d649b66c1b81f783cb5</sum>
        </package>
        <package name="fence-agents-ifmib" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-ifmib-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">f4bdca6681831d57531894ce067ea312806e127fe4ffdfdee2c930c6f10c24bb</sum>
        </package>
        <package name="fence-agents-common" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-common-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">fcf6e0bb5baacc7b57ba77267159a07e5082b456e81e0047fca0436197da7391</sum>
        </package>
        <package name="fence-agents-vmware-soap" version="4.10.0" release="98.el9_7.4" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.4.src.rpm">
          <filename>fence-agents-vmware-soap-4.10.0-98.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">ffc483c10f2741ed9dec2c88dac50a33b92bbd649523e2af48ff215225bbed57</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:12441</id>
    <title>Important: libcap security update</title>
    <issued date="2026-04-30 00:00:00"/>
    <updated date="2026-05-01 06:44:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libcap security update</summary>
    <description>Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.  

Security Fix(es):  

  * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:12441" id="RHSA-2026:12441" type="rhsa" title="RHSA-2026:12441"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4878" id="CVE-2026-4878" type="cve" title="CVE-2026-4878"/>
      <reference href="https://bugzilla.redhat.com/2451615" id="2451615" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-12441.html" id="ALSA-2026:12441" type="self" title="ALSA-2026:12441"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libcap-devel" version="2.48" release="10.el9_7.1" epoch="0" arch="s390x" src="libcap-2.48-10.el9_7.1.src.rpm">
          <filename>libcap-devel-2.48-10.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">d55af28a371c0d80f5cfd9f92dd1395c4f210717a3d870ad770e19a945a60944</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13381</id>
    <title>Important: openssh security update</title>
    <issued date="2026-05-04 00:00:00"/>
    <updated date="2026-05-04 20:44:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  

Security Fix(es):  

  * OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)
  * OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)
  * OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)
  * OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)
  * OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13381" id="RHSA-2026:13381" type="rhsa" title="RHSA-2026:13381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35385" id="CVE-2026-35385" type="cve" title="CVE-2026-35385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35386" id="CVE-2026-35386" type="cve" title="CVE-2026-35386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35387" id="CVE-2026-35387" type="cve" title="CVE-2026-35387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35388" id="CVE-2026-35388" type="cve" title="CVE-2026-35388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35414" id="CVE-2026-35414" type="cve" title="CVE-2026-35414"/>
      <reference href="https://bugzilla.redhat.com/2454469" id="2454469" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454490" id="2454490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454494" id="2454494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454500" id="2454500" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454506" id="2454506" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-13381.html" id="ALSA-2026:13381" type="self" title="ALSA-2026:13381"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="pam_ssh_agent_auth" version="0.10.4" release="5.49.el9_7.alma.1" epoch="0" arch="s390x" src="openssh-8.7p1-49.el9_7.alma.1.src.rpm">
          <filename>pam_ssh_agent_auth-0.10.4-5.49.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">8492c1fde9b7ef801dd9b38d7fac824cc298f1bc334a10f468a9943e7f3d6a01</sum>
        </package>
        <package name="openssh-askpass" version="8.7p1" release="49.el9_7.alma.1" epoch="0" arch="s390x" src="openssh-8.7p1-49.el9_7.alma.1.src.rpm">
          <filename>openssh-askpass-8.7p1-49.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">fdee42bf07d53c19186b721294ad88ea1737f5241b2a8314c43b25464400a00b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1350</id>
    <title>Moderate: curl security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:31:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>curl security update</summary>
    <description>The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.  

Security Fix(es):  

  * curl: libcurl: Curl out of bounds read for cookie path (CVE-2025-9086)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1350" id="RHSA-2026:1350" type="rhsa" title="RHSA-2026:1350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9086" id="CVE-2025-9086" type="cve" title="CVE-2025-9086"/>
      <reference href="https://bugzilla.redhat.com/2394750" id="2394750" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1350.html" id="ALSA-2026:1350" type="self" title="ALSA-2026:1350"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libcurl-devel" version="7.76.1" release="35.el9_7.3" epoch="0" arch="s390x" src="curl-7.76.1-35.el9_7.3.src.rpm">
          <filename>libcurl-devel-7.76.1-35.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">37072e61d192d6955427ccdc9edfceab5b75ba749a5fadbb8ac0818f1da6d141</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1359</id>
    <title>Moderate: gcc-toolset-15-binutils security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-02-02 11:23:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc-toolset-15-binutils security update</summary>
    <description>Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line).  

Security Fix(es):  

  * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1359" id="RHSA-2026:1359" type="rhsa" title="RHSA-2026:1359"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11083" id="CVE-2025-11083" type="cve" title="CVE-2025-11083"/>
      <reference href="https://bugzilla.redhat.com/2399948" id="2399948" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1359.html" id="ALSA-2026:1359" type="self" title="ALSA-2026:1359"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="gcc-toolset-15-binutils" version="2.44" release="3.el9_7.1" epoch="0" arch="s390x" src="gcc-toolset-15-binutils-2.44-3.el9_7.1.src.rpm">
          <filename>gcc-toolset-15-binutils-2.44-3.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">65de10846791671cd9da112a6be0825a5ae569020debdce75f547617906e7693</sum>
        </package>
        <package name="gcc-toolset-15-binutils-gold" version="2.44" release="3.el9_7.1" epoch="0" arch="s390x" src="gcc-toolset-15-binutils-2.44-3.el9_7.1.src.rpm">
          <filename>gcc-toolset-15-binutils-gold-2.44-3.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">d79598181305febf328a5efb6d316bb44941fdb231cde5fcb4c88a1fd472650b</sum>
        </package>
        <package name="gcc-toolset-15-binutils-devel" version="2.44" release="3.el9_7.1" epoch="0" arch="s390x" src="gcc-toolset-15-binutils-2.44-3.el9_7.1.src.rpm">
          <filename>gcc-toolset-15-binutils-devel-2.44-3.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">fc6618511a7eaa5506a10f136b5bde999d6f997bcc4d81b03053435b95da583f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1377</id>
    <title>Moderate: image-builder security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-02-12 10:36:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>image-builder security update</summary>
    <description>A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood.  

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1377" id="RHSA-2026:1377" type="rhsa" title="RHSA-2026:1377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1377.html" id="ALSA-2026:1377" type="self" title="ALSA-2026:1377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="image-builder" version="31" release="2.el9_7" epoch="0" arch="s390x" src="image-builder-31-2.el9_7.src.rpm">
          <filename>image-builder-31-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">8d746f3ae721f77d89e09c4247f0e9dfa519e5a080d6d78f6504a8e33621e041</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1381</id>
    <title>Moderate: osbuild-composer security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-02-02 11:22:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1381" id="RHSA-2026:1381" type="rhsa" title="RHSA-2026:1381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1381.html" id="ALSA-2026:1381" type="self" title="ALSA-2026:1381"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="osbuild-composer-worker" version="149" release="3.el9_7.alma.3" epoch="0" arch="s390x" src="osbuild-composer-149-3.el9_7.alma.3.src.rpm">
          <filename>osbuild-composer-worker-149-3.el9_7.alma.3.s390x.rpm</filename>
          <sum type="sha256">570709aea588b35e459dd24f687beb6053f7305dc87274bb7108354bce4e1de0</sum>
        </package>
        <package name="osbuild-composer" version="149" release="3.el9_7.alma.3" epoch="0" arch="s390x" src="osbuild-composer-149-3.el9_7.alma.3.src.rpm">
          <filename>osbuild-composer-149-3.el9_7.alma.3.s390x.rpm</filename>
          <sum type="sha256">5fa61fc4dd29dbd5d2197bdade84216ba0ccb2db5b0673be89acdba189658203</sum>
        </package>
        <package name="osbuild-composer-core" version="149" release="3.el9_7.alma.3" epoch="0" arch="s390x" src="osbuild-composer-149-3.el9_7.alma.3.src.rpm">
          <filename>osbuild-composer-core-149-3.el9_7.alma.3.s390x.rpm</filename>
          <sum type="sha256">9f78e63d2869f21e965195ee9ff83d80462ef2667da9ad0c995ff7e4f3d43bbf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1408</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:05:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)
  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1408" id="RHSA-2026:1408" type="rhsa" title="RHSA-2026:1408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13836" id="CVE-2025-13836" type="cve" title="CVE-2025-13836"/>
      <reference href="https://bugzilla.redhat.com/2418078" id="2418078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1408.html" id="ALSA-2026:1408" type="self" title="ALSA-2026:1408"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3.12-devel" version="3.12.12" release="4.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.src.rpm">
          <filename>python3.12-devel-3.12.12-4.el9_7.s390x.rpm</filename>
          <sum type="sha256">050f0be6ee7f14a23f76775251accfbb7b8ec3f24fd7a148edf622cd1b27c14e</sum>
        </package>
        <package name="python3.12" version="3.12.12" release="4.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.src.rpm">
          <filename>python3.12-3.12.12-4.el9_7.s390x.rpm</filename>
          <sum type="sha256">0dd1e27ec7f6b2bdc4fc624a49b321edc47cc24df44978a185b83430f76d1094</sum>
        </package>
        <package name="python3.12-libs" version="3.12.12" release="4.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.src.rpm">
          <filename>python3.12-libs-3.12.12-4.el9_7.s390x.rpm</filename>
          <sum type="sha256">1f346e83e6b09901590b2feaecbed0f1134caa0a54f31c3413155e3563157acc</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.12" release="4.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.src.rpm">
          <filename>python3.12-tkinter-3.12.12-4.el9_7.s390x.rpm</filename>
          <sum type="sha256">b70321c96a28ab15a8c19f606b54a2a62ae491015c3b097842256a30fd7ae320</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1409</id>
    <title>Important: php:8.2 security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-02-02 11:20:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>php:8.2 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: pgsql extension does not check for errors during escaping (CVE-2025-1735)
  * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491)
  * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220)
  * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)
  * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177)
  * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement (CVE-2025-14180)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1409" id="RHSA-2026:1409" type="rhsa" title="RHSA-2026:1409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1220" id="CVE-2025-1220" type="cve" title="CVE-2025-1220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14177" id="CVE-2025-14177" type="cve" title="CVE-2025-14177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14178" id="CVE-2025-14178" type="cve" title="CVE-2025-14178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14180" id="CVE-2025-14180" type="cve" title="CVE-2025-14180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1735" id="CVE-2025-1735" type="cve" title="CVE-2025-1735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6491" id="CVE-2025-6491" type="cve" title="CVE-2025-6491"/>
      <reference href="https://bugzilla.redhat.com/2378689" id="2378689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378690" id="2378690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379792" id="2379792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425625" id="2425625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425626" id="2425626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425627" id="2425627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1409.html" id="ALSA-2026:1409" type="self" title="ALSA-2026:1409"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="php" stream="8.2" version="9040020240403183013" context="8cf767d6" arch="s390x"/>
        <package name="php-ffi" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-ffi-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">076af8b638880f9df21826da1504c498eb0fee0a749993aba5c7785a7eca31a5</sum>
        </package>
        <package name="php-mbstring" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-mbstring-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">1748493c9bc8a10b2eceecb5e39fbc26d13eeda214d1784201934ef9ff8c6099</sum>
        </package>
        <package name="php" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">187b0c5808b9c2e6655ce4a2e853057e233b8c19c6862a117e3ffc72a412788e</sum>
        </package>
        <package name="php-embedded" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-embedded-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">1c981ec125969eff618dac50085314d688f7f1d1e48134fdd26a63098d0b9a1c</sum>
        </package>
        <package name="php-soap" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-soap-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">247b8b23cbb0bce6a561f9ed1cff76381672bed7daeaee2ce14f5f8ede841bd6</sum>
        </package>
        <package name="php-pgsql" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-pgsql-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">25be822e19181408b66829d1499f7f9e291e63c06b7e716344eed221ee811913</sum>
        </package>
        <package name="php-process" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-process-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">3d5adbe781bb4ab9bc977fa0c7d8b37603d6125d482127313b407c768873a542</sum>
        </package>
        <package name="php-common" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-common-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">4ace36e09bcec0f38b2542e1ba41e23909654e74297a11a9a687a6766331a6cb</sum>
        </package>
        <package name="apcu-panel" version="5.1.23" release="1.module_el9.4.0+65+49ff6472" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm</filename>
          <sum type="sha256">4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921</sum>
        </package>
        <package name="php-intl" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-intl-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">4f51a4f3354de53a42138c82999d9d3fc62af034b6710d530750dff2d267e9f1</sum>
        </package>
        <package name="php-gmp" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-gmp-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">55af1766691dca8399790e614696b9f33fc9f4c494222d6bb17376003bfc966b</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="4.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">5b553811ce76e365f333f05af308acce947d19a48bafe82f02023b4b9de8b683</sum>
        </package>
        <package name="php-gd" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-gd-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">69280a0da76bc7475f94c28b50fd214cd1194fb3312c4ca282f792f5b9c2000b</sum>
        </package>
        <package name="php-dba" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-dba-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">69be1c86018977f143ba1ef917156ddd4da14f80046ccf8d3756d363a6472ecd</sum>
        </package>
        <package name="php-bcmath" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-bcmath-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">77f47cdd6c33b5a2f99d19f624e61256eb0dcea5c3333d8cfbe93c138cd76b90</sum>
        </package>
        <package name="php-ldap" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-ldap-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">78fdce413629ea00fa6baecd51f3371bdb4c260524a139c4c56e59cfdc7da4a2</sum>
        </package>
        <package name="php-pecl-zip" version="1.22.3" release="1.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">7febf476c58e0ac97a968fde5b92f0dd64ac7c932351ae9c689cc6ea9c8e787a</sum>
        </package>
        <package name="php-snmp" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-snmp-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">83511ffc90bf12fc13f9e99658593a695bea190520d968fdab982973bc88b5cb</sum>
        </package>
        <package name="php-enchant" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-enchant-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">a6dfe9757cfa71a890ec76f772b74ab2aac82865e1f6997f5b664407c790e296</sum>
        </package>
        <package name="php-cli" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-cli-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">a897b971c96809be1dbbfa637ce5066ac22364b295ac7cddc927b8e5cfb6ba29</sum>
        </package>
        <package name="php-fpm" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-fpm-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">aedcd44edfac78f2280f3e5d7ffdda6918069d0e3394c9c97daf0221afc715f6</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.23" release="1.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">aee42951e556eb8ecf40f0c5fe40c53a1ae9f3285ee2bfa7a4169ff85ae7642c</sum>
        </package>
        <package name="php-xml" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-xml-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">c60310d30980a365a80a1140ea2afb441266943f7a22519c61a9d65c8a8cbd85</sum>
        </package>
        <package name="php-opcache" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-opcache-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">caee38c210343f7addef0f9a295862924bdd111c51fce24753890a449b013803</sum>
        </package>
        <package name="php-pdo" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-pdo-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">cdd015f43b3c95f296ba90d878fe31657419592923077f58205d2b22c59f0452</sum>
        </package>
        <package name="php-odbc" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-odbc-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">d50606fa85c3a9ff2867d25c3b99f1ad59a86a8db113dd13e5c2bcebc32f5adc</sum>
        </package>
        <package name="php-mysqlnd" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-mysqlnd-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">de3748550d1b3cc77a37f85210ed89746f6dba053af685dd8ee8844ca3e60450</sum>
        </package>
        <package name="php-devel" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-devel-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">e12599949904d4789ddfad7ae93c72172f151ae8e2965b555eeec6a223276459</sum>
        </package>
        <package name="php-dbg" version="8.2.30" release="1.module_el9.7.0+205+fe410f10" epoch="0" arch="s390x" src="php-8.2.30-1.module_el9.7.0+205+fe410f10.src.rpm">
          <filename>php-dbg-8.2.30-1.module_el9.7.0+205+fe410f10.s390x.rpm</filename>
          <sum type="sha256">e638f8b5af1ac091ded49bcf5d947639f3a736238709310c3a204710da7fe847</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.2.2" release="2.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">e6bab0e873b7c6300e4e9a467194aa281a3cd256394b4e29f718563c8ac738eb</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.23" release="1.module_el9.4.0+65+49ff6472" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.src.rpm">
          <filename>php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm</filename>
          <sum type="sha256">e9121b1ec8edb80b93180e40236eed42c16907d15021356dac19b0b85a7c349d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1410</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:02:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)
  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1410" id="RHSA-2026:1410" type="rhsa" title="RHSA-2026:1410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13836" id="CVE-2025-13836" type="cve" title="CVE-2025-13836"/>
      <reference href="https://bugzilla.redhat.com/2418078" id="2418078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1410.html" id="ALSA-2026:1410" type="self" title="ALSA-2026:1410"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3.11-devel" version="3.11.13" release="5.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el9_7.src.rpm">
          <filename>python3.11-devel-3.11.13-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">a165efba88633fc22cb1001cc8409bdb139e03058d69afef7669361d8cb4c230</sum>
        </package>
        <package name="python3.11" version="3.11.13" release="5.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el9_7.src.rpm">
          <filename>python3.11-3.11.13-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">a692248dc876079977745a4afe500e327538c26aa37132ec5858ffbac8c73ae3</sum>
        </package>
        <package name="python3.11-libs" version="3.11.13" release="5.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el9_7.src.rpm">
          <filename>python3.11-libs-3.11.13-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">c30198b9f467af8f3026535d7843812890c921c4fbcd8b382b9d3ff55d567712</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.13" release="5.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el9_7.src.rpm">
          <filename>python3.11-tkinter-3.11.13-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">fc3578b75525ee0c136d11724a9fd9c360145c722d990a3e7dfde393329da3b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1429</id>
    <title>Important: php:8.3 security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 11:59:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>php:8.3 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)
  * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177)
  * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement (CVE-2025-14180)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1429" id="RHSA-2026:1429" type="rhsa" title="RHSA-2026:1429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14177" id="CVE-2025-14177" type="cve" title="CVE-2025-14177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14178" id="CVE-2025-14178" type="cve" title="CVE-2025-14178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14180" id="CVE-2025-14180" type="cve" title="CVE-2025-14180"/>
      <reference href="https://bugzilla.redhat.com/2425625" id="2425625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425626" id="2425626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425627" id="2425627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1429.html" id="ALSA-2026:1429" type="self" title="ALSA-2026:1429"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="php" stream="8.3" version="9060020250317151939" context="8cf767d6" arch="s390x"/>
        <package name="php-process" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-process-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">119b0b6b061cc880e713fff400ccba8ca7a2b0290acd23de5f26f9e28555d80b</sum>
        </package>
        <package name="php-gd" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-gd-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">135add8a53d1aef7335650021848239709234a0aed562bb6febc0d120c9145b8</sum>
        </package>
        <package name="php-odbc" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-odbc-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">20641d74a0430b2b317ed0b3469d5c2fd561e37ee97c67e5b3891878d5d9b525</sum>
        </package>
        <package name="php-pecl-zip" version="1.22.3" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-zip-1.22.3-1.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">2c10a6a3ff7e5ab1e236819a29a6fd7e9817b8632a6bc09864e5b4f635d83552</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.23" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">2d91df18463f7e5cd5a771f760d2dae331ad870672e519b72976b7b1e308de4b</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.23" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">2e6d69933e316fd47fb94a2c937bbdd1aa9468b2ff581671b71042a7b07a002f</sum>
        </package>
        <package name="php-fpm" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-fpm-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">35943d9fb3b2c9f754dbfec0d6814b9693c1375dc21e6ddd1617f0e463765c0c</sum>
        </package>
        <package name="php-cli" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-cli-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">3acae6534182804220022c9d7726f2437e02b46c47dffa105d67981c59c85c80</sum>
        </package>
        <package name="apcu-panel" version="5.1.23" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.23-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>apcu-panel-5.1.23-1.module_el9.6.0+151+5f31e576.noarch.rpm</filename>
          <sum type="sha256">43b6d27d2f1ddace659631f46d6fce60a7366efc6a9691eaa886d44dac8f5033</sum>
        </package>
        <package name="php-dba" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-dba-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">4e95ffc95651ceeabbda7c545e64543cee14282063b6a5f381f289625924989b</sum>
        </package>
        <package name="php-pgsql" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-pgsql-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">54b8b2e6e2180948d5bb672dd91729a5bb3f6ea29ed968842f26576d3481b407</sum>
        </package>
        <package name="php-xml" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-xml-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">5bc8ba392def9fa0f9e274ff71e9329f9fb7c40b30c9fba85446bf26a7b5a7db</sum>
        </package>
        <package name="php-gmp" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-gmp-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">7c997d78293f610a3d269ff99651cfc662d09fdaf8698bcb6ca0f479a55cb416</sum>
        </package>
        <package name="php-soap" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-soap-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">8640718d42d75f39e7fda83e43f2f98a6b98c8f2c3f642e282746c5ed76456d0</sum>
        </package>
        <package name="php-opcache" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-opcache-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">89be2de0b7b3bdbdedb7f85add1aa41b5dfe97d6b20e32562ac38e27161d9e7d</sum>
        </package>
        <package name="php-ffi" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-ffi-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">8c00b5bf24636d80f01cec8483ff712ac5845bcb22bc7f71746f0543ef220994</sum>
        </package>
        <package name="php-common" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-common-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">8df29287a69e91a853058938f2277d61fc14cfeac3e1b0ff602fa09d46e63010</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="4.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-rrd-2.0.3-4.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">9692a81f8b31d7f3d9d3e90990ab08a2b9825346ca6ff7072a897086d61630d2</sum>
        </package>
        <package name="php-dbg" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-dbg-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">9e45bca4e92d7dd4be9fd72eafa8ddb4799a0c33e3d9bef348106b88dacffe85</sum>
        </package>
        <package name="php-intl" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-intl-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">ad4c7e16123d84fcae7ff6c0ddb56ef88565d3f15f44306faefc3e6bcb2a4bed</sum>
        </package>
        <package name="php-snmp" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-snmp-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">bbb3958fc5c3e0d31baf8e18f17e0247324f2ced45318a39c6f82ad5686e5a4c</sum>
        </package>
        <package name="php-devel" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-devel-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">bd5a72358e32a0fe75579d32ae02bf2ff3711486ac51e0c1e3d9c1a9397bf58d</sum>
        </package>
        <package name="php-mysqlnd" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-mysqlnd-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">c67b82145dbbfc48f54e47277cfe0be6390d6f9f26cc268e6be3f983107b05c5</sum>
        </package>
        <package name="php-enchant" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-enchant-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">cc58a529b9c0cf8aec598b44a264be5e04d3b97e30e35ec9940a6fe9f6c11b43</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.3.1" release="1.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-xdebug3-3.3.1-1.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">cd0acae21cca91d1423ac7f37f561db326c1d3f12144b462e729b1bb11349f22</sum>
        </package>
        <package name="php-pecl-redis6" version="6.1.0" release="2.module_el9.6.0+151+5f31e576" epoch="0" arch="s390x" src="php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.src.rpm">
          <filename>php-pecl-redis6-6.1.0-2.module_el9.6.0+151+5f31e576.s390x.rpm</filename>
          <sum type="sha256">daddebb79dcabf2b21e7db723448b62a2c6d9941272af21949a665d7b0e9e11e</sum>
        </package>
        <package name="php-pdo" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-pdo-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">dba6a560448c0b687f508141e91a467db5c19ba3a0bd42a6cd00c130af1b11a0</sum>
        </package>
        <package name="php-embedded" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-embedded-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">ddd4de159a93f319eb66002639cef39034836b3fc930124c7de84f9c436a854f</sum>
        </package>
        <package name="php-bcmath" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-bcmath-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">e071cec137c4da85da4cb2cea4b207ad06802eb8088a9408cc44e24cd6aff47c</sum>
        </package>
        <package name="php-ldap" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-ldap-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">e458ef7444c75b44262fd544ef65831d28ed0a20f821bed143288fe829e2d7c7</sum>
        </package>
        <package name="php-mbstring" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-mbstring-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">e88466ae7fab204a8c6b950b62e7e5ab624b5e8f3a439bea2f92cb3404a32c8b</sum>
        </package>
        <package name="php" version="8.3.29" release="1.module_el9.7.0+206+f4fec7f3" epoch="0" arch="s390x" src="php-8.3.29-1.module_el9.7.0+206+f4fec7f3.src.rpm">
          <filename>php-8.3.29-1.module_el9.7.0+206+f4fec7f3.s390x.rpm</filename>
          <sum type="sha256">f32d2f9e05bbf1c4c07b8deae77df3ac754142cfebd138e7f55d419adaa00cbb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1473</id>
    <title>Important: openssl security update</title>
    <issued date="2026-01-28 00:00:00"/>
    <updated date="2026-02-02 11:12:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file (CVE-2025-11187)
  * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing (CVE-2025-15467)
  * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling (CVE-2025-15468)
  * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation (CVE-2025-15469)
  * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression (CVE-2025-66199)
  * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160)
  * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls (CVE-2025-69418)
  * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419)
  * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421)
  * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420)
  * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795)
  * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification (CVE-2026-22796)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1473" id="RHSA-2026:1473" type="rhsa" title="RHSA-2026:1473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11187" id="CVE-2025-11187" type="cve" title="CVE-2025-11187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15467" id="CVE-2025-15467" type="cve" title="CVE-2025-15467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15468" id="CVE-2025-15468" type="cve" title="CVE-2025-15468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15469" id="CVE-2025-15469" type="cve" title="CVE-2025-15469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66199" id="CVE-2025-66199" type="cve" title="CVE-2025-66199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68160" id="CVE-2025-68160" type="cve" title="CVE-2025-68160"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69418" id="CVE-2025-69418" type="cve" title="CVE-2025-69418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69419" id="CVE-2025-69419" type="cve" title="CVE-2025-69419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69420" id="CVE-2025-69420" type="cve" title="CVE-2025-69420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69421" id="CVE-2025-69421" type="cve" title="CVE-2025-69421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22795" id="CVE-2026-22795" type="cve" title="CVE-2026-22795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22796" id="CVE-2026-22796" type="cve" title="CVE-2026-22796"/>
      <reference href="https://bugzilla.redhat.com/2430375" id="2430375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430376" id="2430376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430377" id="2430377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430378" id="2430378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430379" id="2430379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430380" id="2430380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430381" id="2430381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430386" id="2430386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430387" id="2430387" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430388" id="2430388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430389" id="2430389" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430390" id="2430390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1473.html" id="ALSA-2026:1473" type="self" title="ALSA-2026:1473"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="openssl-perl" version="3.5.1" release="7.el9_7" epoch="1" arch="s390x" src="openssl-3.5.1-7.el9_7.src.rpm">
          <filename>openssl-perl-3.5.1-7.el9_7.s390x.rpm</filename>
          <sum type="sha256">3da95650b105c12757ad0f57ea05fd670721b359acd101d49e93f7dc8bc51e32</sum>
        </package>
        <package name="openssl-devel" version="3.5.1" release="7.el9_7" epoch="1" arch="s390x" src="openssl-3.5.1-7.el9_7.src.rpm">
          <filename>openssl-devel-3.5.1-7.el9_7.s390x.rpm</filename>
          <sum type="sha256">497681db6ed9c2e4920882825568a4ef26261a8c9be105bba2d93af180db6cbd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1478</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2026-01-28 00:00:00"/>
    <updated date="2026-01-28 19:56:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1478" id="RHSA-2026:1478" type="rhsa" title="RHSA-2026:1478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1478.html" id="ALSA-2026:1478" type="self" title="ALSA-2026:1478"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3-devel" version="3.9.25" release="3.el9_7" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.src.rpm">
          <filename>python3-devel-3.9.25-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">13551f94be2674a9c79c23059aeb2dbdf56db079ce904ef6ed4934b3c4b34b79</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.25" release="3.el9_7" epoch="0" arch="noarch" src="python3.9-3.9.25-3.el9_7.src.rpm">
          <filename>python-unversioned-command-3.9.25-3.el9_7.noarch.rpm</filename>
          <sum type="sha256">2f814b9350bbf5a449547530ceb346b389da066c1405c62ab4c23805b6fe5532</sum>
        </package>
        <package name="python3-tkinter" version="3.9.25" release="3.el9_7" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.src.rpm">
          <filename>python3-tkinter-3.9.25-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">6eabdb3f5d396f4b402fa6c4b4bfe9f8ffbc4f18d06c9a3adf810efefc034ee8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1595</id>
    <title>Moderate: iperf3 security update</title>
    <issued date="2026-01-29 00:00:00"/>
    <updated date="2026-02-02 10:01:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>iperf3 security update</summary>
    <description>Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.  

Security Fix(es):  

  * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1595" id="RHSA-2026:1595" type="rhsa" title="RHSA-2026:1595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-54349" id="CVE-2025-54349" type="cve" title="CVE-2025-54349"/>
      <reference href="https://bugzilla.redhat.com/2386151" id="2386151" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1595.html" id="ALSA-2026:1595" type="self" title="ALSA-2026:1595"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="iperf3" version="3.9" release="14.el9_7.1" epoch="0" arch="s390x" src="iperf3-3.9-14.el9_7.1.src.rpm">
          <filename>iperf3-3.9-14.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">d5ce1c1afc3749bc553e5edd13c1588e8d48255018af52409fe331a3d99d912a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1617</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-02 00:00:00"/>
    <updated date="2026-02-06 08:24:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CVE-2025-38568)
  * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)
  * kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CVE-2025-40251)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1617" id="RHSA-2026:1617" type="rhsa" title="RHSA-2026:1617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38568" id="CVE-2025-38568" type="cve" title="CVE-2025-38568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40154" id="CVE-2025-40154" type="cve" title="CVE-2025-40154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40251" id="CVE-2025-40251" type="cve" title="CVE-2025-40251"/>
      <reference href="https://bugzilla.redhat.com/2389507" id="2389507" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414494" id="2414494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418892" id="2418892" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1617.html" id="ALSA-2026:1617" type="self" title="ALSA-2026:1617"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.27.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">29cc9abb1b626b20b6caf62768f766c5e321582f64925ef9647d8be0a09aa8ea</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.27.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">317da55b8d170261f4f495ed5a3fe2fae2ea0090208222ad15549637913324a7</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.27.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">65a91727cc792fd9c201b43110d305b9d194aa95e8b372b07f7a68881cd6abe5</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.27.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">6b6940deead03027cce251dfc5509b2acc9550ba95b2cdbbaf8c94d109a5c1f6</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.27.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">709c799a225451028742fdfc6d2898750301139a5677ce6778b0fe1af947fc2a</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.27.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">75630613402998189a7608bc285f6f6c98f28ab4fa2c961ac84ce52a9a644142</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.27.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">7ec24dd53d459572947cddf92680eb823f6054fb27a4355505bf1a80eeff0e99</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.27.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">8384b031232dbb24ac98f1480c49d0f33719f09864e31e996dc157c6875631df</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.27.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">aefc567c6baafc31c7ad0274eec59be08f8b27adcc53943064ee7d083678ce52</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.27.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">cdf47cbbe1bbc909d8031df9ea3f0b11c7e3949dc57e60a2324fed30059c48db</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.27.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d32cd89d73db4e83af313bb228b86d3d2c9b581911867b7bfef2285cd554af87</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.27.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d64e973631d12e0d49d13302f53bf500a1d5b96f71d4cc7219838cf18a6941bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1903</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-02-04 00:00:00"/>
    <updated date="2026-02-10 08:31:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1903" id="RHSA-2026:1903" type="rhsa" title="RHSA-2026:1903"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23490" id="CVE-2026-23490" type="cve" title="CVE-2026-23490"/>
      <reference href="https://bugzilla.redhat.com/2430472" id="2430472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1903.html" id="ALSA-2026:1903" type="self" title="ALSA-2026:1903"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="fence-agents-eaton-snmp" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-eaton-snmp-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">0a72c372ca1bbb9b4f95c5af019513c2377bc5613d0333e1dfb4ee1f79901d07</sum>
        </package>
        <package name="fence-agents-virsh" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-virsh-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">0ca6c483d555044d94bad4656dd2584513dd6c1011f9865c5d1d724596edcc01</sum>
        </package>
        <package name="fence-agents-amt-ws" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-amt-ws-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">0f363b6c118195bec277e0e0776be4e2743e4a1c518aed417398006c449b3058</sum>
        </package>
        <package name="fence-agents-ipmilan" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-ipmilan-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">17376c12166df49ccb3e4bb46c6703956700a060e56b1fb3c08526725e6abf66</sum>
        </package>
        <package name="fence-agents-ipdu" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-ipdu-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">1c24a03341e5774f81f6d5b11513e7201d7460a1da4607aa9ab80f5ef1a2ab5a</sum>
        </package>
        <package name="fence-agents-apc" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-apc-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">1d31a6e8ac91ac4bf0d2bcc2854594412761dbb8a39fca91bb9fa4a6f7f419d5</sum>
        </package>
        <package name="fence-agents-eps" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-eps-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">1d7eb98f49129ee32883e57f1985e57ba60f0145505a4eeae041b45d8debacd3</sum>
        </package>
        <package name="fence-agents-zvm" version="4.10.0" release="98.el9_7.5" epoch="0" arch="s390x" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-zvm-4.10.0-98.el9_7.5.s390x.rpm</filename>
          <sum type="sha256">1e3dc6e5a64e37736d507c25396e58ef4cf091e8d5479fc539fc549f27b46e5f</sum>
        </package>
        <package name="fence-agents-redfish" version="4.10.0" release="98.el9_7.5" epoch="0" arch="s390x" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-redfish-4.10.0-98.el9_7.5.s390x.rpm</filename>
          <sum type="sha256">29d21a304cf0f2f3602f8222898fe96ec7f733dcf30063c6511e5c3cd5ce88ff</sum>
        </package>
        <package name="fence-agents-cisco-mds" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-cisco-mds-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">2bf09ee7a5ace98775ad8c7197443dfc2a0cc415c3b13632c5d4365251fce6c2</sum>
        </package>
        <package name="fence-agents-ifmib" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-ifmib-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">2c7dc7f2ddaf97a2216a953e4ba52c1ad623563fe55fa07aac96aa581aeb1a17</sum>
        </package>
        <package name="fence-agents-emerson" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-emerson-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">3262dab3facca2eadf80d3b54ba7484be542c59b0e35807bd216c0356718c3dd</sum>
        </package>
        <package name="fence-agents-intelmodular" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-intelmodular-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">40069141238412567b9e39ba25e4cd746439b9e34ac16c367ac103e20e7fe4f5</sum>
        </package>
        <package name="fence-agents-rsb" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-rsb-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">434603eabe33f6851df7a710f6d85020be71679d12887158d462518c7d8567c2</sum>
        </package>
        <package name="fence-agents-rsa" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-rsa-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">44d997f2e65c5d3aafa3c2ea7fa094479a02facb99532654da72412a24e60d08</sum>
        </package>
        <package name="fence-agents-lpar" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-lpar-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">44e8e802710f69ae51e86aa413546ae9adf0e021d7251b3fa3de9e3a920fad97</sum>
        </package>
        <package name="fence-agents-hpblade" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-hpblade-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">471a83092c68d9ffc59544d3826ad79a2bd9876ff2525ac247d61c1887a0ec88</sum>
        </package>
        <package name="fence-agents-heuristics-ping" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-heuristics-ping-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">4e1255b0fa64032f791781dc3d613ea046da9feeda4e5877f210dd4e2a570f8c</sum>
        </package>
        <package name="fence-agents-drac5" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-drac5-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">54888794665b03a1d0c8df1cf24a94f5589bdb5e87ab527df09546890888e92e</sum>
        </package>
        <package name="fence-agents-apc-snmp" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-apc-snmp-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">5868830b44bf20352826b6006dc72f5677371f2a9e609c307dc4c1ae43b17716</sum>
        </package>
        <package name="fence-agents-vmware-rest" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-vmware-rest-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">59a8eaaafb8e63ecd813748131e5878197c7e76b09ab61a04e5feb8ea333a14b</sum>
        </package>
        <package name="fence-agents-ilo-mp" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-ilo-mp-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">6bed968d59090b36dc78914af7090fab29ed62f4adbd76a4ed47a36f7563949b</sum>
        </package>
        <package name="fence-agents-ilo2" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-ilo2-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">71225d333a5cc5071f7e59dac81315fdc9749d8280cf5c56aeca8456b40a8884</sum>
        </package>
        <package name="fence-agents-brocade" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-brocade-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">9149ab0f779704f4e097e688d48b8c5b82b128dadf3c42e8f7260593be83cac5</sum>
        </package>
        <package name="fence-agents-ilo-moonshot" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-ilo-moonshot-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">97d97d9f27da5e13a49b081fc489793a2dd3e51da0bf34e6a3a700f9e6ee08a8</sum>
        </package>
        <package name="fence-agents-mpath" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-mpath-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">9e4b46f8ead566419123cacde5f268d1654a690c508949e37a562dcf8ea1f04a</sum>
        </package>
        <package name="fence-agents-all" version="4.10.0" release="98.el9_7.5" epoch="0" arch="s390x" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-all-4.10.0-98.el9_7.5.s390x.rpm</filename>
          <sum type="sha256">a43e8f4923d538365f67f8827f148d30654dfc5a26740171f8206083ce08cf9e</sum>
        </package>
        <package name="fence-agents-bladecenter" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-bladecenter-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">ac8fb7835f4e1070c33c6f0480b43ccf5f7677840c5d40822e663c2f4d762b31</sum>
        </package>
        <package name="fence-agents-vmware-soap" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-vmware-soap-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">add0c1df0dad1d5bc7fd6b56e9a6f81d538d8974d60ee6eac32cc7e2c3360425</sum>
        </package>
        <package name="fence-agents-sbd" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-sbd-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">bda2bf3ca14b8bac6dd8f1e5eb24f8c1884c46c263df37e67933865d95b4d390</sum>
        </package>
        <package name="fence-agents-common" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-common-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">bf90ae0ab6d11bae83d21aad9c9d75ac27cb6ac5108efd490f943358f268c02f</sum>
        </package>
        <package name="fence-agents-nutanix-ahv" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-nutanix-ahv-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">ca03edb03a0e986bc79abaaf6ebf5426cc2926c0dbe760b6b06ec835c0c43740</sum>
        </package>
        <package name="fence-agents-cisco-ucs" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-cisco-ucs-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">d0803571c5f3e49830629b6f49f57bcb54d7f7ed6baf5a75290d209bfa406b33</sum>
        </package>
        <package name="fence-agents-scsi" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-scsi-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">d53a5f95a2bf1fe31530ba0b78f5c01803901040474a837a2d4223ec4382188c</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.10.0" release="98.el9_7.5" epoch="0" arch="s390x" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-kubevirt-4.10.0-98.el9_7.5.s390x.rpm</filename>
          <sum type="sha256">d5e180390187942627f2b2a67d4651a26bb81ceaea8e4f9033c1dea01aca2bae</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-ibm-vpc-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">dc9900dc246c7d8543abec1e32fbaff6a408656ab0f7eaeb9a7fbbd5bbd855a4</sum>
        </package>
        <package name="fence-agents-wti" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-wti-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">e113c4f2542bbc77d731a018ccbbb11b2727248c9e986a14454d64d063eea811</sum>
        </package>
        <package name="fence-agents-kdump" version="4.10.0" release="98.el9_7.5" epoch="0" arch="s390x" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-kdump-4.10.0-98.el9_7.5.s390x.rpm</filename>
          <sum type="sha256">e19413cb538c8ae1e093db30ff064b2255db1b5d84f0e89d48dfbe575ca8ffe8</sum>
        </package>
        <package name="fence-agents-rhevm" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-rhevm-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">e2b28924710f143cbea0a4f91d2d6aae8bb98ebfe9c63d4362f36e950948bac8</sum>
        </package>
        <package name="fence-agents-ibmblade" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-ibmblade-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">e40933d29a19ff92b72f339727336904bc931454a37183fcfb4cfda6fbc8a90f</sum>
        </package>
        <package name="fence-agents-ilo-ssh" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-ilo-ssh-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">ee7fdf1dbbf04e60b16b6c443705789cca28b260f685e2f38233c3f5c88348f9</sum>
        </package>
        <package name="fence-agents-ibm-powervs" version="4.10.0" release="98.el9_7.5" epoch="0" arch="noarch" src="fence-agents-4.10.0-98.el9_7.5.src.rpm">
          <filename>fence-agents-ibm-powervs-4.10.0-98.el9_7.5.noarch.rpm</filename>
          <sum type="sha256">f5dc4995ef565b16e60151916f7570957d4bfad840ea52b44deb225ef5483ee1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1908</id>
    <title>Important: opentelemetry-collector security update</title>
    <issued date="2026-02-04 00:00:00"/>
    <updated date="2026-02-10 07:56:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>opentelemetry-collector security update</summary>
    <description>Collector with the supported components for a AlmaLinux build of OpenTelemetry  

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1908" id="RHSA-2026:1908" type="rhsa" title="RHSA-2026:1908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1908.html" id="ALSA-2026:1908" type="self" title="ALSA-2026:1908"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="opentelemetry-collector" version="0.135.0" release="3.el9_7" epoch="0" arch="s390x" src="opentelemetry-collector-0.135.0-3.el9_7.src.rpm">
          <filename>opentelemetry-collector-0.135.0-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">39670cc1dc265ba62f6b0a63f24ac38ab0cba0e2913dbea4f7bdb8cbfccb0db3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1913</id>
    <title>Moderate: util-linux security update</title>
    <issued date="2026-02-04 00:00:00"/>
    <updated date="2026-02-10 07:54:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>util-linux security update</summary>
    <description>The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.  

Security Fix(es):  

  * util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1913" id="RHSA-2026:1913" type="rhsa" title="RHSA-2026:1913"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14104" id="CVE-2025-14104" type="cve" title="CVE-2025-14104"/>
      <reference href="https://bugzilla.redhat.com/2419369" id="2419369" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1913.html" id="ALSA-2026:1913" type="self" title="ALSA-2026:1913"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3-libmount" version="2.37.4" release="21.el9_7" epoch="0" arch="s390x" src="util-linux-2.37.4-21.el9_7.src.rpm">
          <filename>python3-libmount-2.37.4-21.el9_7.s390x.rpm</filename>
          <sum type="sha256">1ec7957406ae57d4892e1bb7a5f2a82cf77fc4fb29eb419b98fa785ae7cdb4b2</sum>
        </package>
        <package name="libblkid-devel" version="2.37.4" release="21.el9_7" epoch="0" arch="s390x" src="util-linux-2.37.4-21.el9_7.src.rpm">
          <filename>libblkid-devel-2.37.4-21.el9_7.s390x.rpm</filename>
          <sum type="sha256">55737475ae98f8caf4215afcc56d8f95bdfa42a5326c9ef835352699820f4be9</sum>
        </package>
        <package name="libuuid-devel" version="2.37.4" release="21.el9_7" epoch="0" arch="s390x" src="util-linux-2.37.4-21.el9_7.src.rpm">
          <filename>libuuid-devel-2.37.4-21.el9_7.s390x.rpm</filename>
          <sum type="sha256">98067b4c2b5eeba8835af1379f07143b52fb2a288f59b7de1daa4f4e3f1a630a</sum>
        </package>
        <package name="libmount-devel" version="2.37.4" release="21.el9_7" epoch="0" arch="s390x" src="util-linux-2.37.4-21.el9_7.src.rpm">
          <filename>libmount-devel-2.37.4-21.el9_7.s390x.rpm</filename>
          <sum type="sha256">a31bfc2d5767a3fa59c49c32f6f84597a686c8d56370d5a36ab011e50c22f306</sum>
        </package>
        <package name="uuidd" version="2.37.4" release="21.el9_7" epoch="0" arch="s390x" src="util-linux-2.37.4-21.el9_7.src.rpm">
          <filename>uuidd-2.37.4-21.el9_7.s390x.rpm</filename>
          <sum type="sha256">cd6cdb5eafd4c89362d4b0f4a88309232f29adfb1268f679a584f8c27b62601b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1939</id>
    <title>Important: python3.12-wheel security update</title>
    <issued date="2026-02-04 00:00:00"/>
    <updated date="2026-02-10 07:52:00"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-wheel security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking (CVE-2026-24049)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1939" id="RHSA-2026:1939" type="rhsa" title="RHSA-2026:1939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24049" id="CVE-2026-24049" type="cve" title="CVE-2026-24049"/>
      <reference href="https://bugzilla.redhat.com/2431959" id="2431959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1939.html" id="ALSA-2026:1939" type="self" title="ALSA-2026:1939"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3.12-wheel" version="0.41.2" release="3.el9_7.1" epoch="0" arch="noarch" src="python3.12-wheel-0.41.2-3.el9_7.1.src.rpm">
          <filename>python3.12-wheel-0.41.2-3.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">9413f53ffc095e36c05ec3a5d831494ae2982f7d1c8d756934be012af6221166</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2042</id>
    <title>Important: brotli security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-05 12:08:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>brotli security update</summary>
    <description>Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression.   

Security Fix(es):  

  * Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS (CVE-2025-6176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2042" id="RHSA-2026:2042" type="rhsa" title="RHSA-2026:2042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6176" id="CVE-2025-6176" type="cve" title="CVE-2025-6176"/>
      <reference href="https://bugzilla.redhat.com/2408762" id="2408762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2042.html" id="ALSA-2026:2042" type="self" title="ALSA-2026:2042"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="brotli-devel" version="1.0.9" release="9.el9_7" epoch="0" arch="s390x" src="brotli-1.0.9-9.el9_7.src.rpm">
          <filename>brotli-devel-1.0.9-9.el9_7.s390x.rpm</filename>
          <sum type="sha256">69eba75395589d53968e4afc122ed443175b825201d3a01dcb9f50eb68e27fef</sum>
        </package>
        <package name="python3-brotli" version="1.0.9" release="9.el9_7" epoch="0" arch="s390x" src="brotli-1.0.9-9.el9_7.src.rpm">
          <filename>python3-brotli-1.0.9-9.el9_7.s390x.rpm</filename>
          <sum type="sha256">af203063c7442473e84da2c1e530ab6e9de4d5ef27a5e4504e408687f95499a9</sum>
        </package>
        <package name="brotli" version="1.0.9" release="9.el9_7" epoch="0" arch="s390x" src="brotli-1.0.9-9.el9_7.src.rpm">
          <filename>brotli-1.0.9-9.el9_7.s390x.rpm</filename>
          <sum type="sha256">c273a36291fd25e3b65d57959618551ea00f2a3ecadc79705114e8a51eac04ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2048</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-10 07:49:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. (CVE-2026-23530)
  * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability (CVE-2026-23884)
  * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)
  * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution (CVE-2026-23533)
  * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. (CVE-2026-23531)
  * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow (CVE-2026-23534)
  * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow (CVE-2026-23532)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2048" id="RHSA-2026:2048" type="rhsa" title="RHSA-2026:2048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23530" id="CVE-2026-23530" type="cve" title="CVE-2026-23530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23531" id="CVE-2026-23531" type="cve" title="CVE-2026-23531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23532" id="CVE-2026-23532" type="cve" title="CVE-2026-23532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23533" id="CVE-2026-23533" type="cve" title="CVE-2026-23533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23534" id="CVE-2026-23534" type="cve" title="CVE-2026-23534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23883" id="CVE-2026-23883" type="cve" title="CVE-2026-23883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23884" id="CVE-2026-23884" type="cve" title="CVE-2026-23884"/>
      <reference href="https://bugzilla.redhat.com/2430877" id="2430877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430880" id="2430880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430885" id="2430885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430886" id="2430886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430887" id="2430887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430888" id="2430888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430891" id="2430891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2048.html" id="ALSA-2026:2048" type="self" title="ALSA-2026:2048"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="freerdp-libs" version="2.11.7" release="1.el9_7.1" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.1.src.rpm">
          <filename>freerdp-libs-2.11.7-1.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">3113d99ce697556ce31a9bfd0fa15c3f8238c9cada41180fc655d7ad82f144f2</sum>
        </package>
        <package name="libwinpr" version="2.11.7" release="1.el9_7.1" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.1.src.rpm">
          <filename>libwinpr-2.11.7-1.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">4430826467bf4a9c58d2a19e01f0dd4bf159517e8393b03c3ea75acff1c038f3</sum>
        </package>
        <package name="freerdp" version="2.11.7" release="1.el9_7.1" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.1.src.rpm">
          <filename>freerdp-2.11.7-1.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">ca1539d039851900b6666c9e61ca7517378cefd02d50117a4ec48c48cc855d60</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2212</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-09 00:00:00"/>
    <updated date="2026-02-12 10:34:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789)
  * kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819)
  * kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022)
  * kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024)
  * kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415)
  * kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403)
  * kernel: Linux kernel: Denial of Service in ATM CLIP module via infinite recursion (CVE-2025-38459)
  * kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730)
  * kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing (CVE-2025-39760)
  * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)
  * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)
  * kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141)
  * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)
  * kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271)
  * kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269)
  * kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2212" id="RHSA-2026:2212" type="rhsa" title="RHSA-2026:2212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37789" id="CVE-2025-37789" type="cve" title="CVE-2025-37789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37819" id="CVE-2025-37819" type="cve" title="CVE-2025-37819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38022" id="CVE-2025-38022" type="cve" title="CVE-2025-38022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38024" id="CVE-2025-38024" type="cve" title="CVE-2025-38024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38403" id="CVE-2025-38403" type="cve" title="CVE-2025-38403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38415" id="CVE-2025-38415" type="cve" title="CVE-2025-38415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38459" id="CVE-2025-38459" type="cve" title="CVE-2025-38459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38730" id="CVE-2025-38730" type="cve" title="CVE-2025-38730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39760" id="CVE-2025-39760" type="cve" title="CVE-2025-39760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40135" id="CVE-2025-40135" type="cve" title="CVE-2025-40135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40141" id="CVE-2025-40141" type="cve" title="CVE-2025-40141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40158" id="CVE-2025-40158" type="cve" title="CVE-2025-40158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40170" id="CVE-2025-40170" type="cve" title="CVE-2025-40170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40269" id="CVE-2025-40269" type="cve" title="CVE-2025-40269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40271" id="CVE-2025-40271" type="cve" title="CVE-2025-40271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40318" id="CVE-2025-40318" type="cve" title="CVE-2025-40318"/>
      <reference href="https://bugzilla.redhat.com/2363315" id="2363315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2365032" id="2365032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373326" id="2373326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373354" id="2373354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383404" id="2383404" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383421" id="2383421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383487" id="2383487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393191" id="2393191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394601" id="2394601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414506" id="2414506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414521" id="2414521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414522" id="2414522" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414523" id="2414523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419837" id="2419837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419919" id="2419919" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419920" id="2419920" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2212.html" id="ALSA-2026:2212" type="self" title="ALSA-2026:2212"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="kernel-devel" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.30.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">35292802f306a4381a2249e211e33134101b5f4a2b88adc0496b4a3d6775483a</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.30.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">46e054c04aa3dfa1385d0c8f8885ab7b861baa1031316b0bae0952db7612d14b</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.30.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">63fbe8fccb8459531787de87e0aa58d909f10af94637cc1fc5f400d6717d89fd</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.30.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">6d8f1bb3477afc391a21e4aa4ec1ea8c12dfa73ded1f0ebc870cbd193bfbdb63</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.30.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">6f69f7ce5df344d6ec951190a528d98e730f3fa77a264e6109d5f41d7c05a3c3</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.30.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">7841f6849eac255959d6b884bf2c3da73c1a6753c83a9a56e2568fde3b4a136d</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.30.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">bdbf5cde6b2877e920ec35e6bd70aa2fe3b13dfcb0da98685a6ed6cd2e01d5ea</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.30.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">c0111c1cafe87d2869c26ac1632c8f3ccec81e1d538d4dde6f505d75bbd27b04</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.30.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ca6c6d55b922faf916bf31301a08760d8594e50e1edbf994c9173095dcebf495</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.30.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ce1782c877366005de52190c547bc170c6c484f271f1cec78963a49f9cfce9e3</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.30.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">e4d04f1f43f7f3c2c0fa3d1ccad7c02848420e1632384c80e15ba03268e6a4a8</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.30.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">faf09d09e10d8d1c1342e60117c8d22ff4c201a21b6bbfb979c4b18498c63b77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2216</id>
    <title>Important: libsoup security update</title>
    <issued date="2026-02-09 00:00:00"/>
    <updated date="2026-02-10 10:37:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication (CVE-2026-0719)
  * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response (CVE-2026-1761)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2216" id="RHSA-2026:2216" type="rhsa" title="RHSA-2026:2216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0719" id="CVE-2026-0719" type="cve" title="CVE-2026-0719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1761" id="CVE-2026-1761" type="cve" title="CVE-2026-1761"/>
      <reference href="https://bugzilla.redhat.com/2427906" id="2427906" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2435961" id="2435961" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2216.html" id="ALSA-2026:2216" type="self" title="ALSA-2026:2216"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libsoup" version="2.72.0" release="12.el9_7.5" epoch="0" arch="s390x" src="libsoup-2.72.0-12.el9_7.5.src.rpm">
          <filename>libsoup-2.72.0-12.el9_7.5.s390x.rpm</filename>
          <sum type="sha256">05c95643d2a506705c65ec1c98ffc6680855f0513082a9d16154b7f9b86fcb06</sum>
        </package>
        <package name="libsoup-devel" version="2.72.0" release="12.el9_7.5" epoch="0" arch="s390x" src="libsoup-2.72.0-12.el9_7.5.src.rpm">
          <filename>libsoup-devel-2.72.0-12.el9_7.5.s390x.rpm</filename>
          <sum type="sha256">574e048eae9296ae55e66a7cdfe8eaf87b65c5240b7fbfa91f957fabb04fee20</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2224</id>
    <title>Critical: keylime security update</title>
    <issued date="2026-02-09 00:00:00"/>
    <updated date="2026-02-11 15:22:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>keylime security update</summary>
    <description>Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.  

Security Fix(es):  

  * keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication (CVE-2026-1709)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2224" id="RHSA-2026:2224" type="rhsa" title="RHSA-2026:2224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1709" id="CVE-2026-1709" type="cve" title="CVE-2026-1709"/>
      <reference href="https://bugzilla.redhat.com/2435514" id="2435514" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2224.html" id="ALSA-2026:2224" type="self" title="ALSA-2026:2224"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="keylime-verifier" version="7.12.1" release="11.el9_7.4" epoch="0" arch="s390x" src="keylime-7.12.1-11.el9_7.4.src.rpm">
          <filename>keylime-verifier-7.12.1-11.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">1687edb22002ae52b1574a4dcab837d71f6d51c3c61c8cc9ce3f73b86331a944</sum>
        </package>
        <package name="keylime-registrar" version="7.12.1" release="11.el9_7.4" epoch="0" arch="s390x" src="keylime-7.12.1-11.el9_7.4.src.rpm">
          <filename>keylime-registrar-7.12.1-11.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">22efc21012f8ad98103f3db670fbf46badd70fd4c097b3f1411423c084220b2f</sum>
        </package>
        <package name="keylime-base" version="7.12.1" release="11.el9_7.4" epoch="0" arch="s390x" src="keylime-7.12.1-11.el9_7.4.src.rpm">
          <filename>keylime-base-7.12.1-11.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">69331f412f913365d286964bd2ae9a7cd4c017e26aab0791adec1edcf23bde52</sum>
        </package>
        <package name="keylime-tenant" version="7.12.1" release="11.el9_7.4" epoch="0" arch="s390x" src="keylime-7.12.1-11.el9_7.4.src.rpm">
          <filename>keylime-tenant-7.12.1-11.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">7897c901d3b588e4ca30ab789af352c729ace45c99ffaf53f98d864d946bec13</sum>
        </package>
        <package name="keylime-selinux" version="7.12.1" release="11.el9_7.4" epoch="0" arch="noarch" src="keylime-7.12.1-11.el9_7.4.src.rpm">
          <filename>keylime-selinux-7.12.1-11.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">88ace794fbf4e50db3a4619a2caf1de44fce0c4e79733315d23fe3689d3a04b4</sum>
        </package>
        <package name="keylime" version="7.12.1" release="11.el9_7.4" epoch="0" arch="s390x" src="keylime-7.12.1-11.el9_7.4.src.rpm">
          <filename>keylime-7.12.1-11.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">8f580e942103f5e35f691f55f3618427bf6324106f28fae0435fbb7dff7c8539</sum>
        </package>
        <package name="python3-keylime" version="7.12.1" release="11.el9_7.4" epoch="0" arch="s390x" src="keylime-7.12.1-11.el9_7.4.src.rpm">
          <filename>python3-keylime-7.12.1-11.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">99cb8a261a6cbc4c82766f7685cd49693fdc6b706ba5918b5c79cea0569c74e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2709</id>
    <title>Important: golang security update</title>
    <issued date="2026-02-16 00:00:00"/>
    <updated date="2026-02-17 10:27:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.  

Security Fix(es):  

  * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * cmd/cgo: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2709" id="RHSA-2026:2709" type="rhsa" title="RHSA-2026:2709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61728" id="CVE-2025-61728" type="cve" title="CVE-2025-61728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61732" id="CVE-2025-61732" type="cve" title="CVE-2025-61732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2434431" id="2434431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437016" id="2437016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2709.html" id="ALSA-2026:2709" type="self" title="ALSA-2026:2709"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="golang-bin" version="1.25.7" release="1.el9_7" epoch="0" arch="s390x" src="golang-1.25.7-1.el9_7.src.rpm">
          <filename>golang-bin-1.25.7-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">0f4c4efb1d4f2f28558b9bfab408612280d91a79811904965a19215c7fb12b9a</sum>
        </package>
        <package name="golang" version="1.25.7" release="1.el9_7" epoch="0" arch="s390x" src="golang-1.25.7-1.el9_7.src.rpm">
          <filename>golang-1.25.7-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">29abda12b7dab9e3065c1f4eea450cd1b111c82ec80e21e855b8ed9d08edfd55</sum>
        </package>
        <package name="go-toolset" version="1.25.7" release="1.el9_7" epoch="0" arch="s390x" src="golang-1.25.7-1.el9_7.src.rpm">
          <filename>go-toolset-1.25.7-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">33ff3c4f2edec3885e2363b10d7cc5f83d1fc3941d1441ce4d6b25ee4b3c7bf4</sum>
        </package>
        <package name="golang-race" version="1.25.7" release="1.el9_7" epoch="0" arch="s390x" src="golang-1.25.7-1.el9_7.src.rpm">
          <filename>golang-race-1.25.7-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">60184f3a6af270f2670d5b2c7ac10bc69557138c6b0cfe60d11199d6c2a840a6</sum>
        </package>
        <package name="golang-docs" version="1.25.7" release="1.el9_7" epoch="0" arch="noarch" src="golang-1.25.7-1.el9_7.src.rpm">
          <filename>golang-docs-1.25.7-1.el9_7.noarch.rpm</filename>
          <sum type="sha256">686ac35cb0130236e1ba9f065e7fa2a21533ae475237498d0c222af295a5fe47</sum>
        </package>
        <package name="golang-tests" version="1.25.7" release="1.el9_7" epoch="0" arch="noarch" src="golang-1.25.7-1.el9_7.src.rpm">
          <filename>golang-tests-1.25.7-1.el9_7.noarch.rpm</filename>
          <sum type="sha256">7cb785edbb4f7d6eafc3e43e383b7d6bc925cd055c5bec99cedb8be289c830f7</sum>
        </package>
        <package name="golang-src" version="1.25.7" release="1.el9_7" epoch="0" arch="noarch" src="golang-1.25.7-1.el9_7.src.rpm">
          <filename>golang-src-1.25.7-1.el9_7.noarch.rpm</filename>
          <sum type="sha256">b3ea6240252afc4aa1cd8e39e5e65f40e80fb4df1ced744cd5d613572c0b0049</sum>
        </package>
        <package name="golang-misc" version="1.25.7" release="1.el9_7" epoch="0" arch="noarch" src="golang-1.25.7-1.el9_7.src.rpm">
          <filename>golang-misc-1.25.7-1.el9_7.noarch.rpm</filename>
          <sum type="sha256">c12eaeb220c75cd9ace3ccca24d26329389573e2fbaf8cf5533b296b5bbd81f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2722</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-16 00:00:00"/>
    <updated date="2026-02-23 13:18:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034)
  * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
  * kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304)
  * kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322)
  * kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349)
  * kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811)
  * kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2722" id="RHSA-2026:2722" type="rhsa" title="RHSA-2026:2722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53034" id="CVE-2023-53034" type="cve" title="CVE-2023-53034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40064" id="CVE-2025-40064" type="cve" title="CVE-2025-40064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40304" id="CVE-2025-40304" type="cve" title="CVE-2025-40304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40322" id="CVE-2025-40322" type="cve" title="CVE-2025-40322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68349" id="CVE-2025-68349" type="cve" title="CVE-2025-68349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68811" id="CVE-2025-68811" type="cve" title="CVE-2025-68811"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22998" id="CVE-2026-22998" type="cve" title="CVE-2026-22998"/>
      <reference href="https://bugzilla.redhat.com/2360239" id="2360239" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406747" id="2406747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419870" id="2419870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419902" id="2419902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424880" id="2424880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429116" id="2429116" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432671" id="2432671" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2722.html" id="ALSA-2026:2722" type="self" title="ALSA-2026:2722"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="kernel-devel-matched" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.34.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">19702a7cd817f8d5e90436f36aed369beb181ba1aeb8af347e5de33906e7d362</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.34.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4bac9b508843e25f784c678b92ae46784d8db881ea51b8af63d70aa2102894aa</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.34.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4d3043eef4c642d88de42912639a6a56808fa98faddcaf66db791adc8cdf50ac</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.34.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4f325675c4c704db4c013289bbf883dc782d81e510fa854bfa1f14e884bc0754</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.34.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5cd60ef6e83e0eeb63f49511757165a79e04d7f91d7d919d3134307817e3f6e2</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.34.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">66a521497e77e4ef105c6918c4adabad0c2caeabbc97c866157d531584335f46</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.34.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">6774f58db59a02184644a2d64736fe9de913aa9d926e4a2155535d429caf9663</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.34.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">848adffbde741f32e583d7b670243b892c939614081b13f59a4ab2e2505335e5</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.34.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">b73e4b8943352a8a6c78fd5a489ea2e26b44adcf3affc3eb1a9337f951648fc1</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.34.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">be03f04f3ef045a3772dd5bf419f274829a3a5002222c5990c3713916ed78133</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.34.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">d6daa259ec2338d1f306e57d0667458a60db4dbd7884b3b326901e4dda3d4b3c</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.34.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ea7df753494675c3e06017cf4c6351d28349ee86d4c7bd5bb48f5f630a7fe171</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2776</id>
    <title>Moderate: edk2 security update</title>
    <issued date="2026-02-17 00:00:00"/>
    <updated date="2026-02-18 13:48:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.   

Security Fix(es):  

  * openssl: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap (CVE-2025-9230)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2776" id="RHSA-2026:2776" type="rhsa" title="RHSA-2026:2776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9230" id="CVE-2025-9230" type="cve" title="CVE-2025-9230"/>
      <reference href="https://bugzilla.redhat.com/2396054" id="2396054" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2776.html" id="ALSA-2026:2776" type="self" title="ALSA-2026:2776"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="edk2-ovmf" version="20241117" release="4.el9_7.3" epoch="0" arch="noarch" src="edk2-20241117-4.el9_7.3.src.rpm">
          <filename>edk2-ovmf-20241117-4.el9_7.3.noarch.rpm</filename>
          <sum type="sha256">b5e7af0c61e51f6617ef9d9b9ae4fc554d01d0de332dade45c8bb7304457a20d</sum>
        </package>
        <package name="edk2-aarch64" version="20241117" release="4.el9_7.3" epoch="0" arch="noarch" src="edk2-20241117-4.el9_7.3.src.rpm">
          <filename>edk2-aarch64-20241117-4.el9_7.3.noarch.rpm</filename>
          <sum type="sha256">c529f43a57b1378db756550bd605d19c555f6d0c4d1b8d34861e2a5c1bfb655e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2781</id>
    <title>Important: nodejs:24 security update</title>
    <issued date="2026-02-17 00:00:00"/>
    <updated date="2026-02-18 13:51:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:24 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132)
  * nodejs: Nodejs denial of service (CVE-2026-21637)
  * nodejs: Nodejs denial of service (CVE-2025-59466)
  * nodejs: Nodejs denial of service (CVE-2025-59465)
  * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131)
  * nodejs: Nodejs file permissions bypass (CVE-2025-55130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2781" id="RHSA-2026:2781" type="rhsa" title="RHSA-2026:2781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55130" id="CVE-2025-55130" type="cve" title="CVE-2025-55130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55131" id="CVE-2025-55131" type="cve" title="CVE-2025-55131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55132" id="CVE-2025-55132" type="cve" title="CVE-2025-55132"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59465" id="CVE-2025-59465" type="cve" title="CVE-2025-59465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59466" id="CVE-2025-59466" type="cve" title="CVE-2025-59466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21637" id="CVE-2026-21637" type="cve" title="CVE-2026-21637"/>
      <reference href="https://bugzilla.redhat.com/2431338" id="2431338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431340" id="2431340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431343" id="2431343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431349" id="2431349" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431350" id="2431350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431352" id="2431352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2781.html" id="ALSA-2026:2781" type="self" title="ALSA-2026:2781"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="nodejs" stream="24" version="9070020260217131521" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-devel" version="24.13.0" release="1.module_el9.7.0+209+ecf6523e" epoch="1" arch="s390x" src="nodejs-24.13.0-1.module_el9.7.0+209+ecf6523e.src.rpm">
          <filename>nodejs-devel-24.13.0-1.module_el9.7.0+209+ecf6523e.s390x.rpm</filename>
          <sum type="sha256">5f4fdde9d94c71d891edf85d71c72379d6ca59dc62da1d5af63baf3cb541ca4b</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.3" release="3.module_el9.7.0+209+ecf6523e" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.3-3.module_el9.7.0+209+ecf6523e.src.rpm">
          <filename>nodejs-nodemon-3.0.3-3.module_el9.7.0+209+ecf6523e.noarch.rpm</filename>
          <sum type="sha256">6688ca82e36c7f78fe80655131c4a7fad6d4c7b9c851130cb6202a27b946c979</sum>
        </package>
        <package name="nodejs" version="24.13.0" release="1.module_el9.7.0+209+ecf6523e" epoch="1" arch="s390x" src="nodejs-24.13.0-1.module_el9.7.0+209+ecf6523e.src.rpm">
          <filename>nodejs-24.13.0-1.module_el9.7.0+209+ecf6523e.s390x.rpm</filename>
          <sum type="sha256">70a27bdd4343b5d1f2edd86991f4ccc70f4901f7377a1438cd0d8b8af854e08b</sum>
        </package>
        <package name="nodejs-libs" version="24.13.0" release="1.module_el9.7.0+209+ecf6523e" epoch="1" arch="s390x" src="nodejs-24.13.0-1.module_el9.7.0+209+ecf6523e.src.rpm">
          <filename>nodejs-libs-24.13.0-1.module_el9.7.0+209+ecf6523e.s390x.rpm</filename>
          <sum type="sha256">762bb4b0e1a23761f7aaa1b13d8ed65e559f10d81d92b1852c659e31c48ef198</sum>
        </package>
        <package name="nodejs-full-i18n" version="24.13.0" release="1.module_el9.7.0+209+ecf6523e" epoch="1" arch="s390x" src="nodejs-24.13.0-1.module_el9.7.0+209+ecf6523e.src.rpm">
          <filename>nodejs-full-i18n-24.13.0-1.module_el9.7.0+209+ecf6523e.s390x.rpm</filename>
          <sum type="sha256">7a4f7603cee9801b21deebbca54dd4fffb4743deee8115d4ab6ef8d2a4180268</sum>
        </package>
        <package name="npm" version="11.6.2" release="1.24.13.0.1.module_el9.7.0+209+ecf6523e" epoch="1" arch="noarch" src="nodejs-24.13.0-1.module_el9.7.0+209+ecf6523e.src.rpm">
          <filename>npm-11.6.2-1.24.13.0.1.module_el9.7.0+209+ecf6523e.noarch.rpm</filename>
          <sum type="sha256">931ef73d066840659ef738e6282e95b16c91f6f620c8f26fd043d22f7444ae8c</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="6.module_el9.7.0+198+8bf605ba" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el9.7.0+198+8bf605ba.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-6.module_el9.7.0+198+8bf605ba.noarch.rpm</filename>
          <sum type="sha256">97b592d61e7cdad2e8509964064ddbff27be4f5aa478b78c4438ac2fd0d42bb1</sum>
        </package>
        <package name="v8-13.6-devel" version="13.6.233.17" release="1.24.13.0.1.module_el9.7.0+209+ecf6523e" epoch="3" arch="s390x" src="nodejs-24.13.0-1.module_el9.7.0+209+ecf6523e.src.rpm">
          <filename>v8-13.6-devel-13.6.233.17-1.24.13.0.1.module_el9.7.0+209+ecf6523e.s390x.rpm</filename>
          <sum type="sha256">a7d9e5d68eb4125b75e9b51f59f9048427a73092baf0dd91aefdf48ac893ec75</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="6.module_el9.7.0+209+ecf6523e" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.src.rpm">
          <filename>nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm</filename>
          <sum type="sha256">e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4</sum>
        </package>
        <package name="nodejs-docs" version="24.13.0" release="1.module_el9.7.0+209+ecf6523e" epoch="1" arch="noarch" src="nodejs-24.13.0-1.module_el9.7.0+209+ecf6523e.src.rpm">
          <filename>nodejs-docs-24.13.0-1.module_el9.7.0+209+ecf6523e.noarch.rpm</filename>
          <sum type="sha256">f3dcf4672dfa5ced1e0eb20f250035b95ef6641b4e73e39d51a627ecba152c4b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2782</id>
    <title>Important: nodejs:22 security update</title>
    <issued date="2026-02-17 00:00:00"/>
    <updated date="2026-02-23 13:22:00"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132)
  * nodejs: Nodejs denial of service (CVE-2026-21637)
  * nodejs: Nodejs denial of service (CVE-2025-59466)
  * nodejs: Nodejs denial of service (CVE-2025-59465)
  * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131)
  * nodejs: Nodejs file permissions bypass (CVE-2025-55130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2782" id="RHSA-2026:2782" type="rhsa" title="RHSA-2026:2782"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55130" id="CVE-2025-55130" type="cve" title="CVE-2025-55130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55131" id="CVE-2025-55131" type="cve" title="CVE-2025-55131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55132" id="CVE-2025-55132" type="cve" title="CVE-2025-55132"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59465" id="CVE-2025-59465" type="cve" title="CVE-2025-59465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59466" id="CVE-2025-59466" type="cve" title="CVE-2025-59466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21637" id="CVE-2026-21637" type="cve" title="CVE-2026-21637"/>
      <reference href="https://bugzilla.redhat.com/2431338" id="2431338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431340" id="2431340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431343" id="2431343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431349" id="2431349" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431350" id="2431350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431352" id="2431352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2782.html" id="ALSA-2026:2782" type="self" title="ALSA-2026:2782"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="nodejs" stream="22" version="9070020260217130349" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-packaging" version="2021.06" release="5.module_el9.7.0+208+fb06c0ab" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-5.module_el9.7.0+208+fb06c0ab.src.rpm">
          <filename>nodejs-packaging-2021.06-5.module_el9.7.0+208+fb06c0ab.noarch.rpm</filename>
          <sum type="sha256">0528eee629fa506b56c3cec5fd577ee9ade9ee3263827b8f394f53d54bbe1672</sum>
        </package>
        <package name="nodejs-full-i18n" version="22.22.0" release="1.module_el9.7.0+208+fb06c0ab" epoch="1" arch="s390x" src="nodejs-22.22.0-1.module_el9.7.0+208+fb06c0ab.src.rpm">
          <filename>nodejs-full-i18n-22.22.0-1.module_el9.7.0+208+fb06c0ab.s390x.rpm</filename>
          <sum type="sha256">326d7d6b92e4acdd71920b42eb3dd7cf1c8e4b5271d5f73c467b32c65a3b5a86</sum>
        </package>
        <package name="nodejs-libs" version="22.22.0" release="1.module_el9.7.0+208+fb06c0ab" epoch="1" arch="s390x" src="nodejs-22.22.0-1.module_el9.7.0+208+fb06c0ab.src.rpm">
          <filename>nodejs-libs-22.22.0-1.module_el9.7.0+208+fb06c0ab.s390x.rpm</filename>
          <sum type="sha256">46d54159011f929e3162a30f49c6d1fac056d9377cad5878a20287f16aa7a4bb</sum>
        </package>
        <package name="nodejs-devel" version="22.22.0" release="1.module_el9.7.0+208+fb06c0ab" epoch="1" arch="s390x" src="nodejs-22.22.0-1.module_el9.7.0+208+fb06c0ab.src.rpm">
          <filename>nodejs-devel-22.22.0-1.module_el9.7.0+208+fb06c0ab.s390x.rpm</filename>
          <sum type="sha256">6171cca946d484320427a869df0619083415c735cee4f448bb14ab00271ae7be</sum>
        </package>
        <package name="nodejs" version="22.22.0" release="1.module_el9.7.0+208+fb06c0ab" epoch="1" arch="s390x" src="nodejs-22.22.0-1.module_el9.7.0+208+fb06c0ab.src.rpm">
          <filename>nodejs-22.22.0-1.module_el9.7.0+208+fb06c0ab.s390x.rpm</filename>
          <sum type="sha256">636d353a3d084ef4071303bbe8046e5bb62386dc377c79f5b416bb76c8ccdc60</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="5.module_el9.7.0+196+ac40ca3b" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-5.module_el9.7.0+196+ac40ca3b.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-5.module_el9.7.0+196+ac40ca3b.noarch.rpm</filename>
          <sum type="sha256">7ebb5361e6442c86bcc948ea9b435aecc4c8bfd34de4f5d6529133fdaa23235b</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.6.0+172+f0ba00ec" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.6.0+172+f0ba00ec.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.6.0+172+f0ba00ec.noarch.rpm</filename>
          <sum type="sha256">8921c764fbe46df7cc2acc0214748ae816c81911a1ef010e4954d2f9f3f1f581</sum>
        </package>
        <package name="nodejs-docs" version="22.22.0" release="1.module_el9.7.0+208+fb06c0ab" epoch="1" arch="noarch" src="nodejs-22.22.0-1.module_el9.7.0+208+fb06c0ab.src.rpm">
          <filename>nodejs-docs-22.22.0-1.module_el9.7.0+208+fb06c0ab.noarch.rpm</filename>
          <sum type="sha256">8f3de5a8307d83d62844ec5660a43d92dbb1352be6470f6ca457e5ae5f80e28c</sum>
        </package>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.22.0.1.module_el9.7.0+208+fb06c0ab" epoch="3" arch="s390x" src="nodejs-22.22.0-1.module_el9.7.0+208+fb06c0ab.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.22.0.1.module_el9.7.0+208+fb06c0ab.s390x.rpm</filename>
          <sum type="sha256">aed4afa0d3d936a12ae411fcde3e6cdb59a5e696dbfb2fc78c62bee8bfe8f2e2</sum>
        </package>
        <package name="npm" version="10.9.4" release="1.22.22.0.1.module_el9.7.0+208+fb06c0ab" epoch="1" arch="s390x" src="nodejs-22.22.0-1.module_el9.7.0+208+fb06c0ab.src.rpm">
          <filename>npm-10.9.4-1.22.22.0.1.module_el9.7.0+208+fb06c0ab.s390x.rpm</filename>
          <sum type="sha256">ea74a47058e87ab78b701b6d8f82d9ac13a99f93541229e0e50fcbd6e88e6666</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2783</id>
    <title>Important: nodejs:20 security update</title>
    <issued date="2026-02-17 00:00:00"/>
    <updated date="2026-02-23 13:24:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132)
  * nodejs: Nodejs denial of service (CVE-2026-21637)
  * nodejs: Nodejs denial of service (CVE-2025-59466)
  * nodejs: Nodejs denial of service (CVE-2025-59465)
  * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131)
  * nodejs: Nodejs file permissions bypass (CVE-2025-55130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2783" id="RHSA-2026:2783" type="rhsa" title="RHSA-2026:2783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55130" id="CVE-2025-55130" type="cve" title="CVE-2025-55130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55131" id="CVE-2025-55131" type="cve" title="CVE-2025-55131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55132" id="CVE-2025-55132" type="cve" title="CVE-2025-55132"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59465" id="CVE-2025-59465" type="cve" title="CVE-2025-59465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59466" id="CVE-2025-59466" type="cve" title="CVE-2025-59466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21637" id="CVE-2026-21637" type="cve" title="CVE-2026-21637"/>
      <reference href="https://bugzilla.redhat.com/2431338" id="2431338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431340" id="2431340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431343" id="2431343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431349" id="2431349" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431350" id="2431350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431352" id="2431352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2783.html" id="ALSA-2026:2783" type="self" title="ALSA-2026:2783"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="nodejs" stream="20" version="9070020260217124637" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-packaging" version="2021.06" release="5.module_el9.7.0+207+84573810" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-5.module_el9.7.0+207+84573810.src.rpm">
          <filename>nodejs-packaging-2021.06-5.module_el9.7.0+207+84573810.noarch.rpm</filename>
          <sum type="sha256">05f86c49a68ad3d28eb5632b8d8cb414cdc8e1b609d53821410f46d958d55e36</sum>
        </package>
        <package name="nodejs" version="20.20.0" release="1.module_el9.7.0+207+84573810" epoch="1" arch="s390x" src="nodejs-20.20.0-1.module_el9.7.0+207+84573810.src.rpm">
          <filename>nodejs-20.20.0-1.module_el9.7.0+207+84573810.s390x.rpm</filename>
          <sum type="sha256">19415782267af242f3069081222e0965ad8d5e267086d987c5138b4782958bf8</sum>
        </package>
        <package name="nodejs-devel" version="20.20.0" release="1.module_el9.7.0+207+84573810" epoch="1" arch="s390x" src="nodejs-20.20.0-1.module_el9.7.0+207+84573810.src.rpm">
          <filename>nodejs-devel-20.20.0-1.module_el9.7.0+207+84573810.s390x.rpm</filename>
          <sum type="sha256">3ccc744c20e4576a05eb772133e03528f29c949f3fd47c9b48468f7c3c8f7698</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.5.0+125+8dc38870" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.noarch.rpm</filename>
          <sum type="sha256">572b82ee164b85ffef41f974897332716b428e341e262a4ccdd71a9c87312648</sum>
        </package>
        <package name="npm" version="10.8.2" release="1.20.20.0.1.module_el9.7.0+207+84573810" epoch="1" arch="s390x" src="nodejs-20.20.0-1.module_el9.7.0+207+84573810.src.rpm">
          <filename>npm-10.8.2-1.20.20.0.1.module_el9.7.0+207+84573810.s390x.rpm</filename>
          <sum type="sha256">7c11fe6948be5bf6999bd6871b0bf9543e67e06d0d03cfdff77aaa5068df4b70</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="5.module_el9.7.0+207+84573810" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-5.module_el9.7.0+207+84573810.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-5.module_el9.7.0+207+84573810.noarch.rpm</filename>
          <sum type="sha256">8aafd12f78157e86ba2ec7e2c9345b60105bf6f6ee017bd22496ac3e8d69f790</sum>
        </package>
        <package name="nodejs-docs" version="20.20.0" release="1.module_el9.7.0+207+84573810" epoch="1" arch="noarch" src="nodejs-20.20.0-1.module_el9.7.0+207+84573810.src.rpm">
          <filename>nodejs-docs-20.20.0-1.module_el9.7.0+207+84573810.noarch.rpm</filename>
          <sum type="sha256">9b45e7911e1228b9f6ae1ce27a752e5418a996eb6dc94653709a9cf4d18b9b3d</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.20.0" release="1.module_el9.7.0+207+84573810" epoch="1" arch="s390x" src="nodejs-20.20.0-1.module_el9.7.0+207+84573810.src.rpm">
          <filename>nodejs-full-i18n-20.20.0-1.module_el9.7.0+207+84573810.s390x.rpm</filename>
          <sum type="sha256">b670eae1c4077f15c5ee590cfc51a2bbeb5cc1262231e690bff5b146fa9025c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2786</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-02-17 00:00:00"/>
    <updated date="2026-02-18 13:43:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: Integer overflow in memalign leads to heap corruption (CVE-2026-0861)
  * glibc: glibc: Information disclosure via zero-valued network query (CVE-2026-0915)
  * glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory (CVE-2025-15281)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2786" id="RHSA-2026:2786" type="rhsa" title="RHSA-2026:2786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15281" id="CVE-2025-15281" type="cve" title="CVE-2025-15281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0861" id="CVE-2026-0861" type="cve" title="CVE-2026-0861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0915" id="CVE-2026-0915" type="cve" title="CVE-2026-0915"/>
      <reference href="https://bugzilla.redhat.com/2429771" id="2429771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430201" id="2430201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431196" id="2431196" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2786.html" id="ALSA-2026:2786" type="self" title="ALSA-2026:2786"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="glibc-headers" version="2.34" release="231.el9_7.10" epoch="0" arch="s390x" src="glibc-2.34-231.el9_7.10.src.rpm">
          <filename>glibc-headers-2.34-231.el9_7.10.s390x.rpm</filename>
          <sum type="sha256">acf1f2c14b34bf0153043befe7a63edc69423111a11ad1370262b8ba5fa91933</sum>
        </package>
        <package name="glibc-utils" version="2.34" release="231.el9_7.10" epoch="0" arch="s390x" src="glibc-2.34-231.el9_7.10.src.rpm">
          <filename>glibc-utils-2.34-231.el9_7.10.s390x.rpm</filename>
          <sum type="sha256">be72948e3987cf5c5b15eb37e49d6b6038dca33f5e0c3300da1b1cc28d57edda</sum>
        </package>
        <package name="glibc-devel" version="2.34" release="231.el9_7.10" epoch="0" arch="s390x" src="glibc-2.34-231.el9_7.10.src.rpm">
          <filename>glibc-devel-2.34-231.el9_7.10.s390x.rpm</filename>
          <sum type="sha256">c70589335b80d7d756b59e8e0ebedfd4f265160e2e2a55df937e7f88a012e37a</sum>
        </package>
        <package name="glibc-doc" version="2.34" release="231.el9_7.10" epoch="0" arch="noarch" src="glibc-2.34-231.el9_7.10.src.rpm">
          <filename>glibc-doc-2.34-231.el9_7.10.noarch.rpm</filename>
          <sum type="sha256">e146bafa6482576f31bdadfebf68eee5589d4e14b974824ede11162381569408</sum>
        </package>
        <package name="glibc-locale-source" version="2.34" release="231.el9_7.10" epoch="0" arch="s390x" src="glibc-2.34-231.el9_7.10.src.rpm">
          <filename>glibc-locale-source-2.34-231.el9_7.10.s390x.rpm</filename>
          <sum type="sha256">e51c6c6da3da01d7f37a32ea784e751bbb26b9548e0c2f6ffcbf262d526d0b52</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2799</id>
    <title>Moderate: php security update</title>
    <issued date="2026-02-17 00:00:00"/>
    <updated date="2026-02-18 13:30:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)
  * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2799" id="RHSA-2026:2799" type="rhsa" title="RHSA-2026:2799"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14177" id="CVE-2025-14177" type="cve" title="CVE-2025-14177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14178" id="CVE-2025-14178" type="cve" title="CVE-2025-14178"/>
      <reference href="https://bugzilla.redhat.com/2425625" id="2425625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425626" id="2425626" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2799.html" id="ALSA-2026:2799" type="self" title="ALSA-2026:2799"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="php-soap" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-soap-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">0a0d6c576bdf001606739e0f16452f7305c7f2f3e9fcc020e9b1cf5690b23018</sum>
        </package>
        <package name="php-gmp" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-gmp-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">141d0cd4e28cc466e728f5ee54149dee22ae3ce333b98536bd95b35ed6fe2576</sum>
        </package>
        <package name="php-ffi" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-ffi-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">177dfcc237eaf8120a71e7a5ec0694bc6b7cf0f67b0d39d09da48723e9c96c5a</sum>
        </package>
        <package name="php-snmp" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-snmp-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">1b9c81c5edad18bcee5cb6eb8bc44756ba6deb29a442cedda28107edb43ba127</sum>
        </package>
        <package name="php-dba" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-dba-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">2c22b7ed191884df3fb075668673c1ca6c379f1dfac3848364cf5529c00f9b6e</sum>
        </package>
        <package name="php-pdo" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-pdo-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">3ca401e09a3b79027caebfccd8f0199a81e940d48a2233ac2c4a064f11687457</sum>
        </package>
        <package name="php-dbg" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-dbg-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">506fe10b70c407d3478b845b86b073aae9497e888f9fba24ea5aca2d87a2a573</sum>
        </package>
        <package name="php-process" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-process-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">59254bb62d969c708f3d76ebb4cd2ca6377b65cd33ad01551f51c0519cb8c2b0</sum>
        </package>
        <package name="php-cli" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-cli-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">5d99425dfef71ae7d05071556cbb40817ce8236b25cc1d5e608252672428aa8e</sum>
        </package>
        <package name="php-fpm" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-fpm-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">61cd69daf8ce16ea7f8774affe8a84ea72e2323bab2403d7bb673b68f4ae2270</sum>
        </package>
        <package name="php-opcache" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-opcache-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">68f97e4a1fcab447060ed283c347b1bae3f39784586308e9d8cbc22779eb4598</sum>
        </package>
        <package name="php-enchant" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-enchant-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">7181b53959953a2d4cc9c2378b492f5a7e23ed9e7438af7e069690ab36d94d7a</sum>
        </package>
        <package name="php-pgsql" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-pgsql-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">7306b518a7cd90e024fd9a7aa277380b5376f83b0d5c20508bec4c40050c5378</sum>
        </package>
        <package name="php-common" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-common-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">76298eef825d2d197ccd74951833d307c19a6ac1b7f1cd2f8f3d80f56cf072c1</sum>
        </package>
        <package name="php-embedded" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-embedded-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">7ad19f032ecff083af575982949ef0d9041a6b9d463a46dda8ae7bb00da56531</sum>
        </package>
        <package name="php-mbstring" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-mbstring-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">7c2e417a0f54b9b090584358cd5e5e516d112b2a7f529a242c456d7f1cd6da57</sum>
        </package>
        <package name="php-bcmath" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-bcmath-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">7eb33c7cff9ab3f1472b9b9e6b268d8991f2a57c8c00fd8f58b2c8ee1587f0b6</sum>
        </package>
        <package name="php-xml" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-xml-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">934d6d6bd5306a8d4d5bab1672016ab57c5e518a3c265ed1d003bd3039cd1487</sum>
        </package>
        <package name="php" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">9d2df740f7d9162fe6e79e91cf13f941d597f571acd02028a0125a8915033a49</sum>
        </package>
        <package name="php-gd" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-gd-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">a2f5b1021d9b716624859837627fbf4220c64f351e57145806c5431e9b3a1228</sum>
        </package>
        <package name="php-ldap" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-ldap-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">aa6732a5590f3b1dcb5c4395ad9ea0d0789e0de3c68da8d7165586768dbfb061</sum>
        </package>
        <package name="php-odbc" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-odbc-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">c9e19503ce97feb80b5588b353cce3865379983db1358286bb7c3deeae791eea</sum>
        </package>
        <package name="php-intl" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-intl-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">d938ff90b8e834d4624b3d0b18c7f10bff35c3533c6955a0812d290aacd91063</sum>
        </package>
        <package name="php-mysqlnd" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-mysqlnd-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">ef4cc44ed71bbe3280b6f58d44ad2a13301064f2fe611df759084883ae1a6c5b</sum>
        </package>
        <package name="php-devel" version="8.0.30" release="5.el9_7" epoch="0" arch="s390x" src="php-8.0.30-5.el9_7.src.rpm">
          <filename>php-devel-8.0.30-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">f2f4035d74bdf7586a4ced70283ecc2fc197047849c256df02f81289b2b65431</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2920</id>
    <title>Important: grafana security update</title>
    <issued date="2026-02-18 00:00:00"/>
    <updated date="2026-02-19 10:58:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
  * grafana/grafana/pkg/services/dashboards: Grafana Dashboard Permissions Scope Bypass Enables Cross?Dashboard Privilege Escalation (CVE-2026-21721)
  * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2920" id="RHSA-2026:2920" type="rhsa" title="RHSA-2026:2920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61728" id="CVE-2025-61728" type="cve" title="CVE-2025-61728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21721" id="CVE-2026-21721" type="cve" title="CVE-2026-21721"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2433242" id="2433242" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434431" id="2434431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2920.html" id="ALSA-2026:2920" type="self" title="ALSA-2026:2920"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="grafana" version="10.2.6" release="18.el9_7" epoch="0" arch="s390x" src="grafana-10.2.6-18.el9_7.src.rpm">
          <filename>grafana-10.2.6-18.el9_7.s390x.rpm</filename>
          <sum type="sha256">1e6199c63d08f78eae0c88e53378e7da190b2035d1b871396cad22ba64c77f0e</sum>
        </package>
        <package name="grafana-selinux" version="10.2.6" release="18.el9_7" epoch="0" arch="s390x" src="grafana-10.2.6-18.el9_7.src.rpm">
          <filename>grafana-selinux-10.2.6-18.el9_7.s390x.rpm</filename>
          <sum type="sha256">c1200f0fc85b5c961be5c36efbe8d02f88bb7568ddc48836b15e876ef6c1a8e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3031</id>
    <title>Important: libpng15 security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-26 10:52:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libpng15 security update</summary>
    <description>The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG (Portable Network Graphics) image format files. This version should be used only if you are unable to use the current version of libpng.  

Security Fix(es):  

  * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3031" id="RHSA-2026:3031" type="rhsa" title="RHSA-2026:3031"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25646" id="CVE-2026-25646" type="cve" title="CVE-2026-25646"/>
      <reference href="https://bugzilla.redhat.com/2438542" id="2438542" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3031.html" id="ALSA-2026:3031" type="self" title="ALSA-2026:3031"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libpng15" version="1.5.30" release="14.el9_7.1" epoch="0" arch="s390x" src="libpng15-1.5.30-14.el9_7.1.src.rpm">
          <filename>libpng15-1.5.30-14.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">6432ea27082233e3be1bac474ed3f2584238606a1e475a93b6ea5226ab8555b1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3034</id>
    <title>Important: munge security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-26 10:49:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>munge security update</summary>
    <description>MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.  

Security Fix(es):  

  * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery (CVE-2026-25506)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3034" id="RHSA-2026:3034" type="rhsa" title="RHSA-2026:3034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25506" id="CVE-2026-25506" type="cve" title="CVE-2026-25506"/>
      <reference href="https://bugzilla.redhat.com/2438715" id="2438715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3034.html" id="ALSA-2026:3034" type="self" title="ALSA-2026:3034"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="munge" version="0.5.13" release="14.el9_7" epoch="0" arch="s390x" src="munge-0.5.13-14.el9_7.src.rpm">
          <filename>munge-0.5.13-14.el9_7.s390x.rpm</filename>
          <sum type="sha256">258034719a1d3d27feab9285d8e64dd6121df340ab4a7ed7a18c35083ae99f6a</sum>
        </package>
        <package name="munge-libs" version="0.5.13" release="14.el9_7" epoch="0" arch="s390x" src="munge-0.5.13-14.el9_7.src.rpm">
          <filename>munge-libs-0.5.13-14.el9_7.s390x.rpm</filename>
          <sum type="sha256">73fe93eaf2c4e2a93f097091a1239e8b06c8658084ecb5bd96ebe866e379c813</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3040</id>
    <title>Important: grafana-pcp security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-03-10 20:11:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.  

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3040" id="RHSA-2026:3040" type="rhsa" title="RHSA-2026:3040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3040.html" id="ALSA-2026:3040" type="self" title="ALSA-2026:3040"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="grafana-pcp" version="5.1.1" release="12.el9_7" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-12.el9_7.src.rpm">
          <filename>grafana-pcp-5.1.1-12.el9_7.s390x.rpm</filename>
          <sum type="sha256">0c1870680bd1ae2e9d6065ccaed802df2a41707128a0e04cb6ac81cfe1437bbb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3066</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-26 10:42:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129)
  * kernel: Kernel: Double free vulnerability in exFAT filesystem can lead to denial of service (CVE-2025-38206)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3066" id="RHSA-2026:3066" type="rhsa" title="RHSA-2026:3066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38129" id="CVE-2025-38129" type="cve" title="CVE-2025-38129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38206" id="CVE-2025-38206" type="cve" title="CVE-2025-38206"/>
      <reference href="https://bugzilla.redhat.com/2376034" id="2376034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376377" id="2376377" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3066.html" id="ALSA-2026:3066" type="self" title="ALSA-2026:3066"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="perf" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.35.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">1d8a458eeca2afd698e1965d6c6e31af6af61f918e24dabb35ca6cdfb0046d6f</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.35.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">1e1cd9b0a48f0abcf3d761205be5f781cce06d0bad18fbf2b2807faf81a22016</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.35.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">83c32fd1cc9b21f2a2cf9fa3f0e639678f7e0f2825e0768db924ac804d139e37</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.35.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">8a82d5ffe5b837df9bfb69fb1bd7d1d3e305bc798572eada95d4a8cd72e3f34e</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.35.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">8a9fb6de0dc152214fa3b4199f1fb1e91911723e4558762a6c0e04609fabccd2</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.35.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">a4c5d0b64d0a223cb532ab13a21d5e348e8da1cb50e0739862f7eaf3215cfdae</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.35.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">a597fd4f9b32ab9aa67ec5d5f8339fab54cd58b04b88d29d251c8b8259e036d2</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.35.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">b2d3d26acc14901463cc0eab4c4cd6d7f86525d880e3ec4adfed0d9adb5c28dd</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.35.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ba148e04a6b80c7eeeaa08d3c5009dece978ddc27a79a760d07bb198cdf3a0f2</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.35.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">e7b15c9845ca24c926ac998254153dd52d162e8e91e93815ef875ef2d4c95ec1</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.35.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ff84c93de00d3880aaadb53b395e5110723fde53cdfa4a7c1a992de78ffa0d9b</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.35.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ff86c8d304b084b159b15a31f2aae6a7638514e1bf170a6f1a9563488a905e09</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3067</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-26 10:36:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
  * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3067" id="RHSA-2026:3067" type="rhsa" title="RHSA-2026:3067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22855" id="CVE-2026-22855" type="cve" title="CVE-2026-22855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22858" id="CVE-2026-22858" type="cve" title="CVE-2026-22858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22859" id="CVE-2026-22859" type="cve" title="CVE-2026-22859"/>
      <reference href="https://bugzilla.redhat.com/2429645" id="2429645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429649" id="2429649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429653" id="2429653" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3067.html" id="ALSA-2026:3067" type="self" title="ALSA-2026:3067"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libwinpr" version="2.11.7" release="1.el9_7.2" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.2.src.rpm">
          <filename>libwinpr-2.11.7-1.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">947cca0233fb7d617f89d945bf3396874cc35ade383dba7cc39e092a6dcebeb2</sum>
        </package>
        <package name="freerdp" version="2.11.7" release="1.el9_7.2" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.2.src.rpm">
          <filename>freerdp-2.11.7-1.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">b243b10f15b23afdaa0d33c3d25dfcaa51f95329d047990018100c57790950e6</sum>
        </package>
        <package name="freerdp-libs" version="2.11.7" release="1.el9_7.2" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.2.src.rpm">
          <filename>freerdp-libs-2.11.7-1.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">f1ba1d4e5b850fbace4c12b8650903887097b95cca029ce383a4d7b194241315</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3095</id>
    <title>Important: protobuf security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-24 00:13:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>protobuf security update</summary>
    <description>The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.  

Security Fix(es):  

  * python: protobuf: Protobuf: Denial of Service due to recursion depth bypass (CVE-2026-0994)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3095" id="RHSA-2026:3095" type="rhsa" title="RHSA-2026:3095"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0994" id="CVE-2026-0994" type="cve" title="CVE-2026-0994"/>
      <reference href="https://bugzilla.redhat.com/2432398" id="2432398" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3095.html" id="ALSA-2026:3095" type="self" title="ALSA-2026:3095"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="protobuf-lite" version="3.14.0" release="17.el9_7" epoch="0" arch="s390x" src="protobuf-3.14.0-17.el9_7.src.rpm">
          <filename>protobuf-lite-3.14.0-17.el9_7.s390x.rpm</filename>
          <sum type="sha256">44f7bb76f914a955bffa0ad848ae80a62c5b37c145dd674438321df89e1f1697</sum>
        </package>
        <package name="python3-protobuf" version="3.14.0" release="17.el9_7" epoch="0" arch="noarch" src="protobuf-3.14.0-17.el9_7.src.rpm">
          <filename>python3-protobuf-3.14.0-17.el9_7.noarch.rpm</filename>
          <sum type="sha256">85e3188bf898ebf9e10dbb9ae58bb3ec02cd6b77f7b5b082c7990b581e2f4265</sum>
        </package>
        <package name="protobuf" version="3.14.0" release="17.el9_7" epoch="0" arch="s390x" src="protobuf-3.14.0-17.el9_7.src.rpm">
          <filename>protobuf-3.14.0-17.el9_7.s390x.rpm</filename>
          <sum type="sha256">a1938c77fdef615acb18133d300bde38094f7059a59305fefe848c0b676760c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3189</id>
    <title>Moderate: 389-ds-base security update</title>
    <issued date="2026-02-24 00:00:00"/>
    <updated date="2026-02-26 10:31:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.  

Security Fix(es):  

  * 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow (CVE-2025-14905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3189" id="RHSA-2026:3189" type="rhsa" title="RHSA-2026:3189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14905" id="CVE-2025-14905" type="cve" title="CVE-2025-14905"/>
      <reference href="https://bugzilla.redhat.com/2423624" id="2423624" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3189.html" id="ALSA-2026:3189" type="self" title="ALSA-2026:3189"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="389-ds-base" version="2.7.0" release="10.el9_7" epoch="0" arch="s390x" src="389-ds-base-2.7.0-10.el9_7.src.rpm">
          <filename>389-ds-base-2.7.0-10.el9_7.s390x.rpm</filename>
          <sum type="sha256">712b1d27ed2f8f0826db8cd39ef4c55eb36301ffaa7597dd3b97303e0bbc845a</sum>
        </package>
        <package name="389-ds-base-libs" version="2.7.0" release="10.el9_7" epoch="0" arch="s390x" src="389-ds-base-2.7.0-10.el9_7.src.rpm">
          <filename>389-ds-base-libs-2.7.0-10.el9_7.s390x.rpm</filename>
          <sum type="sha256">7627494cea975d620c8b0856a5b42eff928db0fb65f87b9b70d15375ac1ec1eb</sum>
        </package>
        <package name="389-ds-base-snmp" version="2.7.0" release="10.el9_7" epoch="0" arch="s390x" src="389-ds-base-2.7.0-10.el9_7.src.rpm">
          <filename>389-ds-base-snmp-2.7.0-10.el9_7.s390x.rpm</filename>
          <sum type="sha256">d9e935b0530e7a542aa480837e2e2746175777587ec198e742961e205876746c</sum>
        </package>
        <package name="python3-lib389" version="2.7.0" release="10.el9_7" epoch="0" arch="noarch" src="389-ds-base-2.7.0-10.el9_7.src.rpm">
          <filename>python3-lib389-2.7.0-10.el9_7.noarch.rpm</filename>
          <sum type="sha256">e01a4b3ef68c0a71ed6b10c63829a369bd4b005575e18530b85333e20b880f65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3291</id>
    <title>Important: runc security update</title>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-02-26 10:27:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>runc security update</summary>
    <description>The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.  

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3291" id="RHSA-2026:3291" type="rhsa" title="RHSA-2026:3291"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3291.html" id="ALSA-2026:3291" type="self" title="ALSA-2026:3291"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="runc" version="1.4.0" release="2.el9_7" epoch="4" arch="s390x" src="runc-1.4.0-2.el9_7.src.rpm">
          <filename>runc-1.4.0-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">8d90e3ab792d22a8e2626371b37ace157cbbb041bd0be3ebb1c11528cd315ccf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3298</id>
    <title>Important: buildah security update</title>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-02-26 10:25:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.   

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3298" id="RHSA-2026:3298" type="rhsa" title="RHSA-2026:3298"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3298.html" id="ALSA-2026:3298" type="self" title="ALSA-2026:3298"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="buildah" version="1.41.8" release="2.el9_7" epoch="2" arch="s390x" src="buildah-1.41.8-2.el9_7.src.rpm">
          <filename>buildah-1.41.8-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">ab86fc49d5cdbb2d08f95fe10427e36ef28bcc4243a5fa38ed2dd604723d5208</sum>
        </package>
        <package name="buildah-tests" version="1.41.8" release="2.el9_7" epoch="2" arch="s390x" src="buildah-1.41.8-2.el9_7.src.rpm">
          <filename>buildah-tests-1.41.8-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">f504e27bc017c775cb924b068f969e3c54baced8e998c511408e18c461cc8bb7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3337</id>
    <title>Important: podman security update</title>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-02-26 10:23:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
  * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3337" id="RHSA-2026:3337" type="rhsa" title="RHSA-2026:3337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61728" id="CVE-2025-61728" type="cve" title="CVE-2025-61728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434431" id="2434431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3337.html" id="ALSA-2026:3337" type="self" title="ALSA-2026:3337"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="podman-tests" version="5.6.0" release="14.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-14.el9_7.src.rpm">
          <filename>podman-tests-5.6.0-14.el9_7.s390x.rpm</filename>
          <sum type="sha256">2c6111d75251288d1b2e818e6f5e00bce3bab6b7dd1d9199eed15116b7589682</sum>
        </package>
        <package name="podman-remote" version="5.6.0" release="14.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-14.el9_7.src.rpm">
          <filename>podman-remote-5.6.0-14.el9_7.s390x.rpm</filename>
          <sum type="sha256">722351c4ba7fdf36973c1f2bcda5fbcb4bb6dbcdf4abf50cbc2191b25d2f88a5</sum>
        </package>
        <package name="podman-plugins" version="5.6.0" release="14.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-14.el9_7.src.rpm">
          <filename>podman-plugins-5.6.0-14.el9_7.s390x.rpm</filename>
          <sum type="sha256">861f1be97e9bbcd8376c59df39773d0252fac10694a18019c3717c8757683a63</sum>
        </package>
        <package name="podman-docker" version="5.6.0" release="14.el9_7" epoch="6" arch="noarch" src="podman-5.6.0-14.el9_7.src.rpm">
          <filename>podman-docker-5.6.0-14.el9_7.noarch.rpm</filename>
          <sum type="sha256">90f0d253f84790d17063d4dde9ddda5ef355f2c3aa527a2d188e91000b803229</sum>
        </package>
        <package name="podman" version="5.6.0" release="14.el9_7" epoch="6" arch="s390x" src="podman-5.6.0-14.el9_7.src.rpm">
          <filename>podman-5.6.0-14.el9_7.s390x.rpm</filename>
          <sum type="sha256">afa91cdc1f78a470e0bf3369612038f74f999a076af6a7d77fdf1ee767c55b15</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3339</id>
    <title>Important: firefox security update</title>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-02-26 10:21:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)
  * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)
  * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)
  * firefox: Undefined behavior in the DOM: Core &amp; HTML component (CVE-2026-2771)
  * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)
  * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)
  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)
  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)
  * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)
  * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)
  * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)
  * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)
  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)
  * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)
  * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)
  * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)
  * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)
  * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)
  * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)
  * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)
  * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)
  * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)
  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)
  * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)
  * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)
  * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)
  * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)
  * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core &amp; HTML component (CVE-2026-2778)
  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)
  * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)
  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3339" id="RHSA-2026:3339" type="rhsa" title="RHSA-2026:3339"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2447" id="CVE-2026-2447" type="cve" title="CVE-2026-2447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2757" id="CVE-2026-2757" type="cve" title="CVE-2026-2757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2758" id="CVE-2026-2758" type="cve" title="CVE-2026-2758"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2759" id="CVE-2026-2759" type="cve" title="CVE-2026-2759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2760" id="CVE-2026-2760" type="cve" title="CVE-2026-2760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2761" id="CVE-2026-2761" type="cve" title="CVE-2026-2761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2762" id="CVE-2026-2762" type="cve" title="CVE-2026-2762"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2763" id="CVE-2026-2763" type="cve" title="CVE-2026-2763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2764" id="CVE-2026-2764" type="cve" title="CVE-2026-2764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2765" id="CVE-2026-2765" type="cve" title="CVE-2026-2765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2766" id="CVE-2026-2766" type="cve" title="CVE-2026-2766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2767" id="CVE-2026-2767" type="cve" title="CVE-2026-2767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2768" id="CVE-2026-2768" type="cve" title="CVE-2026-2768"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2769" id="CVE-2026-2769" type="cve" title="CVE-2026-2769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2770" id="CVE-2026-2770" type="cve" title="CVE-2026-2770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2771" id="CVE-2026-2771" type="cve" title="CVE-2026-2771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2772" id="CVE-2026-2772" type="cve" title="CVE-2026-2772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2773" id="CVE-2026-2773" type="cve" title="CVE-2026-2773"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2774" id="CVE-2026-2774" type="cve" title="CVE-2026-2774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2775" id="CVE-2026-2775" type="cve" title="CVE-2026-2775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2776" id="CVE-2026-2776" type="cve" title="CVE-2026-2776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2777" id="CVE-2026-2777" type="cve" title="CVE-2026-2777"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2778" id="CVE-2026-2778" type="cve" title="CVE-2026-2778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2779" id="CVE-2026-2779" type="cve" title="CVE-2026-2779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2780" id="CVE-2026-2780" type="cve" title="CVE-2026-2780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2781" id="CVE-2026-2781" type="cve" title="CVE-2026-2781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2782" id="CVE-2026-2782" type="cve" title="CVE-2026-2782"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2783" id="CVE-2026-2783" type="cve" title="CVE-2026-2783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2784" id="CVE-2026-2784" type="cve" title="CVE-2026-2784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2785" id="CVE-2026-2785" type="cve" title="CVE-2026-2785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2786" id="CVE-2026-2786" type="cve" title="CVE-2026-2786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2787" id="CVE-2026-2787" type="cve" title="CVE-2026-2787"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2788" id="CVE-2026-2788" type="cve" title="CVE-2026-2788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2789" id="CVE-2026-2789" type="cve" title="CVE-2026-2789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2790" id="CVE-2026-2790" type="cve" title="CVE-2026-2790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2791" id="CVE-2026-2791" type="cve" title="CVE-2026-2791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2792" id="CVE-2026-2792" type="cve" title="CVE-2026-2792"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2793" id="CVE-2026-2793" type="cve" title="CVE-2026-2793"/>
      <reference href="https://bugzilla.redhat.com/2440219" id="2440219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442284" id="2442284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442287" id="2442287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442288" id="2442288" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442290" id="2442290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442291" id="2442291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442292" id="2442292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442294" id="2442294" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442295" id="2442295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442297" id="2442297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442298" id="2442298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442300" id="2442300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442302" id="2442302" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442304" id="2442304" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442307" id="2442307" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442308" id="2442308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442309" id="2442309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442312" id="2442312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442313" id="2442313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442314" id="2442314" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442316" id="2442316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442318" id="2442318" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442319" id="2442319" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442320" id="2442320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442322" id="2442322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442324" id="2442324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442325" id="2442325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442326" id="2442326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442327" id="2442327" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442328" id="2442328" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442329" id="2442329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442331" id="2442331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442333" id="2442333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442334" id="2442334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442335" id="2442335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442337" id="2442337" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442342" id="2442342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442343" id="2442343" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3339.html" id="ALSA-2026:3339" type="self" title="ALSA-2026:3339"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="firefox" version="140.8.0" release="2.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.8.0-2.el9_7.alma.1.src.rpm">
          <filename>firefox-140.8.0-2.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">2fdccdfc46d1c74b0cece3a477ad0ab313864c4a6ece342162e131a6a3ee7744</sum>
        </package>
        <package name="firefox-x11" version="140.8.0" release="2.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.8.0-2.el9_7.alma.1.src.rpm">
          <filename>firefox-x11-140.8.0-2.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">db0e165432e9eb418c327e7dda8e21ffc195069d885c3cdac9a19eb158756661</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3340</id>
    <title>Important: skopeo security update</title>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-03-02 12:57:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>skopeo security update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.   

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3340" id="RHSA-2026:3340" type="rhsa" title="RHSA-2026:3340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3340.html" id="ALSA-2026:3340" type="self" title="ALSA-2026:3340"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="skopeo" version="1.20.0" release="3.el9_7" epoch="2" arch="s390x" src="skopeo-1.20.0-3.el9_7.src.rpm">
          <filename>skopeo-1.20.0-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">37c5350f690775dc4d6aa23e2383a34dac09b01f3a428961473d5ce4dd04686b</sum>
        </package>
        <package name="skopeo-tests" version="1.20.0" release="3.el9_7" epoch="2" arch="s390x" src="skopeo-1.20.0-3.el9_7.src.rpm">
          <filename>skopeo-tests-1.20.0-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">5a4235b59b002005c4c1a2346fd8dd222e86ba7016c44010e28675c652d9efba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3341</id>
    <title>Important: containernetworking-plugins security update</title>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-03-02 12:59:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>containernetworking-plugins security update</summary>
    <description>The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted.   

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3341" id="RHSA-2026:3341" type="rhsa" title="RHSA-2026:3341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3341.html" id="ALSA-2026:3341" type="self" title="ALSA-2026:3341"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="containernetworking-plugins" version="1.7.1" release="3.el9_7" epoch="1" arch="s390x" src="containernetworking-plugins-1.7.1-3.el9_7.src.rpm">
          <filename>containernetworking-plugins-1.7.1-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">8f19cca689a68018bbecc0e7b93ead8be46162f152f5dc4d7255ecfde2e1cd1e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3359</id>
    <title>Important: python-pyasn1 security update</title>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-02-26 10:19:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-pyasn1 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3359" id="RHSA-2026:3359" type="rhsa" title="RHSA-2026:3359"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23490" id="CVE-2026-23490" type="cve" title="CVE-2026-23490"/>
      <reference href="https://bugzilla.redhat.com/2430472" id="2430472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3359.html" id="ALSA-2026:3359" type="self" title="ALSA-2026:3359"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3-pyasn1-modules" version="0.4.8" release="7.el9_7" epoch="0" arch="noarch" src="python-pyasn1-0.4.8-7.el9_7.src.rpm">
          <filename>python3-pyasn1-modules-0.4.8-7.el9_7.noarch.rpm</filename>
          <sum type="sha256">185f28965ad6cc22b7e1767295b2443e3d13e8d9d8af115978aa137f5d3b4dee</sum>
        </package>
        <package name="python3-pyasn1" version="0.4.8" release="7.el9_7" epoch="0" arch="noarch" src="python-pyasn1-0.4.8-7.el9_7.src.rpm">
          <filename>python3-pyasn1-0.4.8-7.el9_7.noarch.rpm</filename>
          <sum type="sha256">eff31a478fa68dcb64c7c6c3c391eb6f137e148de9738698d9fab752e84f4c82</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3405</id>
    <title>Important: libpng security update</title>
    <issued date="2026-02-26 00:00:00"/>
    <updated date="2026-03-02 13:11:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libpng security update</summary>
    <description>The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files.  

Security Fix(es):  

  * libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API (CVE-2026-22801)
  * libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read (CVE-2026-22695)
  * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3405" id="RHSA-2026:3405" type="rhsa" title="RHSA-2026:3405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22695" id="CVE-2026-22695" type="cve" title="CVE-2026-22695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22801" id="CVE-2026-22801" type="cve" title="CVE-2026-22801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25646" id="CVE-2026-25646" type="cve" title="CVE-2026-25646"/>
      <reference href="https://bugzilla.redhat.com/2428824" id="2428824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428825" id="2428825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438542" id="2438542" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3405.html" id="ALSA-2026:3405" type="self" title="ALSA-2026:3405"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libpng" version="1.6.37" release="12.el9_7.2" epoch="2" arch="s390x" src="libpng-1.6.37-12.el9_7.2.src.rpm">
          <filename>libpng-1.6.37-12.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">8066d24a06a04e640faf2330c44b7ffec3f58439d6bd35cab6b61773035b659e</sum>
        </package>
        <package name="libpng-devel" version="1.6.37" release="12.el9_7.2" epoch="2" arch="s390x" src="libpng-1.6.37-12.el9_7.2.src.rpm">
          <filename>libpng-devel-1.6.37-12.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">adb06d262131f487cf31fa585972166c4fe97f040bba0ccfee0cf2ba7d6b6ba8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3488</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-02 00:00:00"/>
    <updated date="2026-03-04 10:30:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (CVE-2025-40168)
  * kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085)
  * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3488" id="RHSA-2026:3488" type="rhsa" title="RHSA-2026:3488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40168" id="CVE-2025-40168" type="cve" title="CVE-2025-40168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71085" id="CVE-2025-71085" type="cve" title="CVE-2025-71085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23097" id="CVE-2026-23097" type="cve" title="CVE-2026-23097"/>
      <reference href="https://bugzilla.redhat.com/2414482" id="2414482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429026" id="2429026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436802" id="2436802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3488.html" id="ALSA-2026:3488" type="self" title="ALSA-2026:3488"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.36.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">1c9e3112c571f2022a2c9f2017fc6f6da3ec3d33f7a1f26010a487a1ddbb662b</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.36.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">30a6e5c0ad73d9d2854202d3edf930376d3a064834e5a0d2d6bb464dddaf9b4e</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.36.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4efb4a3b26dc68909701858a6167c49d6e01812b88349117c041bdc7328e94b3</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.36.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">6242ff4d1eed0ae08fdd005058fdbcff6243e6768491f1ba69029ab348c57742</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.36.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">72cde1fcfcfff8c273dca1907d0ff2d91595752ce927e0fffc81b5e983144d00</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.36.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">86f57d4aae809c45bcb73f3f738e525b2da08d887341faa3031d502f2b6a3e7e</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.36.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">8efb42ef040f5153e20a6a9158df691d9a124f029b43ca8ab0ef8fb815483ca6</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.36.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">91106775cab5ad38321630bb1d7492faeb6a392f1c805dd8e5655ec8558f0428</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.36.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">c5a4c443e64ae4995e8975ddff5642b01b33428d15f6bd6c06b89e94ba479e83</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.36.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ddff715c35b724d370db0382188fc1c048903a9a529798e9b1f33720cb0878dd</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.36.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">f2094b5912e272ba881f84862ac37ac2d42504756e8ea6b09857c09a4ee2dfa2</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.36.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">f6920958774ae7e1a4960ab7f6e0264a5f06f5d4d3f1b3270a11e71bfa9ca848</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3507</id>
    <title>Important: valkey security update</title>
    <issued date="2026-03-02 00:00:00"/>
    <updated date="2026-03-04 10:26:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>valkey security update</summary>
    <description>Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also.  

Security Fix(es):  

  * Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts (CVE-2025-67733)
  * valkey: Valkey: Denial of Service via invalid clusterbus packet (CVE-2026-21863)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3507" id="RHSA-2026:3507" type="rhsa" title="RHSA-2026:3507"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-67733" id="CVE-2025-67733" type="cve" title="CVE-2025-67733"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21863" id="CVE-2026-21863" type="cve" title="CVE-2026-21863"/>
      <reference href="https://bugzilla.redhat.com/2442025" id="2442025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442026" id="2442026" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3507.html" id="ALSA-2026:3507" type="self" title="ALSA-2026:3507"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="valkey" version="8.0.7" release="1.el9_7" epoch="0" arch="s390x" src="valkey-8.0.7-1.el9_7.src.rpm">
          <filename>valkey-8.0.7-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">41d53d286cfef67c98b29f5398af63132b3be8a51d981b4d6c8ef74cf48849db</sum>
        </package>
        <package name="valkey-devel" version="8.0.7" release="1.el9_7" epoch="0" arch="s390x" src="valkey-8.0.7-1.el9_7.src.rpm">
          <filename>valkey-devel-8.0.7-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">fbf4d543a500b220331b8f36fce915bbcf00a64acbc2267330b749b170257c1f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3516</id>
    <title>Important: thunderbird security update</title>
    <issued date="2026-03-02 00:00:00"/>
    <updated date="2026-03-04 10:23:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)
  * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)
  * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)
  * firefox: Undefined behavior in the DOM: Core &amp; HTML component (CVE-2026-2771)
  * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)
  * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)
  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)
  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)
  * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)
  * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)
  * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)
  * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)
  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)
  * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)
  * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)
  * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)
  * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)
  * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)
  * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)
  * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)
  * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)
  * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)
  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)
  * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)
  * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)
  * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)
  * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)
  * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core &amp; HTML component (CVE-2026-2778)
  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)
  * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)
  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3516" id="RHSA-2026:3516" type="rhsa" title="RHSA-2026:3516"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2447" id="CVE-2026-2447" type="cve" title="CVE-2026-2447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2757" id="CVE-2026-2757" type="cve" title="CVE-2026-2757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2758" id="CVE-2026-2758" type="cve" title="CVE-2026-2758"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2759" id="CVE-2026-2759" type="cve" title="CVE-2026-2759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2760" id="CVE-2026-2760" type="cve" title="CVE-2026-2760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2761" id="CVE-2026-2761" type="cve" title="CVE-2026-2761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2762" id="CVE-2026-2762" type="cve" title="CVE-2026-2762"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2763" id="CVE-2026-2763" type="cve" title="CVE-2026-2763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2764" id="CVE-2026-2764" type="cve" title="CVE-2026-2764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2765" id="CVE-2026-2765" type="cve" title="CVE-2026-2765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2766" id="CVE-2026-2766" type="cve" title="CVE-2026-2766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2767" id="CVE-2026-2767" type="cve" title="CVE-2026-2767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2768" id="CVE-2026-2768" type="cve" title="CVE-2026-2768"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2769" id="CVE-2026-2769" type="cve" title="CVE-2026-2769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2770" id="CVE-2026-2770" type="cve" title="CVE-2026-2770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2771" id="CVE-2026-2771" type="cve" title="CVE-2026-2771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2772" id="CVE-2026-2772" type="cve" title="CVE-2026-2772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2773" id="CVE-2026-2773" type="cve" title="CVE-2026-2773"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2774" id="CVE-2026-2774" type="cve" title="CVE-2026-2774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2775" id="CVE-2026-2775" type="cve" title="CVE-2026-2775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2776" id="CVE-2026-2776" type="cve" title="CVE-2026-2776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2777" id="CVE-2026-2777" type="cve" title="CVE-2026-2777"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2778" id="CVE-2026-2778" type="cve" title="CVE-2026-2778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2779" id="CVE-2026-2779" type="cve" title="CVE-2026-2779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2780" id="CVE-2026-2780" type="cve" title="CVE-2026-2780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2781" id="CVE-2026-2781" type="cve" title="CVE-2026-2781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2782" id="CVE-2026-2782" type="cve" title="CVE-2026-2782"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2783" id="CVE-2026-2783" type="cve" title="CVE-2026-2783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2784" id="CVE-2026-2784" type="cve" title="CVE-2026-2784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2785" id="CVE-2026-2785" type="cve" title="CVE-2026-2785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2786" id="CVE-2026-2786" type="cve" title="CVE-2026-2786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2787" id="CVE-2026-2787" type="cve" title="CVE-2026-2787"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2788" id="CVE-2026-2788" type="cve" title="CVE-2026-2788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2789" id="CVE-2026-2789" type="cve" title="CVE-2026-2789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2790" id="CVE-2026-2790" type="cve" title="CVE-2026-2790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2791" id="CVE-2026-2791" type="cve" title="CVE-2026-2791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2792" id="CVE-2026-2792" type="cve" title="CVE-2026-2792"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2793" id="CVE-2026-2793" type="cve" title="CVE-2026-2793"/>
      <reference href="https://bugzilla.redhat.com/2440219" id="2440219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442284" id="2442284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442287" id="2442287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442288" id="2442288" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442290" id="2442290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442291" id="2442291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442292" id="2442292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442294" id="2442294" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442295" id="2442295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442297" id="2442297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442298" id="2442298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442300" id="2442300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442302" id="2442302" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442304" id="2442304" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442307" id="2442307" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442308" id="2442308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442309" id="2442309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442312" id="2442312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442313" id="2442313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442314" id="2442314" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442316" id="2442316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442318" id="2442318" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442319" id="2442319" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442320" id="2442320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442322" id="2442322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442324" id="2442324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442325" id="2442325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442326" id="2442326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442327" id="2442327" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442328" id="2442328" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442329" id="2442329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442331" id="2442331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442333" id="2442333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442334" id="2442334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442335" id="2442335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442337" id="2442337" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442342" id="2442342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442343" id="2442343" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3516.html" id="ALSA-2026:3516" type="self" title="ALSA-2026:3516"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="thunderbird" version="140.8.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="thunderbird-140.8.0-1.el9_7.alma.1.src.rpm">
          <filename>thunderbird-140.8.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">7a056b28c9f440ba972a6b70b310a82ed3411a8a3ecb16745ee5ae3c59272ca0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3638</id>
    <title>Moderate: nginx:1.24 security update</title>
    <issued date="2026-03-03 00:00:00"/>
    <updated date="2026-03-04 10:33:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx:1.24 security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3638" id="RHSA-2026:3638" type="rhsa" title="RHSA-2026:3638"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1642" id="CVE-2026-1642" type="cve" title="CVE-2026-1642"/>
      <reference href="https://bugzilla.redhat.com/2436738" id="2436738" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3638.html" id="ALSA-2026:3638" type="self" title="ALSA-2026:3638"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="nginx" stream="1.24" version="9070020260304085732" context="8cf767d6" arch="s390x"/>
        <package name="nginx-mod-http-perl" version="1.24.0" release="5.module_el9.7.0+212+9d3c155a.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">022a2c13d1c85073a96d6aceb3e3401580e5a77281596ef630b71f6d35458d72</sum>
        </package>
        <package name="nginx-mod-mail" version="1.24.0" release="5.module_el9.7.0+212+9d3c155a.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">16d66e26a1675c2b7a962159e33bf5c3c1a9a86130c637cb863c86b5b724da30</sum>
        </package>
        <package name="nginx-mod-devel" version="1.24.0" release="5.module_el9.7.0+212+9d3c155a.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">4b46b6285fd4dcefa26e6f771eb099109d3f1025532d9da2ec74c0be69976f25</sum>
        </package>
        <package name="nginx-filesystem" version="1.24.0" release="5.module_el9.7.0+212+9d3c155a.1.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.src.rpm">
          <filename>nginx-filesystem-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">5a3f5b22c1ebb25c16a8d580f17b5b555ef8fe552a3987514f70542f23ed706c</sum>
        </package>
        <package name="nginx-mod-stream" version="1.24.0" release="5.module_el9.7.0+212+9d3c155a.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">5dd77a87318a5853762993318d3c941ef9af5c5ad72512e2e5a00e0f34818322</sum>
        </package>
        <package name="nginx" version="1.24.0" release="5.module_el9.7.0+212+9d3c155a.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.src.rpm">
          <filename>nginx-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">6252fe42b455dd6bf21866973245be7cbc6f70ff1cf2b082b950ac99bb29637f</sum>
        </package>
        <package name="nginx-all-modules" version="1.24.0" release="5.module_el9.7.0+212+9d3c155a.1.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.src.rpm">
          <filename>nginx-all-modules-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">8dcb64f1ff3f4826abee42be90fba7e110364045aa78cc7cf1b73ddcc937e492</sum>
        </package>
        <package name="nginx-core" version="1.24.0" release="5.module_el9.7.0+212+9d3c155a.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.src.rpm">
          <filename>nginx-core-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">9d296c9c0bddd73a070b700aaf7b284c2aa5e67e09e1651cce4b8bf5420f068c</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.24.0" release="5.module_el9.7.0+212+9d3c155a.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">d33419dfb1ed0b008bdb77561ebdd0abb5cec417c48b654bb136b7e163274e31</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.24.0" release="5.module_el9.7.0+212+9d3c155a.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.24.0-5.module_el9.7.0+212+9d3c155a.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">f8e51af4212cc1771fcdf60658b534a29b356767d58f697d990083c49bef8256</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3668</id>
    <title>Important: go-rpm-macros security update</title>
    <issued date="2026-03-03 00:00:00"/>
    <updated date="2026-03-04 11:06:04"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-rpm-macros security update</summary>
    <description>This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only.  

Security Fix(es):  

  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3668" id="RHSA-2026:3668" type="rhsa" title="RHSA-2026:3668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3668.html" id="ALSA-2026:3668" type="self" title="ALSA-2026:3668"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="go-rpm-macros" version="3.6.0" release="13.el9_7" epoch="0" arch="s390x" src="go-rpm-macros-3.6.0-13.el9_7.src.rpm">
          <filename>go-rpm-macros-3.6.0-13.el9_7.s390x.rpm</filename>
          <sum type="sha256">09405c64c179e957775b5de7e757a6258797b2dd7219edcab23cb48db3cbb589</sum>
        </package>
        <package name="go-srpm-macros" version="3.6.0" release="13.el9_7" epoch="0" arch="noarch" src="go-rpm-macros-3.6.0-13.el9_7.src.rpm">
          <filename>go-srpm-macros-3.6.0-13.el9_7.noarch.rpm</filename>
          <sum type="sha256">a8c6d9c83a99b5a1a2c97245231465840ca92610087c1f6fc97c2ca2baedf49b</sum>
        </package>
        <package name="go-filesystem" version="3.6.0" release="13.el9_7" epoch="0" arch="s390x" src="go-rpm-macros-3.6.0-13.el9_7.src.rpm">
          <filename>go-filesystem-3.6.0-13.el9_7.s390x.rpm</filename>
          <sum type="sha256">ac24c10ce61897938d92a7767c9746623a0a0c21490f4de095c213b0216f8eaf</sum>
        </package>
        <package name="go-rpm-templates" version="3.6.0" release="13.el9_7" epoch="0" arch="noarch" src="go-rpm-macros-3.6.0-13.el9_7.src.rpm">
          <filename>go-rpm-templates-3.6.0-13.el9_7.noarch.rpm</filename>
          <sum type="sha256">ec55a8ec96c689ee62e71bb540e6522865cda785bcf3a9e23491a42b3c6a1e0b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3730</id>
    <title>Important: postgresql security update</title>
    <issued date="2026-03-04 00:00:00"/>
    <updated date="2026-03-11 10:01:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006)
  * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004)
  * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3730" id="RHSA-2026:3730" type="rhsa" title="RHSA-2026:3730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2004" id="CVE-2026-2004" type="cve" title="CVE-2026-2004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2005" id="CVE-2026-2005" type="cve" title="CVE-2026-2005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2006" id="CVE-2026-2006" type="cve" title="CVE-2026-2006"/>
      <reference href="https://bugzilla.redhat.com/2439324" id="2439324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439325" id="2439325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439326" id="2439326" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3730.html" id="ALSA-2026:3730" type="self" title="ALSA-2026:3730"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="postgresql" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">2e5c9ab1a0d47645e70b455840606ac26d1c7b97c3de01a86a9fc396d3712363</sum>
        </package>
        <package name="postgresql-upgrade" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-upgrade-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">49f187c427a34af34749a8cc13f1259f36a6c10b1b9873869a9142253d77dc56</sum>
        </package>
        <package name="postgresql-plpython3" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-plpython3-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">886f5aa8dfeccb9622f3c2efd19a8c0ae18197933a58e140f0a9a5adc9aac34e</sum>
        </package>
        <package name="postgresql-pltcl" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-pltcl-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">8cdc1af8dc2f71e13dec916c69a80ac42664a71d7ea828ff4c9eaae1bf782427</sum>
        </package>
        <package name="postgresql-private-libs" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-private-libs-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">9cd607552b74f4e94cc78117b580a7fc3414c6f18392288138a2902d69afbf3d</sum>
        </package>
        <package name="postgresql-plperl" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-plperl-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">d178a1844be066f62bcd176639f4f03e56ea5e77c9717bbab486266c2d2061da</sum>
        </package>
        <package name="postgresql-contrib" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-contrib-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">dfaabf922b325888a15fd884bf4313d19e78a15c42853819f36952c02d26201c</sum>
        </package>
        <package name="postgresql-server" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-server-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">f6dfdee32caf9b2ccabe3050b77fbc5c6549ec380c3aa2e834a29155d11f9a2c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3753</id>
    <title>Important: osbuild-composer security update</title>
    <issued date="2026-03-04 00:00:00"/>
    <updated date="2026-03-10 19:47:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
  * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3753" id="RHSA-2026:3753" type="rhsa" title="RHSA-2026:3753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61728" id="CVE-2025-61728" type="cve" title="CVE-2025-61728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434431" id="2434431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3753.html" id="ALSA-2026:3753" type="self" title="ALSA-2026:3753"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="osbuild-composer-core" version="149" release="4.el9_7.alma.3" epoch="0" arch="s390x" src="osbuild-composer-149-4.el9_7.alma.3.src.rpm">
          <filename>osbuild-composer-core-149-4.el9_7.alma.3.s390x.rpm</filename>
          <sum type="sha256">1f74b65aa27e8c063d1d2897f7da8e4d3679da0ead50e5b02671487fda1ecd95</sum>
        </package>
        <package name="osbuild-composer" version="149" release="4.el9_7.alma.3" epoch="0" arch="s390x" src="osbuild-composer-149-4.el9_7.alma.3.src.rpm">
          <filename>osbuild-composer-149-4.el9_7.alma.3.s390x.rpm</filename>
          <sum type="sha256">3359e17ad152b4efaacc4d48878b2a55915358c05cacfd2fd38581f40040e4ae</sum>
        </package>
        <package name="osbuild-composer-worker" version="149" release="4.el9_7.alma.3" epoch="0" arch="s390x" src="osbuild-composer-149-4.el9_7.alma.3.src.rpm">
          <filename>osbuild-composer-worker-149-4.el9_7.alma.3.s390x.rpm</filename>
          <sum type="sha256">8382194e0a3b3d01d53ff164ccd31c2c314a732d3470941de50a9e3d303776a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3896</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2026-03-05 00:00:00"/>
    <updated date="2026-03-10 19:52:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006)
  * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004)
  * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3896" id="RHSA-2026:3896" type="rhsa" title="RHSA-2026:3896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2004" id="CVE-2026-2004" type="cve" title="CVE-2026-2004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2005" id="CVE-2026-2005" type="cve" title="CVE-2026-2005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2006" id="CVE-2026-2006" type="cve" title="CVE-2026-2006"/>
      <reference href="https://bugzilla.redhat.com/2439324" id="2439324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439325" id="2439325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439326" id="2439326" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3896.html" id="ALSA-2026:3896" type="self" title="ALSA-2026:3896"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="postgresql" stream="15" version="9050020241004143704" context="8cf767d6" arch="s390x"/>
        <package name="pgaudit" version="1.7.0" release="1.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el9.3.0+52+21733919.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">1343275a4269cc54eb35ffbbd2710b8a3db986516e38ed6661d709a84ab1da89</sum>
        </package>
        <package name="postgresql-server-devel" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-server-devel-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">1780ca4cc4b9af52d78cd676bf7d7b5528dcbac10fe282212304c6266083bfcf</sum>
        </package>
        <package name="postgresql" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">1ee425b02e9422427c6d391cc3c0a8f6e2f124f7530b2f732fa3ed771734632b</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el9.3.0+52+21733919" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el9.3.0+52+21733919.s390x.rpm</filename>
          <sum type="sha256">35fb71a2d998b883ee8e0970101b90bf9d464f7b5a3fdba59b4f76d6318dd445</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-upgrade-devel-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">38be78ce1e4c048ad85d91edf2b12eb79a56708a869f4455bb3f79db9f33f973</sum>
        </package>
        <package name="postgresql-test" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-test-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">40763e3893b3a41c2d8d75e10ee7d07cc9e02cdfa5af3b9c29ece3c24d85c37a</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="2.module_el9.5.0+119+18833d03" epoch="0" arch="s390x" src="pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.src.rpm">
          <filename>pg_repack-1.4.8-2.module_el9.5.0+119+18833d03.s390x.rpm</filename>
          <sum type="sha256">565b4d4edc782cf6df048e990f78d9a96ef21d4a91af2800aa9a0d66ac77ae8f</sum>
        </package>
        <package name="postgresql-static" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-static-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">7336555794cfff3255806bd7df58bd121b299d086dbeb4dd9ce1a07068414557</sum>
        </package>
        <package name="postgresql-pltcl" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-pltcl-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">744d7e5bbc2257448ef94331fd714523b8dfea280701140b66cf66428a876afa</sum>
        </package>
        <package name="postgresql-contrib" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-contrib-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">83b0ca35338b846cd527357bf7d4371f80c5424f99672c88b37dd481e856ecdf</sum>
        </package>
        <package name="postgresql-docs" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-docs-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">8ed1f46d6f481c83be86e895bddac7fc0a6ccce64995c5743aca24ef886022c5</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="noarch" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-test-rpm-macros-15.17-1.module_el9.7.0+214+91f631df.noarch.rpm</filename>
          <sum type="sha256">92d7410aeb90fa0ed2a802d15be612836a4eaa2ccc45639000941b46086dc542</sum>
        </package>
        <package name="postgresql-private-devel" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-private-devel-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">940b65a7fcc3da2c63e129de5e8b20df4254233c93df1441942a0c5cc938233b</sum>
        </package>
        <package name="postgresql-plperl" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-plperl-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">abf17168f42f890c1d49adb2c221c79aa6bd270399127a2d9be07f082b1d0bc8</sum>
        </package>
        <package name="postgresql-upgrade" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-upgrade-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">abf5770258c96671dbd7e5c0d855730ea2ef8582ab24c7d1a15a54fb1f5169e1</sum>
        </package>
        <package name="postgresql-private-libs" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-private-libs-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">bd62384f9fceda4548453c942f208a06659b542984fd3ad9783b7aeac5553913</sum>
        </package>
        <package name="postgresql-server" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-server-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">c90628072a3a8afa6a688800f7fe53b2ee5ee0af271f6c77a08dc5e253620d33</sum>
        </package>
        <package name="postgresql-plpython3" version="15.17" release="1.module_el9.7.0+214+91f631df" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el9.7.0+214+91f631df.src.rpm">
          <filename>postgresql-plpython3-15.17-1.module_el9.7.0+214+91f631df.s390x.rpm</filename>
          <sum type="sha256">eea00604be9adb28a35e3af0dc3cb3f732175635be70fb0d960d0752b2bea471</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3928</id>
    <title>Important: git-lfs security update</title>
    <issued date="2026-03-05 00:00:00"/>
    <updated date="2026-03-06 13:16:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3928" id="RHSA-2026:3928" type="rhsa" title="RHSA-2026:3928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3928.html" id="ALSA-2026:3928" type="self" title="ALSA-2026:3928"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="git-lfs" version="3.6.1" release="7.el9_7" epoch="0" arch="s390x" src="git-lfs-3.6.1-7.el9_7.src.rpm">
          <filename>git-lfs-3.6.1-7.el9_7.s390x.rpm</filename>
          <sum type="sha256">3ac814d0f7039486235d4ed14281bda7484804dd3649d1a83accac8be42e875a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3940</id>
    <title>Moderate: nfs-utils security update</title>
    <issued date="2026-03-05 00:00:00"/>
    <updated date="2026-03-13 09:30:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nfs-utils security update</summary>
    <description>The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs.   

Security Fix(es):  

  * nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3940" id="RHSA-2026:3940" type="rhsa" title="RHSA-2026:3940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12801" id="CVE-2025-12801" type="cve" title="CVE-2025-12801"/>
      <reference href="https://bugzilla.redhat.com/2413081" id="2413081" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3940.html" id="ALSA-2026:3940" type="self" title="ALSA-2026:3940"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="nfs-utils-coreos" version="2.5.4" release="38.el9_7.3" epoch="1" arch="s390x" src="nfs-utils-2.5.4-38.el9_7.3.src.rpm">
          <filename>nfs-utils-coreos-2.5.4-38.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">03a9f3ef9eb521b567e6261a8ca2269de380bfdb99dff975e67cccad4ff0811e</sum>
        </package>
        <package name="nfsv4-client-utils" version="2.5.4" release="38.el9_7.3" epoch="1" arch="s390x" src="nfs-utils-2.5.4-38.el9_7.3.src.rpm">
          <filename>nfsv4-client-utils-2.5.4-38.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">21da57d57b41e113a857d5fb3a3e620d9e850c72998fe31414a12415f7617514</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3966</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-11 10:10:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free (CVE-2025-38106)
  * kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3966" id="RHSA-2026:3966" type="rhsa" title="RHSA-2026:3966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38106" id="CVE-2025-38106" type="cve" title="CVE-2025-38106"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23001" id="CVE-2026-23001" type="cve" title="CVE-2026-23001"/>
      <reference href="https://bugzilla.redhat.com/2376077" id="2376077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432664" id="2432664" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3966.html" id="ALSA-2026:3966" type="self" title="ALSA-2026:3966"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.38.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">239cf9c5ac8b5dd7357c17da6ab8552a3e6278df5b323d5ad1c256bcd5b640d3</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.38.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">68ee1b5361c9f42a8d2ac707bf3645f4866040855e4c991ddd67e4624dcee644</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.38.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">7be36851fe50e4b38896a52ee000ccf406007b8d7a8ad3feb119db77477311dc</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.38.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">842f18e0d5f8f372ed2c76c0ab175001885a2bdef51462e4adcdcd661967ba58</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.38.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">85ce5ee3db1cd4e7c2f529b403eb8b5f5a3fe16bf56091b82f2625990d59988b</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.38.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">8d4df2420b38da6ac20656d154a5e0f6c9b7f4d56cc34fe8ecb5d95919f0dade</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.38.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">98ca357204c8f0807bf52e1d62eebeda0e8301f428c2f2cbd8594bead74c4085</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.38.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">9d41b9c07eaaca851cdc4966cc9721de1222944a12d3d31e2f016cf392f0ece8</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.38.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">a121f8f524f43f0e0ba886dfd5738b274794e965f8bdaf895b21dad0a2215b80</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.38.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">cec97db0f68c145075c954be3c382befb2d092d4e4c8dc5901dd69204b4be4eb</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.38.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">eb36db504b5dd7e640af106b50d3a99d515546da64a02fb117247f560454925e</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.38.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">f6f0dfd0b3aa9dea3054a16b37d5a01d9b44cf8c6445a513ace7ff1020d23de8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4110</id>
    <title>Important: postgresql:16 security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-10 19:55:53"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:16 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006)
  * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004)
  * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4110" id="RHSA-2026:4110" type="rhsa" title="RHSA-2026:4110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2003" id="CVE-2026-2003" type="cve" title="CVE-2026-2003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2004" id="CVE-2026-2004" type="cve" title="CVE-2026-2004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2005" id="CVE-2026-2005" type="cve" title="CVE-2026-2005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2006" id="CVE-2026-2006" type="cve" title="CVE-2026-2006"/>
      <reference href="https://bugzilla.redhat.com/2439324" id="2439324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439325" id="2439325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439326" id="2439326" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4110.html" id="ALSA-2026:4110" type="self" title="ALSA-2026:4110"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="postgresql" stream="16" version="9060020250317150833" context="8cf767d6" arch="s390x"/>
        <package name="pgvector" version="0.6.2" release="2.module_el9.6.0+167+4e561146" epoch="0" arch="s390x" src="pgvector-0.6.2-2.module_el9.6.0+167+4e561146.src.rpm">
          <filename>pgvector-0.6.2-2.module_el9.6.0+167+4e561146.s390x.rpm</filename>
          <sum type="sha256">0189f49bef1c20bac87922d6991e5f0b0b8b5aa7a6b04cfdca3876c35810d906</sum>
        </package>
        <package name="postgresql-pltcl" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-pltcl-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">09e3552d4138de482fcd053f990ba819609916ef84bf6aa1e060b5f5fcdc2713</sum>
        </package>
        <package name="postgresql-contrib" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-contrib-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">17882c8d1f783abb624d9be9bcc1e10ccab66b8993c4baa6cbf7d9eb02a97c87</sum>
        </package>
        <package name="postgresql-server-devel" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-server-devel-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">17de134d23befabc94da62f0ef3d176291754420f90c92ac36d87d71356e2bdb</sum>
        </package>
        <package name="postgresql-plperl" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-plperl-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">23a52cecbfede0cd4be52e71ff68c40217192cdde13f0327d0ff34906f5ff916</sum>
        </package>
        <package name="postgresql-private-devel" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-private-devel-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">2df92aacba22bfcd2b59fc0807337c4959954d8bc676e9cbab83585b8e2c91fe</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="noarch" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-test-rpm-macros-16.13-1.module_el9.7.0+213+65e1da69.noarch.rpm</filename>
          <sum type="sha256">3033607f375f822e2e026542ab0333cc58d6bbb3bc5b12eb086b3c47622de34b</sum>
        </package>
        <package name="postgresql-test" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-test-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">3a65d284c1cb3986e12280c81253449cc40f96a568447b054d8482c60f1b99e6</sum>
        </package>
        <package name="postgresql-upgrade" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-upgrade-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">3b7e08e434dbad7e39dc1c04c2a11d79c0ed6111bf54f3a7bccc7232b4579137</sum>
        </package>
        <package name="postgis-client" version="3.5.3" release="3.module_el9.7.0+187+2286ff0a" epoch="0" arch="s390x" src="postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.src.rpm">
          <filename>postgis-client-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm</filename>
          <sum type="sha256">3e3c27086d65ab7f69141c813b7afdff70bd3074e3f2e8149c2c95b454a7066a</sum>
        </package>
        <package name="postgis-docs" version="3.5.3" release="3.module_el9.7.0+187+2286ff0a" epoch="0" arch="s390x" src="postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.src.rpm">
          <filename>postgis-docs-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm</filename>
          <sum type="sha256">3ea30af2681c7b274e13cfbc4196f9f05c7bdb2be71edb1a25341dc766227d60</sum>
        </package>
        <package name="postgis" version="3.5.3" release="3.module_el9.7.0+187+2286ff0a" epoch="0" arch="s390x" src="postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.src.rpm">
          <filename>postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm</filename>
          <sum type="sha256">5350562fab47f66524d7dbda44510b5a76ba5301664983bb3bd6392d6ec91740</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-upgrade-devel-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">5cc6973c5f8641989f200e6ef0d3ecca25e906ba7f14ddb8b0a162c9b560be47</sum>
        </package>
        <package name="postgresql-docs" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-docs-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">6be0f21688bacf666b6db068e91bb84160a7ebc30a03d6fee6a2db62bb199133</sum>
        </package>
        <package name="postgresql" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">798d41c86a6aa4d4dd7ec12f07f2f381d661cce0096524a13d1f814208b0e22d</sum>
        </package>
        <package name="postgis-upgrade" version="3.5.3" release="3.module_el9.7.0+187+2286ff0a" epoch="0" arch="s390x" src="postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.src.rpm">
          <filename>postgis-upgrade-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm</filename>
          <sum type="sha256">902fb1ceb74b0812bb672b8ed413fda3b5af06ce924da22ca89bc31b3da262ee</sum>
        </package>
        <package name="postgis-utils" version="3.5.3" release="3.module_el9.7.0+187+2286ff0a" epoch="0" arch="s390x" src="postgis-3.5.3-3.module_el9.7.0+187+2286ff0a.src.rpm">
          <filename>postgis-utils-3.5.3-3.module_el9.7.0+187+2286ff0a.s390x.rpm</filename>
          <sum type="sha256">a3245da7fd72a14cb42d07e048ccae6530d0f4233e1cf691eb2a1d7d31d7e26e</sum>
        </package>
        <package name="pg_repack" version="1.5.1" release="1.module_el9.6.0+146+c54fdeca" epoch="0" arch="s390x" src="pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.src.rpm">
          <filename>pg_repack-1.5.1-1.module_el9.6.0+146+c54fdeca.s390x.rpm</filename>
          <sum type="sha256">a56cf5176cd4cb07287fa3fdddaa1e11739b70444afbb4d23f7669dd0b4b3360</sum>
        </package>
        <package name="postgres-decoderbufs" version="2.4.0" release="1.Final.module_el9.4.0+66+eb9878bc" epoch="0" arch="s390x" src="postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.src.rpm">
          <filename>postgres-decoderbufs-2.4.0-1.Final.module_el9.4.0+66+eb9878bc.s390x.rpm</filename>
          <sum type="sha256">b8b86855167ad691eae0fb64fade5d312ea4017529a0b1b15f26b2676799555c</sum>
        </package>
        <package name="postgresql-server" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-server-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">cb20c8880aef67d099c7146498ae9e9e952dccdb6e724428e8bf86f6e845eaf6</sum>
        </package>
        <package name="postgresql-private-libs" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-private-libs-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">d59d2b94faa639610ba5b90ab04976950dede0962131b0e0ab5923a3942768ec</sum>
        </package>
        <package name="pgaudit" version="16.0" release="1.module_el9.4.0+66+eb9878bc" epoch="0" arch="s390x" src="pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.src.rpm">
          <filename>pgaudit-16.0-1.module_el9.4.0+66+eb9878bc.s390x.rpm</filename>
          <sum type="sha256">dbe62c1869957547d55c68a69aec82df664b3d0cc0ef2b9fc75ca1ac5ab6a739</sum>
        </package>
        <package name="postgresql-static" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-static-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">f81e57c756a72e4c4883197df0ca950951faa90d73c0757106866f7436f0282d</sum>
        </package>
        <package name="postgresql-plpython3" version="16.13" release="1.module_el9.7.0+213+65e1da69" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el9.7.0+213+65e1da69.src.rpm">
          <filename>postgresql-plpython3-16.13-1.module_el9.7.0+213+65e1da69.s390x.rpm</filename>
          <sum type="sha256">faee8857f02774697307968a6ab6946348ca5d5b49384c55e998289678ad8f73</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4165</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-10 20:08:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4165" id="RHSA-2026:4165" type="rhsa" title="RHSA-2026:4165"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15366" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15367" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1299" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4165.html" id="ALSA-2026:4165" type="self" title="ALSA-2026:4165"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3.12-devel" version="3.12.12" release="4.el9_7.1" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.1.src.rpm">
          <filename>python3.12-devel-3.12.12-4.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">2258af0b1b06a8cec8af258318137cd5cefd322d9875fa8923a2dbd8c6390d72</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.12" release="4.el9_7.1" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.1.src.rpm">
          <filename>python3.12-tkinter-3.12.12-4.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">61088f74e7df3a3898dff1dcdf0f214fd74e37c5249448244031f9ea8c215620</sum>
        </package>
        <package name="python3.12-libs" version="3.12.12" release="4.el9_7.1" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.1.src.rpm">
          <filename>python3.12-libs-3.12.12-4.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">c0321ecc0a6d0edd0b9dd674151a56f788ecfdd77a5d387b54f18abf4610fb12</sum>
        </package>
        <package name="python3.12" version="3.12.12" release="4.el9_7.1" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.1.src.rpm">
          <filename>python3.12-3.12.12-4.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">d834978c9df87e9a160e4acb56d0b4fd34943a73f818311094860f83489b2908</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4168</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-13 09:25:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4168" id="RHSA-2026:4168" type="rhsa" title="RHSA-2026:4168"/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4168.html" id="ALSA-2026:4168" type="self" title="ALSA-2026:4168"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-15366.html" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-15367.html" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-0865.html" id="CVE-2026-0865" type="cve" title="CVE-2026-0865"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-1299.html" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3-tkinter" version="3.9.25" release="3.el9_7.1" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.1.src.rpm">
          <filename>python3-tkinter-3.9.25-3.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">726057e2f0a378004a0dbf251968b23f8db61f6c9d72b083c0208d1a65b3da79</sum>
        </package>
        <package name="python3-devel" version="3.9.25" release="3.el9_7.1" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.1.src.rpm">
          <filename>python3-devel-3.9.25-3.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">8c4bd74cde41118ea12425db7dbfa10c35f4a2516f11c194dab1519358bcf780</sum>
        </package>
        <package name="python-unversioned-command" version="3.9.25" release="3.el9_7.1" epoch="0" arch="noarch" src="python3.9-3.9.25-3.el9_7.1.src.rpm">
          <filename>python-unversioned-command-3.9.25-3.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">fc2bf48a97fb5743bbf48ca1cd3be9b7a5e50de38cb2be4ca3e05881ad308ce4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4177</id>
    <title>Important: opentelemetry-collector security update</title>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-13 09:23:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>opentelemetry-collector security update</summary>
    <description>Collector with the supported components for a AlmaLinux build of OpenTelemetry  

Security Fix(es):  

  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4177" id="RHSA-2026:4177" type="rhsa" title="RHSA-2026:4177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4177.html" id="ALSA-2026:4177" type="self" title="ALSA-2026:4177"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="opentelemetry-collector" version="0.144.0" release="1.el9_7" epoch="0" arch="s390x" src="opentelemetry-collector-0.144.0-1.el9_7.src.rpm">
          <filename>opentelemetry-collector-0.144.0-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4287c2a5ee4a5468e5f4244b4ee3831a89e3723f6164319094749e8e58b1e08b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4188</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-13 09:21:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.  

Security Fix(es):  

  * gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function (CVE-2025-9820)
  * gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification (CVE-2025-14831)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4188" id="RHSA-2026:4188" type="rhsa" title="RHSA-2026:4188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14831" id="CVE-2025-14831" type="cve" title="CVE-2025-14831"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9820" id="CVE-2025-9820" type="cve" title="CVE-2025-9820"/>
      <reference href="https://bugzilla.redhat.com/2392528" id="2392528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423177" id="2423177" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4188.html" id="ALSA-2026:4188" type="self" title="ALSA-2026:4188"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="gnutls-devel" version="3.8.3" release="10.el9_7" epoch="0" arch="s390x" src="gnutls-3.8.3-10.el9_7.src.rpm">
          <filename>gnutls-devel-3.8.3-10.el9_7.s390x.rpm</filename>
          <sum type="sha256">03abad1802173ca4f35f0cf93e41783ddc000340aedbae1269442ce7b6691ced</sum>
        </package>
        <package name="gnutls-dane" version="3.8.3" release="10.el9_7" epoch="0" arch="s390x" src="gnutls-3.8.3-10.el9_7.src.rpm">
          <filename>gnutls-dane-3.8.3-10.el9_7.s390x.rpm</filename>
          <sum type="sha256">06814310c8fcf7ccfdd238446179c150e3cb54269ad81f1fd3d1e12aff9f2952</sum>
        </package>
        <package name="gnutls-utils" version="3.8.3" release="10.el9_7" epoch="0" arch="s390x" src="gnutls-3.8.3-10.el9_7.src.rpm">
          <filename>gnutls-utils-3.8.3-10.el9_7.s390x.rpm</filename>
          <sum type="sha256">661e2db8496cec56ef24a70abfee06b4037b8437d6cc3324888cafae0a496d47</sum>
        </package>
        <package name="gnutls-c++" version="3.8.3" release="10.el9_7" epoch="0" arch="s390x" src="gnutls-3.8.3-10.el9_7.src.rpm">
          <filename>gnutls-c++-3.8.3-10.el9_7.s390x.rpm</filename>
          <sum type="sha256">720911b427d9e7d0baee61ccab1214352afc9f471e43a38fec2bf61c4f2ba82b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4216</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-13 09:19:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4216" id="RHSA-2026:4216" type="rhsa" title="RHSA-2026:4216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15366" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15367" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1299" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4216.html" id="ALSA-2026:4216" type="self" title="ALSA-2026:4216"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3.11" version="3.11.13" release="5.1.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.1.el9_7.src.rpm">
          <filename>python3.11-3.11.13-5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">3a1130880d04f1c7be5fe4e4d541a5d1eaf997a036733fda9d91a2543c7141ac</sum>
        </package>
        <package name="python3.11-devel" version="3.11.13" release="5.1.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.1.el9_7.src.rpm">
          <filename>python3.11-devel-3.11.13-5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5f225a1d214ad863d941fd6ea07d90299eb0ac907228efaecc0e8ca3f810bada</sum>
        </package>
        <package name="python3.11-libs" version="3.11.13" release="5.1.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.1.el9_7.src.rpm">
          <filename>python3.11-libs-3.11.13-5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">64c616ae81384a06e3bda784eea529b2ff25fb07e1bfc79ade6a15755527a591</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.13" release="5.1.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.1.el9_7.src.rpm">
          <filename>python3.11-tkinter-3.11.13-5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">dde4997a66bac7c175eaab2d61a8f04bc20a0d1594be55ee0eafcf4b795e5e2c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4235</id>
    <title>Moderate: nginx:1.26 security update</title>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-11 11:13:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx:1.26 security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4235" id="RHSA-2026:4235" type="rhsa" title="RHSA-2026:4235"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1642" id="CVE-2026-1642" type="cve" title="CVE-2026-1642"/>
      <reference href="https://bugzilla.redhat.com/2436738" id="2436738" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4235.html" id="ALSA-2026:4235" type="self" title="ALSA-2026:4235"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="nginx" stream="1.26" version="9070020260311090120" context="8cf767d6" arch="s390x"/>
        <package name="nginx-mod-http-xslt-filter" version="1.26.3" release="2.module_el9.7.0+215+8d94e91c" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+215+8d94e91c.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm</filename>
          <sum type="sha256">1a5ea4219e5f77619b3cc4173ab8eab3507bf036075b2dee5d328e0bf087ee33</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.26.3" release="2.module_el9.7.0+215+8d94e91c" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+215+8d94e91c.src.rpm">
          <filename>nginx-mod-http-image-filter-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm</filename>
          <sum type="sha256">2283cf901acf3c6bac54dab277f7a120ad5efa493a9173f9f8dd701a6f973f47</sum>
        </package>
        <package name="nginx" version="1.26.3" release="2.module_el9.7.0+215+8d94e91c" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+215+8d94e91c.src.rpm">
          <filename>nginx-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm</filename>
          <sum type="sha256">34475508de7658d1bb629e4d2e726911baa95c6f84549831dc2d69e7bb10b5e1</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.26.3" release="2.module_el9.7.0+215+8d94e91c" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+215+8d94e91c.src.rpm">
          <filename>nginx-mod-http-perl-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm</filename>
          <sum type="sha256">4be5074a39df53be1b8b6421639325f96e81c8f0f61bd62d5715c691aa1cad3d</sum>
        </package>
        <package name="nginx-mod-mail" version="1.26.3" release="2.module_el9.7.0+215+8d94e91c" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+215+8d94e91c.src.rpm">
          <filename>nginx-mod-mail-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm</filename>
          <sum type="sha256">7c8f3a1c3d7277478587b75433a164a9bb14c2592c1a87d6a7a61f565ae0ef13</sum>
        </package>
        <package name="nginx-core" version="1.26.3" release="2.module_el9.7.0+215+8d94e91c" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+215+8d94e91c.src.rpm">
          <filename>nginx-core-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm</filename>
          <sum type="sha256">87ea5dc33fed6ec200808ae2dc45b771aa330e04d8159e0335f3eecc3d45bc08</sum>
        </package>
        <package name="nginx-all-modules" version="1.26.3" release="2.module_el9.7.0+215+8d94e91c" epoch="2" arch="noarch" src="nginx-1.26.3-2.module_el9.7.0+215+8d94e91c.src.rpm">
          <filename>nginx-all-modules-1.26.3-2.module_el9.7.0+215+8d94e91c.noarch.rpm</filename>
          <sum type="sha256">8ffdcb2b101503e11324958ae7605842acc8d0d33faf2ce2994e65e879aff1fe</sum>
        </package>
        <package name="nginx-filesystem" version="1.26.3" release="2.module_el9.7.0+215+8d94e91c" epoch="2" arch="noarch" src="nginx-1.26.3-2.module_el9.7.0+215+8d94e91c.src.rpm">
          <filename>nginx-filesystem-1.26.3-2.module_el9.7.0+215+8d94e91c.noarch.rpm</filename>
          <sum type="sha256">957cba1da903a4338c9daa2e5e4cf2079d71679d740dadc0f051b466213a971a</sum>
        </package>
        <package name="nginx-mod-devel" version="1.26.3" release="2.module_el9.7.0+215+8d94e91c" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+215+8d94e91c.src.rpm">
          <filename>nginx-mod-devel-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm</filename>
          <sum type="sha256">9c9a37dcb7242d80bd5ad75a2bb232477752d7146f366c97134680b7237857c2</sum>
        </package>
        <package name="nginx-mod-stream" version="1.26.3" release="2.module_el9.7.0+215+8d94e91c" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+215+8d94e91c.src.rpm">
          <filename>nginx-mod-stream-1.26.3-2.module_el9.7.0+215+8d94e91c.s390x.rpm</filename>
          <sum type="sha256">c6e8e72d2a09255e16e287a978920d723c052983446050573528bac3003d4f9b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4445</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-16 16:52:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.104 and .NET Runtime 10.0.4.Security Fix(es):  

  * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)
  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4445" id="RHSA-2026:4445" type="rhsa" title="RHSA-2026:4445"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26127" id="CVE-2026-26127" type="cve" title="CVE-2026-26127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446098" id="2446098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4445.html" id="ALSA-2026:4445" type="self" title="ALSA-2026:4445"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="aspnetcore-runtime-dbg-10.0" version="10.0.4" release="1.el9_7" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el9_7.src.rpm">
          <filename>aspnetcore-runtime-dbg-10.0-10.0.4-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">0372296a10b7042e14aa2dbebb9b14f4c8061512ddf19e3a3f9bccf79dcf5ede</sum>
        </package>
        <package name="dotnet-templates-10.0" version="10.0.104" release="1.el9_7" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el9_7.src.rpm">
          <filename>dotnet-templates-10.0-10.0.104-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">09544ca69bc63dc75485649bd23e2cfc4687c1f801f39f9caced238d52b35fd3</sum>
        </package>
        <package name="dotnet-targeting-pack-10.0" version="10.0.4" release="1.el9_7" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el9_7.src.rpm">
          <filename>dotnet-targeting-pack-10.0-10.0.4-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">122ccd814761b29f3e98014d5e2c32ce45af1cffac74b375cc9ae410df00d1a6</sum>
        </package>
        <package name="dotnet-apphost-pack-10.0" version="10.0.4" release="1.el9_7" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el9_7.src.rpm">
          <filename>dotnet-apphost-pack-10.0-10.0.4-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">3205f9c5a281382c982cded72c5ffd758b7ec1f7feae57e88c53d25e775caccc</sum>
        </package>
        <package name="dotnet-sdk-10.0" version="10.0.104" release="1.el9_7" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el9_7.src.rpm">
          <filename>dotnet-sdk-10.0-10.0.104-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">42b64c6b5dc9de2dacc49e690850e48ac6493799352eacecc9971ced7a294356</sum>
        </package>
        <package name="dotnet-runtime-dbg-10.0" version="10.0.4" release="1.el9_7" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el9_7.src.rpm">
          <filename>dotnet-runtime-dbg-10.0-10.0.4-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5162ebe368bbe91f5dcf2324a046182b293adc2626a5f0e2c1e2331e00eaad64</sum>
        </package>
        <package name="dotnet-hostfxr-10.0" version="10.0.4" release="1.el9_7" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el9_7.src.rpm">
          <filename>dotnet-hostfxr-10.0-10.0.4-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">6fa84dc52d4991da48475986e11bed0c9029406b3c53e335a33d9a3b3b880133</sum>
        </package>
        <package name="aspnetcore-runtime-10.0" version="10.0.4" release="1.el9_7" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el9_7.src.rpm">
          <filename>aspnetcore-runtime-10.0-10.0.4-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">7d0c6066022c7ff631c0174214ddf7c4f333f19092db8192aef035a6931008d5</sum>
        </package>
        <package name="dotnet-runtime-10.0" version="10.0.4" release="1.el9_7" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el9_7.src.rpm">
          <filename>dotnet-runtime-10.0-10.0.4-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d06204dc9e9f0d1ae9c1945700c61f90580627801c82a75fc20762c4cc85da83</sum>
        </package>
        <package name="dotnet-sdk-dbg-10.0" version="10.0.104" release="1.el9_7" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el9_7.src.rpm">
          <filename>dotnet-sdk-dbg-10.0-10.0.104-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">de99b7aec9807244591ae0dd10c7c5d4a8defa7dd69c73b3983670b90e4b09ef</sum>
        </package>
        <package name="dotnet-host" version="10.0.4" release="1.el9_7" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el9_7.src.rpm">
          <filename>dotnet-host-10.0.4-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">e224ad5c074db7c0e5df1b26e1aa9b91a6554b3b70812ad6f9747d94d832a6f0</sum>
        </package>
        <package name="aspnetcore-targeting-pack-10.0" version="10.0.4" release="1.el9_7" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el9_7.src.rpm">
          <filename>aspnetcore-targeting-pack-10.0-10.0.4-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">e8c4340492c2b5a9f027afd16df580492db0f846d2ae303315829a76c02b2813</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4447</id>
    <title>Important: libvpx security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-16 16:45:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.  

Security Fix(es):  

  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4447" id="RHSA-2026:4447" type="rhsa" title="RHSA-2026:4447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2447" id="CVE-2026-2447" type="cve" title="CVE-2026-2447"/>
      <reference href="https://bugzilla.redhat.com/2440219" id="2440219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4447.html" id="ALSA-2026:4447" type="self" title="ALSA-2026:4447"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libvpx" version="1.9.0" release="10.el9_7" epoch="0" arch="s390x" src="libvpx-1.9.0-10.el9_7.src.rpm">
          <filename>libvpx-1.9.0-10.el9_7.s390x.rpm</filename>
          <sum type="sha256">15b8a0edbd665c82465e4796ccf2373e5f3de3b887dc154be909088e30948235</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4454</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:17:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.125 and .NET Runtime 8.0.25.Security Fix(es):  

  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4454" id="RHSA-2026:4454" type="rhsa" title="RHSA-2026:4454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4454.html" id="ALSA-2026:4454" type="self" title="ALSA-2026:4454"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="dotnet-sdk-8.0" version="8.0.125" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el9_7.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.125-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">0628dfafe6d161db6e0900cb455247ef95f7d90626ce25b9cc76f4bea356d398</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.25" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el9_7.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.25-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">2219d9c3cc367f3a4ba48567526c0dfc77f2426acd25d96fba8273c42e106e34</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.25" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el9_7.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.25-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">244d71dc7c4d4d88b4bdd7f54517ee761c1805c56df9084109756807542c4950</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.25" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el9_7.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.25-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">2e300945b405cefdcadf5a1bb5c219439730b9e0dc7cf1f878ede68193c91175</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.125" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el9_7.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.125-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">3038e8c11cd5267d69de9950859a67686aed6e31a140b2cbb368895015a42b0c</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.125" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el9_7.src.rpm">
          <filename>dotnet-templates-8.0-8.0.125-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ae634705714ad27d7c41cf62a2381b9a398185b7d26f374f125ade159feefbed</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.25" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el9_7.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.25-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">c5f1853e12af78aeda7c55ffd32a17c9d00a2090fd0293282445a2861ac54e36</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.25" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el9_7.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.25-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">c97c0939e0b6fc1fcc18fccb8a37008bcb129379fd8744e58708148c89849590</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.25" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el9_7.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.25-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d436e7a34ffa71fa30fd568928f7786463b809e3d072d610d83e42b4130d2151</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.25" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el9_7.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.25-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d9d40a48b503fbda573992927bf5e7fa8af0933c8c120d6bac39384e5f1c56cc</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.25" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el9_7.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.25-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">da35f5425b0a6445eaa486f1efe62e241c7e51dcc7222798133a0ba6255b61d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4456</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-16 16:41:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.115 and .NET Runtime 9.0.14.Security Fix(es):  

  * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)
  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4456" id="RHSA-2026:4456" type="rhsa" title="RHSA-2026:4456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26127" id="CVE-2026-26127" type="cve" title="CVE-2026-26127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446098" id="2446098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4456.html" id="ALSA-2026:4456" type="self" title="ALSA-2026:4456"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.14" release="1.el9_7" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el9_7.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.14-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">11ad6fad7a5e94f3ece05b0db0341b98ddc5601404865e560a1e9363c072ce3c</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.115" release="1.el9_7" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el9_7.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.115-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">13103d40ae56ea81f7e1b6d16c125c067dfb2f116333e40eedc126796a080ad7</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.14" release="1.el9_7" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el9_7.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.14-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">20240119eaf4597065d343df2c57a0c16ec53c32ae145aa9fa7c948bd6884a3c</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.14" release="1.el9_7" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el9_7.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.14-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">24bff03a4308c20842612b2325f38f2e50fe111b45f8ba861609086bc276b8f7</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.14" release="1.el9_7" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el9_7.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.14-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">2c728b2a6f266eb6cb358520dd6d2cd546a88761945a5a15d40f1b4a7ffcb6f7</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="9.0.115" release="1.el9_7" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el9_7.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.115-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">973caa432ca331864eeb6681e4e5913cc064442f4b209728f76f2bd493f4a7ff</sum>
        </package>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.14" release="1.el9_7" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el9_7.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.14-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">97d2b3ccf2d4ad434b2918e19036c41ca330ef4aea9e74d237f573c42259d8f3</sum>
        </package>
        <package name="dotnet-templates-9.0" version="9.0.115" release="1.el9_7" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el9_7.src.rpm">
          <filename>dotnet-templates-9.0-9.0.115-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">a286c2b254908f2b270e4157a25610246b3c1b42a6ca0739b75efe932ca8aa42</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.115" release="1.el9_7" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el9_7.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.115-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">b4c1e79b82f0497f423ba9b8b66107465aeb80148c4f34bb759d4da18ea7d597</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.14" release="1.el9_7" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el9_7.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.14-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">b5cb17184b9c18698f2a81de5617c4309087387f9c8c57befeeeabbd446b4ffb</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.14" release="1.el9_7" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el9_7.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.14-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">dbd48f36cc5ffd9a1df96b422bf17e01cfc035569fd86d5671a06a39632cf7ea</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.14" release="1.el9_7" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el9_7.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.14-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">f08df93ea1db84049814fec98f5e60094cbe6c32999176a7926b68b5bb1c5941</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4472</id>
    <title>Moderate: compat-openssl11 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-16 16:49:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>compat-openssl11 security update</summary>
    <description>The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases.  

Security Fix(es):  

  * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4472" id="RHSA-2026:4472" type="rhsa" title="RHSA-2026:4472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69419" id="CVE-2025-69419" type="cve" title="CVE-2025-69419"/>
      <reference href="https://bugzilla.redhat.com/2430386" id="2430386" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4472.html" id="ALSA-2026:4472" type="self" title="ALSA-2026:4472"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="compat-openssl11" version="1.1.1k" release="5.el9_7.1" epoch="1" arch="s390x" src="compat-openssl11-1.1.1k-5.el9_7.1.src.rpm">
          <filename>compat-openssl11-1.1.1k-5.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">02412a14899b312d423d9327ddcf9bcccc7d22c75fbc964cef9f81194fbd65cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4759</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-17 00:00:00"/>
    <updated date="2026-03-20 07:32:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CVE-2025-39818)
  * kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4759" id="RHSA-2026:4759" type="rhsa" title="RHSA-2026:4759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39818" id="CVE-2025-39818" type="cve" title="CVE-2025-39818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68800" id="CVE-2025-68800" type="cve" title="CVE-2025-68800"/>
      <reference href="https://bugzilla.redhat.com/2395797" id="2395797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429065" id="2429065" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4759.html" id="ALSA-2026:4759" type="self" title="ALSA-2026:4759"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="kernel-doc" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.41.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">089b13ed0872058aee2449d47e7add1a1130f2a4051aa75e5355cdf2c52793d7</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.41.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">13744e7f8f8ed5a16525609e7fdb190f103d232e323af7037ba72598e785ba69</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.41.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">3b435b5741b6ae995476ca89cf76737d87b7c1509d44728f1d180bf715ceb5f0</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.41.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">444b85ad97a4ec5ac37e47cfb30cc63f0a3113588585e847d4c8ca70c87cf6f9</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.41.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">48cba721565b69d5f3f9e8586882e46d4cf1e96116afccd1175e09a1a223c6e0</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.41.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4921f31b7780a5553fd629231591a22f20b29c2183ba69ad87f4c39b6d8cae74</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.41.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4a39aa8fce2bfcc4b556ca2fb1f4102d3446f240ce2ffef2af09943eddfc9f33</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.41.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">4b0752663bf6dd5b4a02231e54a80d02072bfaff0c4de3c05aee36394a635d13</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.41.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">8cc780c04c5f4ae0db615276901cc7175ce387819eab61291291b5171d7057c3</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.41.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">b5ac104ec02d6e44e98dba934865d0e221fd0ea9e5912ce7def3f8ca0b8f6447</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.41.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">e8b24400d6e5eeb8293e956dd9ea3b8e103cb6705c112771ffadae67c572bd2f</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.41.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ec275bc0bc5f182e49e692bfe7f505f09b0679355f650d1acf85620ac4767a27</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4828</id>
    <title>Moderate: mysql security update</title>
    <issued date="2026-03-17 00:00:00"/>
    <updated date="2026-03-19 15:05:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)
  * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4828" id="RHSA-2026:4828" type="rhsa" title="RHSA-2026:4828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21936" id="CVE-2026-21936" type="cve" title="CVE-2026-21936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21937" id="CVE-2026-21937" type="cve" title="CVE-2026-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21941" id="CVE-2026-21941" type="cve" title="CVE-2026-21941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21948" id="CVE-2026-21948" type="cve" title="CVE-2026-21948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21964" id="CVE-2026-21964" type="cve" title="CVE-2026-21964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21968" id="CVE-2026-21968" type="cve" title="CVE-2026-21968"/>
      <reference href="https://bugzilla.redhat.com/2431384" id="2431384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431385" id="2431385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431402" id="2431402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431409" id="2431409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431413" id="2431413" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431431" id="2431431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4828.html" id="ALSA-2026:4828" type="self" title="ALSA-2026:4828"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="mysql-server" version="8.0.45" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.45-1.el9_7.src.rpm">
          <filename>mysql-server-8.0.45-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">189697671a1abc7b8ca80cad75cc165c366d400ffe79f043a408dbf7a379153e</sum>
        </package>
        <package name="mysql-libs" version="8.0.45" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.45-1.el9_7.src.rpm">
          <filename>mysql-libs-8.0.45-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">36d65ae5574809d95e3fb49f29637aad8b17edd3679aaf920cad3fb5400e546b</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.45" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.45-1.el9_7.src.rpm">
          <filename>mysql-errmsg-8.0.45-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">42f4bca654136c59f4e9bbc9098dd9e15cc6ef28f83747691e6b5e98b1d3b404</sum>
        </package>
        <package name="mysql" version="8.0.45" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.45-1.el9_7.src.rpm">
          <filename>mysql-8.0.45-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">634dcc07ae1b5538d70586281671888ac9f8735043976e191230acbd6c3289fc</sum>
        </package>
        <package name="mysql-common" version="8.0.45" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.45-1.el9_7.src.rpm">
          <filename>mysql-common-8.0.45-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">7ab13aab05b394916ff4e9822cdd3eb16db82dac3265a88e3107b613d0018186</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4898</id>
    <title>Important: capstone security update</title>
    <issued date="2026-03-18 00:00:00"/>
    <updated date="2026-03-19 15:08:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>capstone security update</summary>
    <description>Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.  

Security Fix(es):  

  * capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)
  * capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4898" id="RHSA-2026:4898" type="rhsa" title="RHSA-2026:4898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-67873" id="CVE-2025-67873" type="cve" title="CVE-2025-67873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68114" id="CVE-2025-68114" type="cve" title="CVE-2025-68114"/>
      <reference href="https://bugzilla.redhat.com/2423416" id="2423416" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423419" id="2423419" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4898.html" id="ALSA-2026:4898" type="self" title="ALSA-2026:4898"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="capstone" version="4.0.2" release="11.el9_7" epoch="0" arch="s390x" src="capstone-4.0.2-11.el9_7.src.rpm">
          <filename>capstone-4.0.2-11.el9_7.s390x.rpm</filename>
          <sum type="sha256">ccdb4d5ade5042dac46f4aa101031899472a11835f5119dd47eb8e05324180bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5080</id>
    <title>Important: libarchive security update</title>
    <issued date="2026-03-19 00:00:00"/>
    <updated date="2026-03-20 07:21:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive (CVE-2026-4111)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5080" id="RHSA-2026:5080" type="rhsa" title="RHSA-2026:5080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4111" id="CVE-2026-4111" type="cve" title="CVE-2026-4111"/>
      <reference href="https://bugzilla.redhat.com/2446453" id="2446453" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-5080.html" id="ALSA-2026:5080" type="self" title="ALSA-2026:5080"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="bsdtar" version="3.5.3" release="7.el9_7" epoch="0" arch="s390x" src="libarchive-3.5.3-7.el9_7.src.rpm">
          <filename>bsdtar-3.5.3-7.el9_7.s390x.rpm</filename>
          <sum type="sha256">b21bc00a32c3d734f0724e6dadac009da1f0eec5cb201453e7f25adf7d067add</sum>
        </package>
        <package name="libarchive-devel" version="3.5.3" release="7.el9_7" epoch="0" arch="s390x" src="libarchive-3.5.3-7.el9_7.src.rpm">
          <filename>libarchive-devel-3.5.3-7.el9_7.s390x.rpm</filename>
          <sum type="sha256">e02f6a133370e489853fda0eec66984e6593f9bc7b3f6ca4f4696145bf0600cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5599</id>
    <title>Moderate: nginx security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 13:22:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5599" id="RHSA-2026:5599" type="rhsa" title="RHSA-2026:5599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1642" id="CVE-2026-1642" type="cve" title="CVE-2026-1642"/>
      <reference href="https://bugzilla.redhat.com/2436738" id="2436738" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-5599.html" id="ALSA-2026:5599" type="self" title="ALSA-2026:5599"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="nginx-mod-mail" version="1.20.1" release="24.el9_7.1.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.1.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.20.1-24.el9_7.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">00945e3d275ca6211bd34ad96b2eab4a5548bbe77b1bd44fb9992ecf0bd8ceab</sum>
        </package>
        <package name="nginx-core" version="1.20.1" release="24.el9_7.1.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.1.alma.1.src.rpm">
          <filename>nginx-core-1.20.1-24.el9_7.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">232f5a89dcee8ac6271744225f02d7afeb1871dc3e3749039712d956b291af70</sum>
        </package>
        <package name="nginx-mod-stream" version="1.20.1" release="24.el9_7.1.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.1.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.20.1-24.el9_7.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">689e76b721eecb37c50115fea665599a6a274537575cc1548f82d15930d0db8d</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.20.1" release="24.el9_7.1.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.1.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.20.1-24.el9_7.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">6e000eb0ed96d291250b994929b070c24dbeee0ca72d9c78d37c621db2755d01</sum>
        </package>
        <package name="nginx-filesystem" version="1.20.1" release="24.el9_7.1.alma.1" epoch="2" arch="noarch" src="nginx-1.20.1-24.el9_7.1.alma.1.src.rpm">
          <filename>nginx-filesystem-1.20.1-24.el9_7.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">7dae549904b5701335273d41029de59f878d9869e1234fc20ae0f1d03596f001</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.20.1" release="24.el9_7.1.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.1.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.20.1-24.el9_7.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">8ae934548a3263173b5ab9ee79cacd71c05a5c11e3acd2c2588412fe07f491a0</sum>
        </package>
        <package name="nginx-all-modules" version="1.20.1" release="24.el9_7.1.alma.1" epoch="2" arch="noarch" src="nginx-1.20.1-24.el9_7.1.alma.1.src.rpm">
          <filename>nginx-all-modules-1.20.1-24.el9_7.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">9bc3e6946e0b2d1e943885546354ef6e8adeb1474848f060f0156dbebe276b0c</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.20.1" release="24.el9_7.1.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.1.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.20.1-24.el9_7.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">b1fb92de5664324b61825816312b81ea1551d0468c4c8933ef2d25bfe98e1137</sum>
        </package>
        <package name="nginx" version="1.20.1" release="24.el9_7.1.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.1.alma.1.src.rpm">
          <filename>nginx-1.20.1-24.el9_7.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">fd67d1b1f8294c921620ca017c9346a195cd8f43fde8928066dc0f84a28c937a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5602</id>
    <title>Moderate: vim security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 10:18:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5602" id="RHSA-2026:5602" type="rhsa" title="RHSA-2026:5602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25749" id="CVE-2026-25749" type="cve" title="CVE-2026-25749"/>
      <reference href="https://bugzilla.redhat.com/2437843" id="2437843" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-5602.html" id="ALSA-2026:5602" type="self" title="ALSA-2026:5602"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="vim-enhanced" version="8.2.2637" release="23.el9_7.1" epoch="2" arch="s390x" src="vim-8.2.2637-23.el9_7.1.src.rpm">
          <filename>vim-enhanced-8.2.2637-23.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">57979eedcede030066dbcf46f7d14634e60816c8d439ec0ecb0b7249da295eed</sum>
        </package>
        <package name="vim-common" version="8.2.2637" release="23.el9_7.1" epoch="2" arch="s390x" src="vim-8.2.2637-23.el9_7.1.src.rpm">
          <filename>vim-common-8.2.2637-23.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">633658cb9e62ec6f9ffbd82fbe6cb59c0a695ab6bb030f425e73fcc86a7bec23</sum>
        </package>
        <package name="vim-X11" version="8.2.2637" release="23.el9_7.1" epoch="2" arch="s390x" src="vim-8.2.2637-23.el9_7.1.src.rpm">
          <filename>vim-X11-8.2.2637-23.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">bae7cd20b8739c00efe063ae3abbba09fae005d1f39b566ed441f569f1d51fff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5640</id>
    <title>Moderate: mysql:8.4 security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 11:55:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)
  * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5640" id="RHSA-2026:5640" type="rhsa" title="RHSA-2026:5640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21936" id="CVE-2026-21936" type="cve" title="CVE-2026-21936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21937" id="CVE-2026-21937" type="cve" title="CVE-2026-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21941" id="CVE-2026-21941" type="cve" title="CVE-2026-21941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21948" id="CVE-2026-21948" type="cve" title="CVE-2026-21948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21964" id="CVE-2026-21964" type="cve" title="CVE-2026-21964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21968" id="CVE-2026-21968" type="cve" title="CVE-2026-21968"/>
      <reference href="https://bugzilla.redhat.com/2431384" id="2431384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431385" id="2431385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431402" id="2431402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431409" id="2431409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431413" id="2431413" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431431" id="2431431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-5640.html" id="ALSA-2026:5640" type="self" title="ALSA-2026:5640"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="mysql" stream="8.4" version="9060020250318115828" context="8cf767d6" arch="s390x"/>
        <package name="mysql-errmsg" version="8.4.8" release="1.module_el9.7.0+219+aca48cd3" epoch="0" arch="noarch" src="mysql-8.4.8-1.module_el9.7.0+219+aca48cd3.src.rpm">
          <filename>mysql-errmsg-8.4.8-1.module_el9.7.0+219+aca48cd3.noarch.rpm</filename>
          <sum type="sha256">43b2e927250e941eda0c95183368842b966dcae63133c155c3ef362324e82b50</sum>
        </package>
        <package name="mysql" version="8.4.8" release="1.module_el9.7.0+219+aca48cd3" epoch="0" arch="s390x" src="mysql-8.4.8-1.module_el9.7.0+219+aca48cd3.src.rpm">
          <filename>mysql-8.4.8-1.module_el9.7.0+219+aca48cd3.s390x.rpm</filename>
          <sum type="sha256">5fe0dfed82fffd2bb51eb983f63cc25992307c81ad41983fa696c0dc17ae75a4</sum>
        </package>
        <package name="mysql-devel" version="8.4.8" release="1.module_el9.7.0+219+aca48cd3" epoch="0" arch="s390x" src="mysql-8.4.8-1.module_el9.7.0+219+aca48cd3.src.rpm">
          <filename>mysql-devel-8.4.8-1.module_el9.7.0+219+aca48cd3.s390x.rpm</filename>
          <sum type="sha256">65e17c77600d4403d2362662096a2092356afc3480a33c7d2dd2880a1f1209e4</sum>
        </package>
        <package name="mecab" version="0.996" release="3.module_el9.6.0+152+8cbce00c.4" epoch="0" arch="s390x" src="mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.src.rpm">
          <filename>mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm</filename>
          <sum type="sha256">69e976d54c4bc862ea946aa1957a4af06ba625136f6734651e78787b4180585a</sum>
        </package>
        <package name="mysql-test-data" version="8.4.8" release="1.module_el9.7.0+219+aca48cd3" epoch="0" arch="noarch" src="mysql-8.4.8-1.module_el9.7.0+219+aca48cd3.src.rpm">
          <filename>mysql-test-data-8.4.8-1.module_el9.7.0+219+aca48cd3.noarch.rpm</filename>
          <sum type="sha256">7f198cea09183f443e64a26121b6203a8fe55c9e6e8e82fdd9ab3a567d843589</sum>
        </package>
        <package name="mysql-common" version="8.4.8" release="1.module_el9.7.0+219+aca48cd3" epoch="0" arch="noarch" src="mysql-8.4.8-1.module_el9.7.0+219+aca48cd3.src.rpm">
          <filename>mysql-common-8.4.8-1.module_el9.7.0+219+aca48cd3.noarch.rpm</filename>
          <sum type="sha256">81a027ddbcfb8c0e798110bc79852f97c31d9934b416fae86a3b14b0a6046cc2</sum>
        </package>
        <package name="mysql-server" version="8.4.8" release="1.module_el9.7.0+219+aca48cd3" epoch="0" arch="s390x" src="mysql-8.4.8-1.module_el9.7.0+219+aca48cd3.src.rpm">
          <filename>mysql-server-8.4.8-1.module_el9.7.0+219+aca48cd3.s390x.rpm</filename>
          <sum type="sha256">87a81259ebe3dd893271e8cb1f60ec98e42954a34bcec1304391b6f24ddf2648</sum>
        </package>
        <package name="rapidjson-devel" version="1.1.0" release="19.module_el9.6.0+152+8cbce00c" epoch="0" arch="s390x" src="rapidjson-1.1.0-19.module_el9.6.0+152+8cbce00c.src.rpm">
          <filename>rapidjson-devel-1.1.0-19.module_el9.6.0+152+8cbce00c.s390x.rpm</filename>
          <sum type="sha256">8c0a757ea82924ecf340e621f29cb6d7322ebd996c0b7e05116c51486e2b6c37</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="24.module_el9.6.0+152+8cbce00c" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm</filename>
          <sum type="sha256">a6a291c26e1b08f26ceec3afe3bb4650cb21e203ce04cff2350db34cbd12e24d</sum>
        </package>
        <package name="mysql-libs" version="8.4.8" release="1.module_el9.7.0+219+aca48cd3" epoch="0" arch="s390x" src="mysql-8.4.8-1.module_el9.7.0+219+aca48cd3.src.rpm">
          <filename>mysql-libs-8.4.8-1.module_el9.7.0+219+aca48cd3.s390x.rpm</filename>
          <sum type="sha256">b1fe7cfdd1548e41de5a399560e0a16f5b19d9b7384845aed7c21cd6452e54d2</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="24.module_el9.6.0+152+8cbce00c" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-24.module_el9.6.0+152+8cbce00c.s390x.rpm</filename>
          <sum type="sha256">bad50cf06e6ea4327ddfa8063a98361e493a8fe7dcf921be55ba12177dac540e</sum>
        </package>
        <package name="mecab-devel" version="0.996" release="3.module_el9.6.0+152+8cbce00c.4" epoch="0" arch="s390x" src="mecab-0.996-3.module_el9.6.0+152+8cbce00c.4.src.rpm">
          <filename>mecab-devel-0.996-3.module_el9.6.0+152+8cbce00c.4.s390x.rpm</filename>
          <sum type="sha256">ce7c078f962fd614387a5a86f7b229eb57758d44e95f0f1ad2cd522019019b61</sum>
        </package>
        <package name="mysql-test" version="8.4.8" release="1.module_el9.7.0+219+aca48cd3" epoch="0" arch="s390x" src="mysql-8.4.8-1.module_el9.7.0+219+aca48cd3.src.rpm">
          <filename>mysql-test-8.4.8-1.module_el9.7.0+219+aca48cd3.s390x.rpm</filename>
          <sum type="sha256">f806b6448185efd5bcdd2c36b767f5275c9c6438210cda2570cdd86f6ab32f7b</sum>
        </package>
        <package name="rapidjson-doc" version="1.1.0" release="19.module_el9.6.0+152+8cbce00c" epoch="0" arch="noarch" src="rapidjson-1.1.0-19.module_el9.6.0+152+8cbce00c.src.rpm">
          <filename>rapidjson-doc-1.1.0-19.module_el9.6.0+152+8cbce00c.noarch.rpm</filename>
          <sum type="sha256">f8ffc9a3a68b1ff128217cd41887db70007c1f69467c915cb92a8c754102e0d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5930</id>
    <title>Important: firefox security update</title>
    <issued date="2026-03-26 00:00:00"/>
    <updated date="2026-03-30 11:00:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
  * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
  * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)
  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)
  * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
  * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)
  * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)
  * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
  * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
  * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)
  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
  * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
  * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)
  * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)
  * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
  * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
  * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)
  * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)
  * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)
  * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)
  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component (CVE-2026-4687)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5930" id="RHSA-2026:5930" type="rhsa" title="RHSA-2026:5930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4684" id="CVE-2026-4684" type="cve" title="CVE-2026-4684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4685" id="CVE-2026-4685" type="cve" title="CVE-2026-4685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4686" id="CVE-2026-4686" type="cve" title="CVE-2026-4686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4687" id="CVE-2026-4687" type="cve" title="CVE-2026-4687"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4688" id="CVE-2026-4688" type="cve" title="CVE-2026-4688"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4689" id="CVE-2026-4689" type="cve" title="CVE-2026-4689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4690" id="CVE-2026-4690" type="cve" title="CVE-2026-4690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4691" id="CVE-2026-4691" type="cve" title="CVE-2026-4691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4692" id="CVE-2026-4692" type="cve" title="CVE-2026-4692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4693" id="CVE-2026-4693" type="cve" title="CVE-2026-4693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4694" id="CVE-2026-4694" type="cve" title="CVE-2026-4694"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4695" id="CVE-2026-4695" type="cve" title="CVE-2026-4695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4696" id="CVE-2026-4696" type="cve" title="CVE-2026-4696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4697" id="CVE-2026-4697" type="cve" title="CVE-2026-4697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4698" id="CVE-2026-4698" type="cve" title="CVE-2026-4698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4699" id="CVE-2026-4699" type="cve" title="CVE-2026-4699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4700" id="CVE-2026-4700" type="cve" title="CVE-2026-4700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4701" id="CVE-2026-4701" type="cve" title="CVE-2026-4701"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4702" id="CVE-2026-4702" type="cve" title="CVE-2026-4702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4704" id="CVE-2026-4704" type="cve" title="CVE-2026-4704"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4705" id="CVE-2026-4705" type="cve" title="CVE-2026-4705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4706" id="CVE-2026-4706" type="cve" title="CVE-2026-4706"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4707" id="CVE-2026-4707" type="cve" title="CVE-2026-4707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4708" id="CVE-2026-4708" type="cve" title="CVE-2026-4708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4709" id="CVE-2026-4709" type="cve" title="CVE-2026-4709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4710" id="CVE-2026-4710" type="cve" title="CVE-2026-4710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4711" id="CVE-2026-4711" type="cve" title="CVE-2026-4711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4712" id="CVE-2026-4712" type="cve" title="CVE-2026-4712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4713" id="CVE-2026-4713" type="cve" title="CVE-2026-4713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4714" id="CVE-2026-4714" type="cve" title="CVE-2026-4714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4715" id="CVE-2026-4715" type="cve" title="CVE-2026-4715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4716" id="CVE-2026-4716" type="cve" title="CVE-2026-4716"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4717" id="CVE-2026-4717" type="cve" title="CVE-2026-4717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4718" id="CVE-2026-4718" type="cve" title="CVE-2026-4718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4719" id="CVE-2026-4719" type="cve" title="CVE-2026-4719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4720" id="CVE-2026-4720" type="cve" title="CVE-2026-4720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4721" id="CVE-2026-4721" type="cve" title="CVE-2026-4721"/>
      <reference href="https://bugzilla.redhat.com/2450710" id="2450710" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450711" id="2450711" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450712" id="2450712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450713" id="2450713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450714" id="2450714" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450715" id="2450715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450718" id="2450718" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450719" id="2450719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450720" id="2450720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450721" id="2450721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450722" id="2450722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450723" id="2450723" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450724" id="2450724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450725" id="2450725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450726" id="2450726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450727" id="2450727" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450728" id="2450728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450729" id="2450729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450730" id="2450730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450732" id="2450732" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450733" id="2450733" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450734" id="2450734" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450735" id="2450735" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450738" id="2450738" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450739" id="2450739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450740" id="2450740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450741" id="2450741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450742" id="2450742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450744" id="2450744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450746" id="2450746" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450747" id="2450747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450748" id="2450748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450751" id="2450751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450752" id="2450752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450755" id="2450755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450756" id="2450756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450757" id="2450757" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-5930.html" id="ALSA-2026:5930" type="self" title="ALSA-2026:5930"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="firefox" version="140.9.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.9.0-1.el9_7.alma.1.src.rpm">
          <filename>firefox-140.9.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">1c79b9efd14060b490b4e5d0aefd366e71bf0453f9af86d9e0c7ecd9134c8f98</sum>
        </package>
        <package name="firefox-x11" version="140.9.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.9.0-1.el9_7.alma.1.src.rpm">
          <filename>firefox-x11-140.9.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">ec2c029e05a06873ca7412558080c2029fe8df10c2bb6844ed7cd46e55fdaf18</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5942</id>
    <title>Important: golang security update</title>
    <issued date="2026-03-26 00:00:00"/>
    <updated date="2026-03-27 10:17:41"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.  

Security Fix(es):  

  * cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731)
  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5942" id="RHSA-2026:5942" type="rhsa" title="RHSA-2026:5942"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61731" id="CVE-2025-61731" type="cve" title="CVE-2025-61731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://bugzilla.redhat.com/2434433" id="2434433" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-5942.html" id="ALSA-2026:5942" type="self" title="ALSA-2026:5942"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="golang-race" version="1.25.8" release="1.el9_7" epoch="0" arch="s390x" src="golang-1.25.8-1.el9_7.src.rpm">
          <filename>golang-race-1.25.8-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">3aacd69a3d2aee0804aa89b1457993f5fc656646568299346325f57f2dc25438</sum>
        </package>
        <package name="golang-src" version="1.25.8" release="1.el9_7" epoch="0" arch="noarch" src="golang-1.25.8-1.el9_7.src.rpm">
          <filename>golang-src-1.25.8-1.el9_7.noarch.rpm</filename>
          <sum type="sha256">45a4c4bc4bafc9f3cc030f532a49bb2916cf525a2f90fccb9034a0bf674e380f</sum>
        </package>
        <package name="golang-misc" version="1.25.8" release="1.el9_7" epoch="0" arch="noarch" src="golang-1.25.8-1.el9_7.src.rpm">
          <filename>golang-misc-1.25.8-1.el9_7.noarch.rpm</filename>
          <sum type="sha256">5a5c777474a1afe08ff05fdba78bd9e029acb30f5f712ae99a1b70f0bc26f617</sum>
        </package>
        <package name="golang-tests" version="1.25.8" release="1.el9_7" epoch="0" arch="noarch" src="golang-1.25.8-1.el9_7.src.rpm">
          <filename>golang-tests-1.25.8-1.el9_7.noarch.rpm</filename>
          <sum type="sha256">8396ecbeb0978e795a5ebd4033fcb83709360f0802ba4b3b9ebe8bb782727fdb</sum>
        </package>
        <package name="golang-bin" version="1.25.8" release="1.el9_7" epoch="0" arch="s390x" src="golang-1.25.8-1.el9_7.src.rpm">
          <filename>golang-bin-1.25.8-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">a02c3a660bd8deb92031524287d879b1bb301d07c7ea4d24b32cb57a360bdf5d</sum>
        </package>
        <package name="golang-docs" version="1.25.8" release="1.el9_7" epoch="0" arch="noarch" src="golang-1.25.8-1.el9_7.src.rpm">
          <filename>golang-docs-1.25.8-1.el9_7.noarch.rpm</filename>
          <sum type="sha256">bcb2fec225ae078b804b886ab40ac56bd8ff2885fa27ceda5e0887a8624c81ca</sum>
        </package>
        <package name="golang" version="1.25.8" release="1.el9_7" epoch="0" arch="s390x" src="golang-1.25.8-1.el9_7.src.rpm">
          <filename>golang-1.25.8-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">cc770a6ee6d925931e560a464a5db75ad1761a22f6d763d9d00596cbfba12af1</sum>
        </package>
        <package name="go-toolset" version="1.25.8" release="1.el9_7" epoch="0" arch="s390x" src="golang-1.25.8-1.el9_7.src.rpm">
          <filename>go-toolset-1.25.8-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">e2baace2a5386ac2729333b4e170f23e5e0f6d1e162dbc10eeb680d5f43cc91c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6004</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-03-30 00:00:00"/>
    <updated date="2026-03-31 08:19:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path (CVE-2026-26965)
  * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline (CVE-2026-26955)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6004" id="RHSA-2026:6004" type="rhsa" title="RHSA-2026:6004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26955" id="CVE-2026-26955" type="cve" title="CVE-2026-26955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26965" id="CVE-2026-26965" type="cve" title="CVE-2026-26965"/>
      <reference href="https://bugzilla.redhat.com/2442959" id="2442959" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2443132" id="2443132" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6004.html" id="ALSA-2026:6004" type="self" title="ALSA-2026:6004"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="freerdp-libs" version="2.11.7" release="1.el9_7.3" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.3.src.rpm">
          <filename>freerdp-libs-2.11.7-1.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">0f6672bf6631c93ac207334fdb01bde213c7c980687ea989233e42cff762b64c</sum>
        </package>
        <package name="freerdp" version="2.11.7" release="1.el9_7.3" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.3.src.rpm">
          <filename>freerdp-2.11.7-1.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">c486e568f710ee001da192861aec4fbf97e643664c8ab0c39a01c904113d7272</sum>
        </package>
        <package name="libwinpr" version="2.11.7" release="1.el9_7.3" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.3.src.rpm">
          <filename>libwinpr-2.11.7-1.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">efcbf4da78f9d13e3a0a219bf5c5bd7cd35f0e7577236610fce6aa7d855f6b11</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6153</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-30 00:00:00"/>
    <updated date="2026-04-02 08:45:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem (CVE-2025-38180)
  * kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096)
  * kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure (CVE-2026-23144)
  * kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution (CVE-2026-23171)
  * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)
  * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209)
  * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
  * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6153" id="RHSA-2026:6153" type="rhsa" title="RHSA-2026:6153"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38180" id="CVE-2025-38180" type="cve" title="CVE-2025-38180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40096" id="CVE-2025-40096" type="cve" title="CVE-2025-40096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23144" id="CVE-2026-23144" type="cve" title="CVE-2026-23144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23171" id="CVE-2026-23171" type="cve" title="CVE-2026-23171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23191" id="CVE-2026-23191" type="cve" title="CVE-2026-23191"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23193" id="CVE-2026-23193" type="cve" title="CVE-2026-23193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23204" id="CVE-2026-23204" type="cve" title="CVE-2026-23204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23209" id="CVE-2026-23209" type="cve" title="CVE-2026-23209"/>
      <reference href="https://bugzilla.redhat.com/2376376" id="2376376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407333" id="2407333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439872" id="2439872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439886" id="2439886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439887" id="2439887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439900" id="2439900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439931" id="2439931" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439947" id="2439947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6153.html" id="ALSA-2026:6153" type="self" title="ALSA-2026:6153"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="kernel-devel" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.45.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">1ab691b6279b9e886318cc72698bc294f01dd60404f8197da4ea3f0cab5ca333</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.45.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">2416c552db09681cbc9f6a2b460d887fce49a7068cb34692916a14ea49d8ec6c</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.45.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">295eee6f3c396cf428155ec2be56d7d673d13d043b0255793adb7d9fd9c4a86c</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.45.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">51ee35bdc30cf1b987ce698d9f5b2bd289787990115917651e634cec54466fa4</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.45.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5bd17540f9c9e1a3b3a1da6d2e5ef5578fbcb4eaacfa796f0724d19471d9c028</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.45.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">68a66ff8548115f6bf2deb5210b3cb794b0c8d10940ee3836f7ea37bf07fa869</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.45.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">8096f250cc5774a73cb21189f647596401f2d778c2640bbd2847a5bc6f80158e</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.45.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">8bd02dcdf35f2352724c84e554f2d855da9fb52762a98571a630b83eda423046</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.45.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d5967823384cd39cbc8322f591ba7852aed927e4c6bf039c232d9d2a79fbf807</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.45.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">de771f75a9947bdb4e978eedb0ed38f1d70f693af3d6f8a9133d28d9a52fcd18</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.45.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">de8830084fdd3799a5a8fc2fba949be45a7dc63a6f77bae128d0a9372eb1fa9e</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.45.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">fe1ab945db403d0ca7260ca238f43bfd930f28457a36ae893333c40882f194d2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6188</id>
    <title>Important: thunderbird security update</title>
    <issued date="2026-03-30 00:00:00"/>
    <updated date="2026-04-02 08:18:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
  * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
  * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)
  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)
  * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
  * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)
  * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)
  * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
  * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
  * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)
  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
  * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
  * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)
  * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)
  * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
  * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
  * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)
  * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)
  * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)
  * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)
  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component (CVE-2026-4687)
  * thunderbird: Out of bounds read in IMAP parsing (CVE-2026-4371)
  * thunderbird: Spoofing issue in Thunderbird (CVE-2026-3889)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6188" id="RHSA-2026:6188" type="rhsa" title="RHSA-2026:6188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3889" id="CVE-2026-3889" type="cve" title="CVE-2026-3889"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4371" id="CVE-2026-4371" type="cve" title="CVE-2026-4371"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4684" id="CVE-2026-4684" type="cve" title="CVE-2026-4684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4685" id="CVE-2026-4685" type="cve" title="CVE-2026-4685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4686" id="CVE-2026-4686" type="cve" title="CVE-2026-4686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4687" id="CVE-2026-4687" type="cve" title="CVE-2026-4687"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4688" id="CVE-2026-4688" type="cve" title="CVE-2026-4688"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4689" id="CVE-2026-4689" type="cve" title="CVE-2026-4689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4690" id="CVE-2026-4690" type="cve" title="CVE-2026-4690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4691" id="CVE-2026-4691" type="cve" title="CVE-2026-4691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4692" id="CVE-2026-4692" type="cve" title="CVE-2026-4692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4693" id="CVE-2026-4693" type="cve" title="CVE-2026-4693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4694" id="CVE-2026-4694" type="cve" title="CVE-2026-4694"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4695" id="CVE-2026-4695" type="cve" title="CVE-2026-4695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4696" id="CVE-2026-4696" type="cve" title="CVE-2026-4696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4697" id="CVE-2026-4697" type="cve" title="CVE-2026-4697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4698" id="CVE-2026-4698" type="cve" title="CVE-2026-4698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4699" id="CVE-2026-4699" type="cve" title="CVE-2026-4699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4700" id="CVE-2026-4700" type="cve" title="CVE-2026-4700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4701" id="CVE-2026-4701" type="cve" title="CVE-2026-4701"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4702" id="CVE-2026-4702" type="cve" title="CVE-2026-4702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4704" id="CVE-2026-4704" type="cve" title="CVE-2026-4704"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4705" id="CVE-2026-4705" type="cve" title="CVE-2026-4705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4706" id="CVE-2026-4706" type="cve" title="CVE-2026-4706"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4707" id="CVE-2026-4707" type="cve" title="CVE-2026-4707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4708" id="CVE-2026-4708" type="cve" title="CVE-2026-4708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4709" id="CVE-2026-4709" type="cve" title="CVE-2026-4709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4710" id="CVE-2026-4710" type="cve" title="CVE-2026-4710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4711" id="CVE-2026-4711" type="cve" title="CVE-2026-4711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4712" id="CVE-2026-4712" type="cve" title="CVE-2026-4712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4713" id="CVE-2026-4713" type="cve" title="CVE-2026-4713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4714" id="CVE-2026-4714" type="cve" title="CVE-2026-4714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4715" id="CVE-2026-4715" type="cve" title="CVE-2026-4715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4716" id="CVE-2026-4716" type="cve" title="CVE-2026-4716"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4717" id="CVE-2026-4717" type="cve" title="CVE-2026-4717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4718" id="CVE-2026-4718" type="cve" title="CVE-2026-4718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4719" id="CVE-2026-4719" type="cve" title="CVE-2026-4719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4720" id="CVE-2026-4720" type="cve" title="CVE-2026-4720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4721" id="CVE-2026-4721" type="cve" title="CVE-2026-4721"/>
      <reference href="https://bugzilla.redhat.com/2450710" id="2450710" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450711" id="2450711" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450712" id="2450712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450713" id="2450713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450714" id="2450714" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450715" id="2450715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450718" id="2450718" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450719" id="2450719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450720" id="2450720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450721" id="2450721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450722" id="2450722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450723" id="2450723" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450724" id="2450724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450725" id="2450725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450726" id="2450726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450727" id="2450727" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450728" id="2450728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450729" id="2450729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450730" id="2450730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450732" id="2450732" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450733" id="2450733" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450734" id="2450734" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450735" id="2450735" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450738" id="2450738" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450739" id="2450739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450740" id="2450740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450741" id="2450741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450742" id="2450742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450744" id="2450744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450746" id="2450746" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450747" id="2450747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450748" id="2450748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450751" id="2450751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450752" id="2450752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450755" id="2450755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450756" id="2450756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450757" id="2450757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451001" id="2451001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451006" id="2451006" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6188.html" id="ALSA-2026:6188" type="self" title="ALSA-2026:6188"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="thunderbird" version="140.9.0" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="thunderbird-140.9.0-1.el9_7.alma.1.src.rpm">
          <filename>thunderbird-140.9.0-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">34824f0156968eb87c15c4472eff1c5feec03c620a6fb03dd56a51bbfe6558f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6266</id>
    <title>Moderate: libxslt security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-01 09:19:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxslt security update</summary>
    <description>libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.   

Security Fix(es):  

  * libxslt: Processing web content may disclose sensitive information (CVE-2023-40403)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6266" id="RHSA-2026:6266" type="rhsa" title="RHSA-2026:6266"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40403" id="CVE-2023-40403" type="cve" title="CVE-2023-40403"/>
      <reference href="https://bugzilla.redhat.com/2349766" id="2349766" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6266.html" id="ALSA-2026:6266" type="self" title="ALSA-2026:6266"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libxslt-devel" version="1.1.34" release="14.el9_7.1" epoch="0" arch="s390x" src="libxslt-1.1.34-14.el9_7.1.src.rpm">
          <filename>libxslt-devel-1.1.34-14.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">3a49c2d76c7d09af3cb4ebc90cced841ae0cb7baf35aa4e1d2e182fcd7b2ac6c</sum>
        </package>
        <package name="libxslt" version="1.1.34" release="14.el9_7.1" epoch="0" arch="s390x" src="libxslt-1.1.34-14.el9_7.1.src.rpm">
          <filename>libxslt-1.1.34-14.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">79c54e2350779bc5ecdf437d57a3b27567ca31205be97b74f7720759a1fc5dab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6285</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-01 09:05:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6285" id="RHSA-2026:6285" type="rhsa" title="RHSA-2026:6285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6285.html" id="ALSA-2026:6285" type="self" title="ALSA-2026:6285"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3.12-devel" version="3.12.12" release="4.el9_7.2" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.2.src.rpm">
          <filename>python3.12-devel-3.12.12-4.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">0fc0c5f739d6da3d65facbdd00c174d47d2784dc99de4adc28b623468ce8637c</sum>
        </package>
        <package name="python3.12" version="3.12.12" release="4.el9_7.2" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.2.src.rpm">
          <filename>python3.12-3.12.12-4.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">2313fec974ec0f6d2e7b303dee1cff3850bcb11cfe8a00f849ca11586f4afece</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.12" release="4.el9_7.2" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.2.src.rpm">
          <filename>python3.12-tkinter-3.12.12-4.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">7e2272d693362fe16a6ec8d5ada46122105c08ea66edfe8b682320104596ae93</sum>
        </package>
        <package name="python3.12-libs" version="3.12.12" release="4.el9_7.2" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.2.src.rpm">
          <filename>python3.12-libs-3.12.12-4.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">fd4e6894922255436a261dc3f7d3121159666842ee23975ee27ce4cf4692858f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6286</id>
    <title>Important: python3.11 security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-01 09:15:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6286" id="RHSA-2026:6286" type="rhsa" title="RHSA-2026:6286"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6286.html" id="ALSA-2026:6286" type="self" title="ALSA-2026:6286"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python3.11-tkinter" version="3.11.13" release="5.2.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.2.el9_7.src.rpm">
          <filename>python3.11-tkinter-3.11.13-5.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">0d6409f46bc8b893f94760105a940d87bd5e318ce0fd69fedc979926274b6fbc</sum>
        </package>
        <package name="python3.11-libs" version="3.11.13" release="5.2.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.2.el9_7.src.rpm">
          <filename>python3.11-libs-3.11.13-5.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">19d8375377e98864cc95d7021857b680265d3c5d6c58e281f21f2e8ce75a1187</sum>
        </package>
        <package name="python3.11" version="3.11.13" release="5.2.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.2.el9_7.src.rpm">
          <filename>python3.11-3.11.13-5.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">5d79815861f61d5e3e2f2b9a0fb515dd2c9671332d60c56fb26f5437abad78ea</sum>
        </package>
        <package name="python3.11-devel" version="3.11.13" release="5.2.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.2.el9_7.src.rpm">
          <filename>python3.11-devel-3.11.13-5.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">dce5de2178517496f95bb9393e31d9ed088d927d9992fe3e6f77176085c6d7f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6300</id>
    <title>Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-03 17:13:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920)
  * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082)
  * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085)
  * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921)
  * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083)
  * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922)
  * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6300" id="RHSA-2026:6300" type="rhsa" title="RHSA-2026:6300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2920" id="CVE-2026-2920" type="cve" title="CVE-2026-2920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2921" id="CVE-2026-2921" type="cve" title="CVE-2026-2921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2922" id="CVE-2026-2922" type="cve" title="CVE-2026-2922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2923" id="CVE-2026-2923" type="cve" title="CVE-2026-2923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3082" id="CVE-2026-3082" type="cve" title="CVE-2026-3082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3083" id="CVE-2026-3083" type="cve" title="CVE-2026-3083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3085" id="CVE-2026-3085" type="cve" title="CVE-2026-3085"/>
      <reference href="https://bugzilla.redhat.com/2447490" id="2447490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447492" id="2447492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447495" id="2447495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447496" id="2447496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447498" id="2447498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447500" id="2447500" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447503" id="2447503" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6300.html" id="ALSA-2026:6300" type="self" title="ALSA-2026:6300"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="gstreamer1-plugins-good-gtk" version="1.22.12" release="5.el9_7" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.22.12-5.el9_7.src.rpm">
          <filename>gstreamer1-plugins-good-gtk-1.22.12-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">5f385e7ff51ecfa05c9832e8025346a2d580cf7e5f79eb2af9af8982891bf610</sum>
        </package>
        <package name="gstreamer1-plugins-base" version="1.22.12" release="5.el9_7" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.22.12-5.el9_7.src.rpm">
          <filename>gstreamer1-plugins-base-1.22.12-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">7ab3eb3be7222625d42d91aef244d83c147489d51aff0b1460945be091cedf92</sum>
        </package>
        <package name="gstreamer1-plugins-bad-free" version="1.22.12" release="5.el9_7" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.12-5.el9_7.src.rpm">
          <filename>gstreamer1-plugins-bad-free-1.22.12-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">ac72d3ea0b8ec0e0dd23ff3c26e6708559a0c2579ee672917186791426574f8b</sum>
        </package>
        <package name="gstreamer1-plugins-base-tools" version="1.22.12" release="5.el9_7" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.22.12-5.el9_7.src.rpm">
          <filename>gstreamer1-plugins-base-tools-1.22.12-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">c82fdd463252e9f4e939b53ae4262adf60c9ae8a4ed33f1dcad20d2529d365b7</sum>
        </package>
        <package name="gstreamer1-plugins-base-devel" version="1.22.12" release="5.el9_7" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.22.12-5.el9_7.src.rpm">
          <filename>gstreamer1-plugins-base-devel-1.22.12-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">dcba42389c9dcc1928b940509a556674f4877ecce44f61f2a24ab942955debc5</sum>
        </package>
        <package name="gstreamer1-plugins-bad-free-libs" version="1.22.12" release="5.el9_7" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.12-5.el9_7.src.rpm">
          <filename>gstreamer1-plugins-bad-free-libs-1.22.12-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">f9e342829b908636d2fd797f1798300e76264849cdd2114ad61e66a0337f5c9a</sum>
        </package>
        <package name="gstreamer1-plugins-good" version="1.22.12" release="5.el9_7" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.22.12-5.el9_7.src.rpm">
          <filename>gstreamer1-plugins-good-1.22.12-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">ff218a851d65a04c9d9b83ac3f29907494cf46561e0c6df007c215af53268378</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6301</id>
    <title>Important: squid security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-01 09:27:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.  

Security Fix(es):  

  * squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526)
  * Squid: Squid: Denial of Service via crafted ICP traffic (CVE-2026-32748)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6301" id="RHSA-2026:6301" type="rhsa" title="RHSA-2026:6301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32748" id="CVE-2026-32748" type="cve" title="CVE-2026-32748"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33526" id="CVE-2026-33526" type="cve" title="CVE-2026-33526"/>
      <reference href="https://bugzilla.redhat.com/2451574" id="2451574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451577" id="2451577" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6301.html" id="ALSA-2026:6301" type="self" title="ALSA-2026:6301"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="squid" version="5.5" release="22.el9_7.4" epoch="7" arch="s390x" src="squid-5.5-22.el9_7.4.src.rpm">
          <filename>squid-5.5-22.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">efec082a45a40d289c0a256213ccf14a7b7e050bd73fe546c1de662e51286b0d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6340</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-04-01 00:00:00"/>
    <updated date="2026-04-02 09:09:04"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP heap-use-after-free (CVE-2026-22856)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22854)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22852)
  * freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow (CVE-2026-23732)
  * freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation (CVE-2026-24676)
  * freerdp: FreeRDP has a heap-use-after-free in video_timer (CVE-2026-24491)
  * freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() (CVE-2026-23948)
  * freerdp: FreeRDP has a Heap-use-after-free in play_thread (CVE-2026-24684)
  * freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb (CVE-2026-24681)
  * freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event (CVE-2026-24683)
  * freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface (CVE-2026-24679)
  * freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface (CVE-2026-24675)
  * freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages (CVE-2026-31806)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6340" id="RHSA-2026:6340" type="rhsa" title="RHSA-2026:6340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22852" id="CVE-2026-22852" type="cve" title="CVE-2026-22852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22854" id="CVE-2026-22854" type="cve" title="CVE-2026-22854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22856" id="CVE-2026-22856" type="cve" title="CVE-2026-22856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23732" id="CVE-2026-23732" type="cve" title="CVE-2026-23732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23948" id="CVE-2026-23948" type="cve" title="CVE-2026-23948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24491" id="CVE-2026-24491" type="cve" title="CVE-2026-24491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24675" id="CVE-2026-24675" type="cve" title="CVE-2026-24675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24676" id="CVE-2026-24676" type="cve" title="CVE-2026-24676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24679" id="CVE-2026-24679" type="cve" title="CVE-2026-24679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24681" id="CVE-2026-24681" type="cve" title="CVE-2026-24681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24683" id="CVE-2026-24683" type="cve" title="CVE-2026-24683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24684" id="CVE-2026-24684" type="cve" title="CVE-2026-24684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31806" id="CVE-2026-31806" type="cve" title="CVE-2026-31806"/>
      <reference href="https://bugzilla.redhat.com/2429650" id="2429650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429652" id="2429652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429654" id="2429654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430881" id="2430881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438201" id="2438201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438202" id="2438202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438207" id="2438207" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438208" id="2438208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438210" id="2438210" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438216" id="2438216" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438217" id="2438217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438221" id="2438221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447376" id="2447376" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6340.html" id="ALSA-2026:6340" type="self" title="ALSA-2026:6340"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="freerdp" version="2.11.7" release="1.el9_7.5" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.5.src.rpm">
          <filename>freerdp-2.11.7-1.el9_7.5.s390x.rpm</filename>
          <sum type="sha256">35697b4f7105dd1a63d9211874d97b3cfe94288152c48ed12ea4967f03d61f9e</sum>
        </package>
        <package name="libwinpr" version="2.11.7" release="1.el9_7.5" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.5.src.rpm">
          <filename>libwinpr-2.11.7-1.el9_7.5.s390x.rpm</filename>
          <sum type="sha256">624af36594e870ad10f2307d316a2596f58248c2ced7cc39005fa10d7dcb8f0e</sum>
        </package>
        <package name="freerdp-libs" version="2.11.7" release="1.el9_7.5" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.5.src.rpm">
          <filename>freerdp-libs-2.11.7-1.el9_7.5.s390x.rpm</filename>
          <sum type="sha256">898cb4227e82f34b9699c02944b61e40601ddf8e3910f63e9b3cf0398e90ad4b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6382</id>
    <title>Important: grafana security update</title>
    <issued date="2026-04-01 00:00:00"/>
    <updated date="2026-04-02 09:12:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6382" id="RHSA-2026:6382" type="rhsa" title="RHSA-2026:6382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6382.html" id="ALSA-2026:6382" type="self" title="ALSA-2026:6382"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="grafana" version="10.2.6" release="19.el9_7" epoch="0" arch="s390x" src="grafana-10.2.6-19.el9_7.src.rpm">
          <filename>grafana-10.2.6-19.el9_7.s390x.rpm</filename>
          <sum type="sha256">dad277a76ae76c478276ec2e914a2d28860f113255fa8c2b0b756c225cd40c9b</sum>
        </package>
        <package name="grafana-selinux" version="10.2.6" release="19.el9_7" epoch="0" arch="s390x" src="grafana-10.2.6-19.el9_7.src.rpm">
          <filename>grafana-selinux-10.2.6-19.el9_7.s390x.rpm</filename>
          <sum type="sha256">fec6c6b766dfa8226aa289e4571de4a7a7857a5292979290146f26f00049edc3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6383</id>
    <title>Important: grafana-pcp security update</title>
    <issued date="2026-04-01 00:00:00"/>
    <updated date="2026-04-02 09:15:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.  

Security Fix(es):  

  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6383" id="RHSA-2026:6383" type="rhsa" title="RHSA-2026:6383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6383.html" id="ALSA-2026:6383" type="self" title="ALSA-2026:6383"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="grafana-pcp" version="5.1.1" release="13.el9_7" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-13.el9_7.src.rpm">
          <filename>grafana-pcp-5.1.1-13.el9_7.s390x.rpm</filename>
          <sum type="sha256">f726d8e82786aee11c21b9f5bb94703c79a94c4a19e67613177416d555b25804</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6390</id>
    <title>Moderate: rsync security update</title>
    <issued date="2026-04-01 00:00:00"/>
    <updated date="2026-04-02 09:23:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rsync security update</summary>
    <description>The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.  

Security Fix(es):  

  * rsync: Rsync: Out of bounds array access via negative index (CVE-2025-10158)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6390" id="RHSA-2026:6390" type="rhsa" title="RHSA-2026:6390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10158" id="CVE-2025-10158" type="cve" title="CVE-2025-10158"/>
      <reference href="https://bugzilla.redhat.com/2415637" id="2415637" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6390.html" id="ALSA-2026:6390" type="self" title="ALSA-2026:6390"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="rsync-rrsync" version="3.2.5" release="3.el9_7.2" epoch="0" arch="noarch" src="rsync-3.2.5-3.el9_7.2.src.rpm">
          <filename>rsync-rrsync-3.2.5-3.el9_7.2.noarch.rpm</filename>
          <sum type="sha256">20e6827622e2407f70397002101336f2142c419bdfe5782a1049359d24b4f3d5</sum>
        </package>
        <package name="rsync-daemon" version="3.2.5" release="3.el9_7.2" epoch="0" arch="noarch" src="rsync-3.2.5-3.el9_7.2.src.rpm">
          <filename>rsync-daemon-3.2.5-3.el9_7.2.noarch.rpm</filename>
          <sum type="sha256">a5609c71037630d4e81495e31dd61408a6fbe7f4791a36590b17e112d3eab1b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6462</id>
    <title>Important: openssh security update</title>
    <issued date="2026-04-02 00:00:00"/>
    <updated date="2026-04-09 08:38:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  

Security Fix(es):  

  * openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables (CVE-2026-3497)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6462" id="RHSA-2026:6462" type="rhsa" title="RHSA-2026:6462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3497" id="CVE-2026-3497" type="cve" title="CVE-2026-3497"/>
      <reference href="https://bugzilla.redhat.com/2447085" id="2447085" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6462.html" id="ALSA-2026:6462" type="self" title="ALSA-2026:6462"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="pam_ssh_agent_auth" version="0.10.4" release="5.48.el9_7.alma.1" epoch="0" arch="s390x" src="openssh-8.7p1-48.el9_7.alma.1.src.rpm">
          <filename>pam_ssh_agent_auth-0.10.4-5.48.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">396addbc72cb262cee2c126a0fcca8b15c402dffd467638b54820156f241327c</sum>
        </package>
        <package name="openssh-askpass" version="8.7p1" release="48.el9_7.alma.1" epoch="0" arch="s390x" src="openssh-8.7p1-48.el9_7.alma.1.src.rpm">
          <filename>openssh-askpass-8.7p1-48.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">65c963d891e7e79753c201e9ad7d149e88498b8bd88c42b62e922bd7b9f92182</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6570</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-04-06 00:00:00"/>
    <updated date="2026-04-15 08:21:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109)
  * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111)
  * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210)
  * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6570" id="RHSA-2026:6570" type="rhsa" title="RHSA-2026:6570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38109" id="CVE-2025-38109" type="cve" title="CVE-2025-38109"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23111" id="CVE-2026-23111" type="cve" title="CVE-2026-23111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23210" id="CVE-2026-23210" type="cve" title="CVE-2026-23210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23231" id="CVE-2026-23231" type="cve" title="CVE-2026-23231"/>
      <reference href="https://bugzilla.redhat.com/2376101" id="2376101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439687" id="2439687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439895" id="2439895" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444376" id="2444376" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6570.html" id="ALSA-2026:6570" type="self" title="ALSA-2026:6570"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="rv" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.47.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">144542cca74baa0332232fd117dc599be85c1d0dfd4880ed481d91f4b1c2586c</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.47.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">192e8b4a2d25a4287ba2b735c9bb28793743366eb21e8bdc2d4d5ffb3454ff1c</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.47.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">462a99bbd58968853d08ca22a1f3300af7a30c6f171abc8f7c643a918578a4a5</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.47.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">64897f10f4ec67a6df5fa39e0ec8ecfc5cee61c6168a1c230a32b1f1c8d3faf2</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.47.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">6b839c5cf546b383dad62ab0e36157d4d16b06db3ede097b8ab298dcfc11e0c4</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.47.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">94ad38f1b6b988808f47cbe07e0d4d78bffc94c8b638907ad79fc5c67916490b</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.47.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">9fd9b7eb117bf7a67f9b69c507d2d3fb890f1a1987672236921d6daa075c0d6f</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.47.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">c503c92a015dc2e641410e13f13a22a108db25e923dd5022a6d835f8d92f1a27</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.47.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">f331cd3a1db7ee123f3e212a8511dbb74acffd23af40275aa1f23dc56e067d04</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.47.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">f75a2b9cb9bcbb0da4116b17ea5b42429d363b06b9f391b7420bd9e428b570a0</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.47.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">fb9263b69b6a58ce823b41f9ef56afe15be46a04f21821b563962bc815fca76d</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.47.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">fe554b6436302648bf756999669b4dfdf5dc52ca8e75221875fe39f366de6a8a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6621</id>
    <title>Moderate: crun security update</title>
    <issued date="2026-04-06 00:00:00"/>
    <updated date="2026-04-06 08:42:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>crun security update</summary>
    <description>crun is a OCI runtime  

Security Fix(es):  

  * crun: crun: Privilege escalation due to incorrect parsing of the `--user` option (CVE-2026-30892)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6621" id="RHSA-2026:6621" type="rhsa" title="RHSA-2026:6621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-30892" id="CVE-2026-30892" type="cve" title="CVE-2026-30892"/>
      <reference href="https://bugzilla.redhat.com/2451576" id="2451576" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6621.html" id="ALSA-2026:6621" type="self" title="ALSA-2026:6621"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="crun" version="1.27" release="1.el9_7" epoch="0" arch="s390x" src="crun-1.27-1.el9_7.src.rpm">
          <filename>crun-1.27-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">b61a56f9a4a53a8cc97abc6a04cbb285aa193a38aa7897c9de199dbe0a4fab52</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6766</id>
    <title>Important: python3.9 security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-09 19:44:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6766" id="RHSA-2026:6766" type="rhsa" title="RHSA-2026:6766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6766.html" id="ALSA-2026:6766" type="self" title="ALSA-2026:6766"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="python-unversioned-command" version="3.9.25" release="3.el9_7.2" epoch="0" arch="noarch" src="python3.9-3.9.25-3.el9_7.2.src.rpm">
          <filename>python-unversioned-command-3.9.25-3.el9_7.2.noarch.rpm</filename>
          <sum type="sha256">2cf74a7249e41fac31789c663ad5c35ecf474b413c7548205b08142ecc62cbb5</sum>
        </package>
        <package name="python3-tkinter" version="3.9.25" release="3.el9_7.2" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.2.src.rpm">
          <filename>python3-tkinter-3.9.25-3.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">40b90a12f344c4acaf9dfc33033cbfdb6f7b83e7d4c27310504b502386878870</sum>
        </package>
        <package name="python3-devel" version="3.9.25" release="3.el9_7.2" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.2.src.rpm">
          <filename>python3-devel-3.9.25-3.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">5a2b07b827f9af3ee52586ea82664f80e7e3a8d104bd66fe9638cb99aa639558</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6923</id>
    <title>Important: nginx:1.24 security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-09 19:55:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nginx:1.24 security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647)
  * NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654)
  * NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784)
  * NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6923" id="RHSA-2026:6923" type="rhsa" title="RHSA-2026:6923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27651" id="CVE-2026-27651" type="cve" title="CVE-2026-27651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27654" id="CVE-2026-27654" type="cve" title="CVE-2026-27654"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27784" id="CVE-2026-27784" type="cve" title="CVE-2026-27784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32647" id="CVE-2026-32647" type="cve" title="CVE-2026-32647"/>
      <reference href="https://bugzilla.redhat.com/2449598" id="2449598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450776" id="2450776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450785" id="2450785" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450791" id="2450791" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6923.html" id="ALSA-2026:6923" type="self" title="ALSA-2026:6923"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="nginx" stream="1.24" version="9070020260408035010" context="8cf767d6" arch="s390x"/>
        <package name="nginx-mod-http-perl" version="1.24.0" release="5.module_el9.7.0+220+47ec8b91.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">2d2da32a8e1e9c10f830d9993ae1ed3f1b35ac5a10027c4f26dbdc2a1ec54bd5</sum>
        </package>
        <package name="nginx-mod-mail" version="1.24.0" release="5.module_el9.7.0+220+47ec8b91.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">4e67e3d580bf818bdade5f26c7e31872d0d02d577e53ee9343020fedf707cd2d</sum>
        </package>
        <package name="nginx" version="1.24.0" release="5.module_el9.7.0+220+47ec8b91.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.src.rpm">
          <filename>nginx-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">55beee2e8d717a1a53e8fe2c64665a3b1cdb353089e1eece81f9b8b3f8867584</sum>
        </package>
        <package name="nginx-mod-stream" version="1.24.0" release="5.module_el9.7.0+220+47ec8b91.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">589cee8f743d3191be9ee3dc5d5a7041b46658cb64b2f1a5ab57e8014399c123</sum>
        </package>
        <package name="nginx-core" version="1.24.0" release="5.module_el9.7.0+220+47ec8b91.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.src.rpm">
          <filename>nginx-core-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">6055974a1075c2cf87725048814ec1fbd3ecb24113f72a4bf00cf6e3819df8a8</sum>
        </package>
        <package name="nginx-mod-devel" version="1.24.0" release="5.module_el9.7.0+220+47ec8b91.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">7dc63337c579f44718c46fac3a9dc7b2898959667935dee57d10230f6d63b27f</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.24.0" release="5.module_el9.7.0+220+47ec8b91.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">9cc311b49d9c94a9bd09237df831207622485892bfce33e0b0352b8f54bae84f</sum>
        </package>
        <package name="nginx-all-modules" version="1.24.0" release="5.module_el9.7.0+220+47ec8b91.2.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.src.rpm">
          <filename>nginx-all-modules-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">b799c8ef26d44cfd0262668c4eb7f4175b41eaa8627ceaeb3d6a091a41252c3b</sum>
        </package>
        <package name="nginx-filesystem" version="1.24.0" release="5.module_el9.7.0+220+47ec8b91.2.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.src.rpm">
          <filename>nginx-filesystem-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">b8d466c7bada98dc15166388e2494cf943dacbd9983af9157f1b1745b862687c</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.24.0" release="5.module_el9.7.0+220+47ec8b91.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.24.0-5.module_el9.7.0+220+47ec8b91.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">fa6f658812972a23dd66637b3b97dcac99b96d48e5cee9f9f4804994bb75483b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7002</id>
    <title>Important: nginx security update</title>
    <issued date="2026-04-08 00:00:00"/>
    <updated date="2026-04-15 08:21:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647)
  * NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654)
  * NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784)
  * NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7002" id="RHSA-2026:7002" type="rhsa" title="RHSA-2026:7002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27651" id="CVE-2026-27651" type="cve" title="CVE-2026-27651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27654" id="CVE-2026-27654" type="cve" title="CVE-2026-27654"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27784" id="CVE-2026-27784" type="cve" title="CVE-2026-27784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32647" id="CVE-2026-32647" type="cve" title="CVE-2026-32647"/>
      <reference href="https://bugzilla.redhat.com/2449598" id="2449598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450776" id="2450776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450785" id="2450785" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450791" id="2450791" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7002.html" id="ALSA-2026:7002" type="self" title="ALSA-2026:7002"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="nginx-filesystem" version="1.20.1" release="24.el9_7.2.alma.1" epoch="2" arch="noarch" src="nginx-1.20.1-24.el9_7.2.alma.1.src.rpm">
          <filename>nginx-filesystem-1.20.1-24.el9_7.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">277879fa5db7744b71ccc6211c52813232a7f193f9a4170810dd06f48de4433c</sum>
        </package>
        <package name="nginx-mod-mail" version="1.20.1" release="24.el9_7.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.2.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.20.1-24.el9_7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">48c5c1f5a1428492f87dc327a4c394ffd8a3bf1e6433d5208f5a63e7c05d5f7d</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.20.1" release="24.el9_7.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.2.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.20.1-24.el9_7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">5478ed0ff2f61a7181b431238e754b95f3e691cff920524d3fb8f2ab03e7368e</sum>
        </package>
        <package name="nginx-mod-stream" version="1.20.1" release="24.el9_7.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.2.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.20.1-24.el9_7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">6eac28e23254cc0e02ca134d8c0670576b2b1e022f2acc711dd56b93deb62a9d</sum>
        </package>
        <package name="nginx-core" version="1.20.1" release="24.el9_7.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.2.alma.1.src.rpm">
          <filename>nginx-core-1.20.1-24.el9_7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">956d1c3352d8319f6db4e3c60f67c3439134796adccab9b382ea4711ed228979</sum>
        </package>
        <package name="nginx-all-modules" version="1.20.1" release="24.el9_7.2.alma.1" epoch="2" arch="noarch" src="nginx-1.20.1-24.el9_7.2.alma.1.src.rpm">
          <filename>nginx-all-modules-1.20.1-24.el9_7.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">ad5e29e77afa744fc5598b84076ae5e965f895cd4a29cabfb09c94e1bfa3a033</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.20.1" release="24.el9_7.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.2.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.20.1-24.el9_7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">aeaee9767991b3faec3e39c53d8ba40c630a7325f9d7cc652007e8cc666ee714</sum>
        </package>
        <package name="nginx" version="1.20.1" release="24.el9_7.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.2.alma.1.src.rpm">
          <filename>nginx-1.20.1-24.el9_7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">dfd79fc74742300377ebbe838b3b7698a2e8862465ead702c531fa512b50823c</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.20.1" release="24.el9_7.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.2.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.20.1-24.el9_7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">e573ade34b4e66d391766d104d478e6e45c6147e7e2efc94f390619f40c7d7b1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7259</id>
    <title>Important: git-lfs security update</title>
    <issued date="2026-04-09 00:00:00"/>
    <updated date="2026-04-15 08:21:23"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7259" id="RHSA-2026:7259" type="rhsa" title="RHSA-2026:7259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7259.html" id="ALSA-2026:7259" type="self" title="ALSA-2026:7259"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="git-lfs" version="3.6.1" release="8.el9_7" epoch="0" arch="s390x" src="git-lfs-3.6.1-8.el9_7.src.rpm">
          <filename>git-lfs-3.6.1-8.el9_7.s390x.rpm</filename>
          <sum type="sha256">cacb39fc97f3e923ccab751d7b28cc5e3b037c99c3b6069fadb7694b8e15c118</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7343</id>
    <title>Important: nginx:1.26 security update</title>
    <issued date="2026-04-09 00:00:00"/>
    <updated date="2026-04-15 08:12:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nginx:1.26 security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647)
  * NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654)
  * NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784)
  * NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7343" id="RHSA-2026:7343" type="rhsa" title="RHSA-2026:7343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27651" id="CVE-2026-27651" type="cve" title="CVE-2026-27651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27654" id="CVE-2026-27654" type="cve" title="CVE-2026-27654"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27784" id="CVE-2026-27784" type="cve" title="CVE-2026-27784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32647" id="CVE-2026-32647" type="cve" title="CVE-2026-32647"/>
      <reference href="https://bugzilla.redhat.com/2449598" id="2449598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450776" id="2450776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450785" id="2450785" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450791" id="2450791" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7343.html" id="ALSA-2026:7343" type="self" title="ALSA-2026:7343"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="nginx" stream="1.26" version="9070020260410072346" context="8cf767d6" arch="s390x"/>
        <package name="nginx-mod-http-perl" version="1.26.3" release="2.module_el9.7.0+223+9cd7031b.1" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+223+9cd7031b.1.src.rpm">
          <filename>nginx-mod-http-perl-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm</filename>
          <sum type="sha256">0034f246d34c086bce45c1883d3f21391976a6595bce52c1cf79cea8d2cccb58</sum>
        </package>
        <package name="nginx-core" version="1.26.3" release="2.module_el9.7.0+223+9cd7031b.1" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+223+9cd7031b.1.src.rpm">
          <filename>nginx-core-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm</filename>
          <sum type="sha256">211ad2dc4ae9fc280c35ebff3f24fcc55fad108a87a6b1d7a337b783795fc5fc</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.26.3" release="2.module_el9.7.0+223+9cd7031b.1" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+223+9cd7031b.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm</filename>
          <sum type="sha256">571f256562caa9bc1d52c5dd71b24beaa1e331b111c5e0d07e9f2aac3026f142</sum>
        </package>
        <package name="nginx-mod-stream" version="1.26.3" release="2.module_el9.7.0+223+9cd7031b.1" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+223+9cd7031b.1.src.rpm">
          <filename>nginx-mod-stream-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm</filename>
          <sum type="sha256">84be6c2865258e7d20478b6542acf3a9f4f86532f42428392071e5b948146b58</sum>
        </package>
        <package name="nginx-all-modules" version="1.26.3" release="2.module_el9.7.0+223+9cd7031b.1" epoch="2" arch="noarch" src="nginx-1.26.3-2.module_el9.7.0+223+9cd7031b.1.src.rpm">
          <filename>nginx-all-modules-1.26.3-2.module_el9.7.0+223+9cd7031b.1.noarch.rpm</filename>
          <sum type="sha256">8625be1bb61ff199185d32d10533f2c6becc0bd595d4c9e5b89698cf231f92f3</sum>
        </package>
        <package name="nginx-mod-mail" version="1.26.3" release="2.module_el9.7.0+223+9cd7031b.1" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+223+9cd7031b.1.src.rpm">
          <filename>nginx-mod-mail-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm</filename>
          <sum type="sha256">bdc98c0c4d48bf0a062818fb138602a311b1daf41bfe2cd669d2d788f76a3ba9</sum>
        </package>
        <package name="nginx" version="1.26.3" release="2.module_el9.7.0+223+9cd7031b.1" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+223+9cd7031b.1.src.rpm">
          <filename>nginx-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm</filename>
          <sum type="sha256">c8675fd9142844529e2800724479bb59188df8cbeae2ecd73df45f3f09066987</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.26.3" release="2.module_el9.7.0+223+9cd7031b.1" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+223+9cd7031b.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm</filename>
          <sum type="sha256">e2ee05d5f108bf4d4ef5d529b1ea65bb06e97fbde4a42a0521158176101ee3b1</sum>
        </package>
        <package name="nginx-mod-devel" version="1.26.3" release="2.module_el9.7.0+223+9cd7031b.1" epoch="2" arch="s390x" src="nginx-1.26.3-2.module_el9.7.0+223+9cd7031b.1.src.rpm">
          <filename>nginx-mod-devel-1.26.3-2.module_el9.7.0+223+9cd7031b.1.s390x.rpm</filename>
          <sum type="sha256">f3531a5277dddccca2574e70cfb39a8ac08abb4269418da44df2182790ba0ab0</sum>
        </package>
        <package name="nginx-filesystem" version="1.26.3" release="2.module_el9.7.0+223+9cd7031b.1" epoch="2" arch="noarch" src="nginx-1.26.3-2.module_el9.7.0+223+9cd7031b.1.src.rpm">
          <filename>nginx-filesystem-1.26.3-2.module_el9.7.0+223+9cd7031b.1.noarch.rpm</filename>
          <sum type="sha256">f700a99a7d3c141ce36c826a6f190696bca3ca5f2cd132a61ef28dc660424e96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7350</id>
    <title>Important: nodejs:24 security update</title>
    <issued date="2026-04-09 00:00:00"/>
    <updated date="2026-04-15 08:09:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:24 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Nodejs denial of service (CVE-2026-21637)
  * brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion (CVE-2026-25547)
  * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)
  * undici: Undici: Denial of Service due to uncontrolled resource consumption (CVE-2026-2581)
  * undici: Undici: HTTP header injection and request smuggling vulnerability (CVE-2026-1527)
  * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression (CVE-2026-1526)
  * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter (CVE-2026-2229)
  * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers (CVE-2026-1525)
  * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)
  * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)
  * Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing (CVE-2026-21712)
  * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)
  * Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read restrictions (CVE-2026-21715)
  * nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix. (CVE-2026-21716)
  * Node.js: Node.js: Unauthorized inter-process communication due to missing Unix Domain Socket permission checks (CVE-2026-21711)
  * Node.js: Node.js: Information disclosure via timing oracle in HMAC verification (CVE-2026-21713)
  * Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames (CVE-2026-21714)
  * nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisions (CVE-2026-21717)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7350" id="RHSA-2026:7350" type="rhsa" title="RHSA-2026:7350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1525" id="CVE-2026-1525" type="cve" title="CVE-2026-1525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1526" id="CVE-2026-1526" type="cve" title="CVE-2026-1526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1527" id="CVE-2026-1527" type="cve" title="CVE-2026-1527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1528" id="CVE-2026-1528" type="cve" title="CVE-2026-1528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21637" id="CVE-2026-21637" type="cve" title="CVE-2026-21637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21710" id="CVE-2026-21710" type="cve" title="CVE-2026-21710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21711" id="CVE-2026-21711" type="cve" title="CVE-2026-21711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21712" id="CVE-2026-21712" type="cve" title="CVE-2026-21712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21713" id="CVE-2026-21713" type="cve" title="CVE-2026-21713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21714" id="CVE-2026-21714" type="cve" title="CVE-2026-21714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21715" id="CVE-2026-21715" type="cve" title="CVE-2026-21715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21716" id="CVE-2026-21716" type="cve" title="CVE-2026-21716"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21717" id="CVE-2026-21717" type="cve" title="CVE-2026-21717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2229" id="CVE-2026-2229" type="cve" title="CVE-2026-2229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25547" id="CVE-2026-25547" type="cve" title="CVE-2026-25547"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2581" id="CVE-2026-2581" type="cve" title="CVE-2026-2581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26996" id="CVE-2026-26996" type="cve" title="CVE-2026-26996"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27135" id="CVE-2026-27135" type="cve" title="CVE-2026-27135"/>
      <reference href="https://bugzilla.redhat.com/2431340" id="2431340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436942" id="2436942" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2441268" id="2441268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447140" id="2447140" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447141" id="2447141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447142" id="2447142" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447143" id="2447143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447144" id="2447144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447145" id="2447145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448754" id="2448754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453037" id="2453037" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453151" id="2453151" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453152" id="2453152" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453157" id="2453157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453158" id="2453158" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453160" id="2453160" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453161" id="2453161" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453162" id="2453162" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7350.html" id="ALSA-2026:7350" type="self" title="ALSA-2026:7350"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="nodejs" stream="24" version="9070020260217131521" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-docs" version="24.14.1" release="2.module_el9.7.0+222+ef1c61e1" epoch="1" arch="noarch" src="nodejs-24.14.1-2.module_el9.7.0+222+ef1c61e1.src.rpm">
          <filename>nodejs-docs-24.14.1-2.module_el9.7.0+222+ef1c61e1.noarch.rpm</filename>
          <sum type="sha256">290f01c220560280e8b6663ba1032bb090c4263df500da7c79062005df793c75</sum>
        </package>
        <package name="nodejs-devel" version="24.14.1" release="2.module_el9.7.0+222+ef1c61e1" epoch="1" arch="s390x" src="nodejs-24.14.1-2.module_el9.7.0+222+ef1c61e1.src.rpm">
          <filename>nodejs-devel-24.14.1-2.module_el9.7.0+222+ef1c61e1.s390x.rpm</filename>
          <sum type="sha256">477fe73250d25cc3dc378dd8482094cf7b38a4bcfd94c5d898dfe3e21c6fc4e6</sum>
        </package>
        <package name="nodejs-libs" version="24.14.1" release="2.module_el9.7.0+222+ef1c61e1" epoch="1" arch="s390x" src="nodejs-24.14.1-2.module_el9.7.0+222+ef1c61e1.src.rpm">
          <filename>nodejs-libs-24.14.1-2.module_el9.7.0+222+ef1c61e1.s390x.rpm</filename>
          <sum type="sha256">4a1e966d058662d150f8962e53f56967f32fe00c118b9bcca9735f12f8a80627</sum>
        </package>
        <package name="v8-13.6-devel" version="13.6.233.17" release="1.24.14.1.2.module_el9.7.0+222+ef1c61e1" epoch="3" arch="s390x" src="nodejs-24.14.1-2.module_el9.7.0+222+ef1c61e1.src.rpm">
          <filename>v8-13.6-devel-13.6.233.17-1.24.14.1.2.module_el9.7.0+222+ef1c61e1.s390x.rpm</filename>
          <sum type="sha256">6145d44aaf4217c78ee5dac342e2666424f116c6cb69701e171c91af1d1b406f</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.3" release="3.module_el9.7.0+209+ecf6523e" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.3-3.module_el9.7.0+209+ecf6523e.src.rpm">
          <filename>nodejs-nodemon-3.0.3-3.module_el9.7.0+209+ecf6523e.noarch.rpm</filename>
          <sum type="sha256">6688ca82e36c7f78fe80655131c4a7fad6d4c7b9c851130cb6202a27b946c979</sum>
        </package>
        <package name="nodejs-full-i18n" version="24.14.1" release="2.module_el9.7.0+222+ef1c61e1" epoch="1" arch="s390x" src="nodejs-24.14.1-2.module_el9.7.0+222+ef1c61e1.src.rpm">
          <filename>nodejs-full-i18n-24.14.1-2.module_el9.7.0+222+ef1c61e1.s390x.rpm</filename>
          <sum type="sha256">8f4970a84fd1190abfd95c2faf7c8e61b6ed0e2e159abb9dd847cc48de878c81</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="6.module_el9.7.0+198+8bf605ba" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el9.7.0+198+8bf605ba.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-6.module_el9.7.0+198+8bf605ba.noarch.rpm</filename>
          <sum type="sha256">97b592d61e7cdad2e8509964064ddbff27be4f5aa478b78c4438ac2fd0d42bb1</sum>
        </package>
        <package name="nodejs" version="24.14.1" release="2.module_el9.7.0+222+ef1c61e1" epoch="1" arch="s390x" src="nodejs-24.14.1-2.module_el9.7.0+222+ef1c61e1.src.rpm">
          <filename>nodejs-24.14.1-2.module_el9.7.0+222+ef1c61e1.s390x.rpm</filename>
          <sum type="sha256">a81216ec5d47e8c144765cbc41845ebe93bdfbbb85ee54ca65344e0497403be9</sum>
        </package>
        <package name="npm" version="11.11.0" release="1.24.14.1.2.module_el9.7.0+222+ef1c61e1" epoch="1" arch="noarch" src="nodejs-24.14.1-2.module_el9.7.0+222+ef1c61e1.src.rpm">
          <filename>npm-11.11.0-1.24.14.1.2.module_el9.7.0+222+ef1c61e1.noarch.rpm</filename>
          <sum type="sha256">d17496ca3682a8e6122b905a795b96f1a7ffd63f051fb6b5be46e8191f0e03ae</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="6.module_el9.7.0+209+ecf6523e" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.src.rpm">
          <filename>nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm</filename>
          <sum type="sha256">e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7384</id>
    <title>Critical: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection</title>
    <issued date="2026-04-10 00:00:00"/>
    <updated date="2026-04-15 08:06:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>cockpit: Unauthenticated remote code execution due to SSH command-line argument injection</summary>
    <description>Cockpit enables users to administer GNU/Linux servers using a web browser. It  
offers network configuration, log inspection, diagnostic reports, SELinux  
troubleshooting, interactive command-line sessions, and more.  

Security Fix(es):  

  * cockpit: ws: be more explicit when handling hostnames on cli (CVE-2026-4631)


For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE page(s)  
listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7384" id="RHSA-2026:7384" type="rhsa" title="RHSA-2026:7384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4631" id="CVE-2026-4631" type="cve" title="CVE-2026-4631"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7384.html" id="ALSA-2026:7384" type="self" title="ALSA-2026:7384"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="cockpit-storaged" version="344" release="2.el9_7" epoch="0" arch="noarch" src="cockpit-344-2.el9_7.src.rpm">
          <filename>cockpit-storaged-344-2.el9_7.noarch.rpm</filename>
          <sum type="sha256">0c9b09373a2cf6803bc493ad471ec3a0d5e03cb01e571b4046e2daaf255195b2</sum>
        </package>
        <package name="cockpit-packagekit" version="344" release="2.el9_7" epoch="0" arch="noarch" src="cockpit-344-2.el9_7.src.rpm">
          <filename>cockpit-packagekit-344-2.el9_7.noarch.rpm</filename>
          <sum type="sha256">1ef1686e9430eb02e35f06d182d13aa3a421ee0a8388cd25f9a0e2d6d91e4bae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7671</id>
    <title>Important: firefox security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-15 08:01:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)
  * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731)
  * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7671" id="RHSA-2026:7671" type="rhsa" title="RHSA-2026:7671"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33416" id="CVE-2026-33416" type="cve" title="CVE-2026-33416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33636" id="CVE-2026-33636" type="cve" title="CVE-2026-33636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5731" id="CVE-2026-5731" type="cve" title="CVE-2026-5731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5732" id="CVE-2026-5732" type="cve" title="CVE-2026-5732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5734" id="CVE-2026-5734" type="cve" title="CVE-2026-5734"/>
      <reference href="https://bugzilla.redhat.com/2451805" id="2451805" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451819" id="2451819" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455897" id="2455897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455901" id="2455901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455908" id="2455908" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7671.html" id="ALSA-2026:7671" type="self" title="ALSA-2026:7671"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="firefox-x11" version="140.9.1" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.9.1-1.el9_7.alma.1.src.rpm">
          <filename>firefox-x11-140.9.1-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">2c49998846d970973a3455280811a863f29025bfd941406c926158d5468313bf</sum>
        </package>
        <package name="firefox" version="140.9.1" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="firefox-140.9.1-1.el9_7.alma.1.src.rpm">
          <filename>firefox-140.9.1-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">f4e14d639792fb985a32ad155091f740be836e3aa7eefa5ededf19a080cb4852</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7679</id>
    <title>Important: perl-XML-Parser security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-15 08:00:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-XML-Parser security update</summary>
    <description>This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's expat library. Each call to one of the parsing methods creates a new instance of XML::Parser::Expat which is then used to parse the document. Expat options may be provided when the XML::Parser object is created. These options are then passed on to the Expat object on each parse call. They can also be given as extra arguments to the parse methods, in which case they override options given at XML::Parser creation time.  

Security Fix(es):  

  * perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files (CVE-2006-10003)
  * perl-xml-parser: XML::Parser for Perl: Heap corruption and denial of service from crafted XML input (CVE-2006-10002)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7679" id="RHSA-2026:7679" type="rhsa" title="RHSA-2026:7679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2006-10002" id="CVE-2006-10002" type="cve" title="CVE-2006-10002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2006-10003" id="CVE-2006-10003" type="cve" title="CVE-2006-10003"/>
      <reference href="https://bugzilla.redhat.com/2448999" id="2448999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2449001" id="2449001" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7679.html" id="ALSA-2026:7679" type="self" title="ALSA-2026:7679"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="perl-XML-Parser" version="2.46" release="9.1.el9_7" epoch="0" arch="s390x" src="perl-XML-Parser-2.46-9.1.el9_7.src.rpm">
          <filename>perl-XML-Parser-2.46-9.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">9de859369abe06c25674a138c34f9c27f9c18a734133f26895bec4077edd2867</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7896</id>
    <title>Important: nodejs:20 security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-15 07:58:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)
  * minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions (CVE-2026-27904)
  * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)
  * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7896" id="RHSA-2026:7896" type="rhsa" title="RHSA-2026:7896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21710" id="CVE-2026-21710" type="cve" title="CVE-2026-21710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26996" id="CVE-2026-26996" type="cve" title="CVE-2026-26996"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27135" id="CVE-2026-27135" type="cve" title="CVE-2026-27135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27904" id="CVE-2026-27904" type="cve" title="CVE-2026-27904"/>
      <reference href="https://bugzilla.redhat.com/2441268" id="2441268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442922" id="2442922" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448754" id="2448754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453151" id="2453151" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7896.html" id="ALSA-2026:7896" type="self" title="ALSA-2026:7896"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <module name="nodejs" stream="20" version="9050020241113054853" context="8cf767d6" arch="s390x"/>
        <package name="nodejs-docs" version="20.20.2" release="1.module_el9.7.0+224+0af7cc6b" epoch="1" arch="noarch" src="nodejs-20.20.2-1.module_el9.7.0+224+0af7cc6b.src.rpm">
          <filename>nodejs-docs-20.20.2-1.module_el9.7.0+224+0af7cc6b.noarch.rpm</filename>
          <sum type="sha256">314f155c9da69d62425f24a2d2fac67bcaa649b9c23fc6cb01870e3ba1d9f489</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el9.5.0+125+8dc38870" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el9.5.0+125+8dc38870.noarch.rpm</filename>
          <sum type="sha256">572b82ee164b85ffef41f974897332716b428e341e262a4ccdd71a9c87312648</sum>
        </package>
        <package name="npm" version="10.8.2" release="1.20.20.2.1.module_el9.7.0+226+88d36870" epoch="1" arch="s390x" src="nodejs-20.20.2-1.module_el9.7.0+226+88d36870.src.rpm">
          <filename>npm-10.8.2-1.20.20.2.1.module_el9.7.0+226+88d36870.s390x.rpm</filename>
          <sum type="sha256">668080c617f8a3c1dd46624252e80d01bbca90689d82f0bac0abe8377ed6c366</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="6.module_el9.7.0+226+88d36870" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el9.7.0+226+88d36870.src.rpm">
          <filename>nodejs-packaging-2021.06-6.module_el9.7.0+226+88d36870.noarch.rpm</filename>
          <sum type="sha256">9ffbd61248997549fd001f5063043eb12602b6f2d1536abbf1f7e32520b402e7</sum>
        </package>
        <package name="nodejs-devel" version="20.20.2" release="1.module_el9.7.0+224+0af7cc6b" epoch="1" arch="s390x" src="nodejs-20.20.2-1.module_el9.7.0+224+0af7cc6b.src.rpm">
          <filename>nodejs-devel-20.20.2-1.module_el9.7.0+224+0af7cc6b.s390x.rpm</filename>
          <sum type="sha256">b8fb668f900167be84487f1316848f99bf9d19176a9768e4e32acbcd33e7e1d1</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="6.module_el9.7.0+226+88d36870" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el9.7.0+226+88d36870.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-6.module_el9.7.0+226+88d36870.noarch.rpm</filename>
          <sum type="sha256">c18bda74e3d85c8b2f96722b89e8b886d82685c1b71bf3d3c7a308d400dbd165</sum>
        </package>
        <package name="nodejs" version="20.20.2" release="1.module_el9.7.0+226+88d36870" epoch="1" arch="s390x" src="nodejs-20.20.2-1.module_el9.7.0+226+88d36870.src.rpm">
          <filename>nodejs-20.20.2-1.module_el9.7.0+226+88d36870.s390x.rpm</filename>
          <sum type="sha256">e7cc723a8bea7cf5881f03243c396e28d1e2aeb0a51c15682a06949bc959365b</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.20.2" release="1.module_el9.7.0+224+0af7cc6b" epoch="1" arch="s390x" src="nodejs-20.20.2-1.module_el9.7.0+224+0af7cc6b.src.rpm">
          <filename>nodejs-full-i18n-20.20.2-1.module_el9.7.0+224+0af7cc6b.s390x.rpm</filename>
          <sum type="sha256">ebb0d78fd50cdb77b0416ea36c32931a6b616fc89312417cd2817e231394732c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7915</id>
    <title>Important: bind9.18 security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-15 08:47:41"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.18 security update</summary>
    <description>BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  

Security Fix(es):  

  * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7915" id="RHSA-2026:7915" type="rhsa" title="RHSA-2026:7915"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1519" id="CVE-2026-1519" type="cve" title="CVE-2026-1519"/>
      <reference href="https://bugzilla.redhat.com/2451305" id="2451305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7915.html" id="ALSA-2026:7915" type="self" title="ALSA-2026:7915"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="bind9.18-dnssec-utils" version="9.18.29" release="5.el9_7.4" epoch="32" arch="s390x" src="bind9.18-9.18.29-5.el9_7.4.src.rpm">
          <filename>bind9.18-dnssec-utils-9.18.29-5.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">55039b08f0be5b68e18664e7adaea9780d7cd9b255e8ada0bddfebfabb681b22</sum>
        </package>
        <package name="bind9.18-chroot" version="9.18.29" release="5.el9_7.4" epoch="32" arch="s390x" src="bind9.18-9.18.29-5.el9_7.4.src.rpm">
          <filename>bind9.18-chroot-9.18.29-5.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">62ba7fde89b7eba9d2b072c294356ff11f6a482682035d49bd3176f104083e16</sum>
        </package>
        <package name="bind9.18-utils" version="9.18.29" release="5.el9_7.4" epoch="32" arch="s390x" src="bind9.18-9.18.29-5.el9_7.4.src.rpm">
          <filename>bind9.18-utils-9.18.29-5.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">6ef03db7f774251924f7e81834f24ec631c0a1ea6a29ad72efa6f058d278f51f</sum>
        </package>
        <package name="bind9.18" version="9.18.29" release="5.el9_7.4" epoch="32" arch="s390x" src="bind9.18-9.18.29-5.el9_7.4.src.rpm">
          <filename>bind9.18-9.18.29-5.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">91920ed2e1bff6b25dde8648238f94960db9f80e9148d757e2c4ee5b271f1aeb</sum>
        </package>
        <package name="bind9.18-libs" version="9.18.29" release="5.el9_7.4" epoch="32" arch="s390x" src="bind9.18-9.18.29-5.el9_7.4.src.rpm">
          <filename>bind9.18-libs-9.18.29-5.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">baebefba10e7a367b5826ee922abcf8bc317c4de585e8cfc256752dada784174</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8075</id>
    <title>Important: bind security update</title>
    <issued date="2026-04-14 00:00:00"/>
    <updated date="2026-04-15 08:24:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8075" id="RHSA-2026:8075" type="rhsa" title="RHSA-2026:8075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1519" id="CVE-2026-1519" type="cve" title="CVE-2026-1519"/>
      <reference href="https://bugzilla.redhat.com/2451305" id="2451305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8075.html" id="ALSA-2026:8075" type="self" title="ALSA-2026:8075"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="bind-dnssec-doc" version="9.16.23" release="34.el9_7.2" epoch="32" arch="noarch" src="bind-9.16.23-34.el9_7.2.src.rpm">
          <filename>bind-dnssec-doc-9.16.23-34.el9_7.2.noarch.rpm</filename>
          <sum type="sha256">1b0dccf2f36b3e7e37897d3bda8ff53a99ae63f5909e9ca3de1a5e8a44f9328a</sum>
        </package>
        <package name="bind-chroot" version="9.16.23" release="34.el9_7.2" epoch="32" arch="s390x" src="bind-9.16.23-34.el9_7.2.src.rpm">
          <filename>bind-chroot-9.16.23-34.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">23b3ae3973c760e0f72f6e7e2f555875923ac835bc39f5bf09a038665487750f</sum>
        </package>
        <package name="python3-bind" version="9.16.23" release="34.el9_7.2" epoch="32" arch="noarch" src="bind-9.16.23-34.el9_7.2.src.rpm">
          <filename>python3-bind-9.16.23-34.el9_7.2.noarch.rpm</filename>
          <sum type="sha256">4311c398764c90d88216f3cca4cf1499b1c6cf8d37bb86a3355b4024186bef5f</sum>
        </package>
        <package name="bind-license" version="9.16.23" release="34.el9_7.2" epoch="32" arch="noarch" src="bind-9.16.23-34.el9_7.2.src.rpm">
          <filename>bind-license-9.16.23-34.el9_7.2.noarch.rpm</filename>
          <sum type="sha256">4e5041c5bb714e338831f746aa89bcdefb8dabb9dfa3e2caa2041e4ac6253b21</sum>
        </package>
        <package name="bind-libs" version="9.16.23" release="34.el9_7.2" epoch="32" arch="s390x" src="bind-9.16.23-34.el9_7.2.src.rpm">
          <filename>bind-libs-9.16.23-34.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">67c4844039f6bd0d72499ecad1d9ac50843aa282d7e8a85a66757d76692d4cc9</sum>
        </package>
        <package name="bind-utils" version="9.16.23" release="34.el9_7.2" epoch="32" arch="s390x" src="bind-9.16.23-34.el9_7.2.src.rpm">
          <filename>bind-utils-9.16.23-34.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">78dcd6916bf1fc813b87475ad1ad8befdc43520258ac84029c8fcd46bbf54641</sum>
        </package>
        <package name="bind-dnssec-utils" version="9.16.23" release="34.el9_7.2" epoch="32" arch="s390x" src="bind-9.16.23-34.el9_7.2.src.rpm">
          <filename>bind-dnssec-utils-9.16.23-34.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">8351f148ed2489bac76a5cef205c9fe49aaaddaf9d926184b7fd6a7db751df42</sum>
        </package>
        <package name="bind" version="9.16.23" release="34.el9_7.2" epoch="32" arch="s390x" src="bind-9.16.23-34.el9_7.2.src.rpm">
          <filename>bind-9.16.23-34.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">ce18b06dd5671630424ee96b8c9405fe53157841cdc86a79c7525df0ce0a1d1c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8259</id>
    <title>Important: vim security update</title>
    <issued date="2026-04-15 00:00:00"/>
    <updated date="2026-04-15 10:37:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin (CVE-2026-28417)
  * vim: Vim: Denial of service and information disclosure via crafted swap file (CVE-2026-28421)
  * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8259" id="RHSA-2026:8259" type="rhsa" title="RHSA-2026:8259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28417" id="CVE-2026-28417" type="cve" title="CVE-2026-28417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28421" id="CVE-2026-28421" type="cve" title="CVE-2026-28421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33412" id="CVE-2026-33412" type="cve" title="CVE-2026-33412"/>
      <reference href="https://bugzilla.redhat.com/2443455" id="2443455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2443474" id="2443474" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450907" id="2450907" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8259.html" id="ALSA-2026:8259" type="self" title="ALSA-2026:8259"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="vim-common" version="8.2.2637" release="23.el9_7.2" epoch="2" arch="s390x" src="vim-8.2.2637-23.el9_7.2.src.rpm">
          <filename>vim-common-8.2.2637-23.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">6f0063b887b5a228594c2cf5a123510b031dfe786c36c5a1b32da7cd3f1c3e7c</sum>
        </package>
        <package name="vim-enhanced" version="8.2.2637" release="23.el9_7.2" epoch="2" arch="s390x" src="vim-8.2.2637-23.el9_7.2.src.rpm">
          <filename>vim-enhanced-8.2.2637-23.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">723274c91fe996b5631ac9e76ba5cd31be3dddbc32d01dd874c34e28f169f7fa</sum>
        </package>
        <package name="vim-X11" version="8.2.2637" release="23.el9_7.2" epoch="2" arch="s390x" src="vim-8.2.2637-23.el9_7.2.src.rpm">
          <filename>vim-X11-8.2.2637-23.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">95f747a2051274bf0fbedf6912fd4c929a3352602b5d2985a00f8e2d84526994</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8457</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-17 12:08:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data (CVE-2026-33984)
  * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages (CVE-2026-33983)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8457" id="RHSA-2026:8457" type="rhsa" title="RHSA-2026:8457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33983" id="CVE-2026-33983" type="cve" title="CVE-2026-33983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33984" id="CVE-2026-33984" type="cve" title="CVE-2026-33984"/>
      <reference href="https://bugzilla.redhat.com/2453219" id="2453219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453220" id="2453220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8457.html" id="ALSA-2026:8457" type="self" title="ALSA-2026:8457"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libwinpr" version="2.11.7" release="1.el9_7.6" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.6.src.rpm">
          <filename>libwinpr-2.11.7-1.el9_7.6.s390x.rpm</filename>
          <sum type="sha256">0fbd8257ac36bccf81a9e1ce611e6e0f60da99b8af875a557d833f62ca41bb7d</sum>
        </package>
        <package name="freerdp" version="2.11.7" release="1.el9_7.6" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.6.src.rpm">
          <filename>freerdp-2.11.7-1.el9_7.6.s390x.rpm</filename>
          <sum type="sha256">95e5b0ea04a739ae8e143094d50776bf2dae2eb6b09d888a5759c17572a9914b</sum>
        </package>
        <package name="freerdp-libs" version="2.11.7" release="1.el9_7.6" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.6.src.rpm">
          <filename>freerdp-libs-2.11.7-1.el9_7.6.s390x.rpm</filename>
          <sum type="sha256">9f04406e975f16fc18f6ffc81968fd6189f156d188d64fd433071845cb291c09</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8459</id>
    <title>Important: thunderbird security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-17 12:06:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)
  * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731)
  * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8459" id="RHSA-2026:8459" type="rhsa" title="RHSA-2026:8459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33416" id="CVE-2026-33416" type="cve" title="CVE-2026-33416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33636" id="CVE-2026-33636" type="cve" title="CVE-2026-33636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5731" id="CVE-2026-5731" type="cve" title="CVE-2026-5731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5732" id="CVE-2026-5732" type="cve" title="CVE-2026-5732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5734" id="CVE-2026-5734" type="cve" title="CVE-2026-5734"/>
      <reference href="https://bugzilla.redhat.com/2451805" id="2451805" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451819" id="2451819" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455897" id="2455897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455901" id="2455901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455908" id="2455908" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8459.html" id="ALSA-2026:8459" type="self" title="ALSA-2026:8459"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="thunderbird" version="140.9.1" release="1.el9_7.alma.1" epoch="0" arch="s390x" src="thunderbird-140.9.1-1.el9_7.alma.1.src.rpm">
          <filename>thunderbird-140.9.1-1.el9_7.alma.1.s390x.rpm</filename>
          <sum type="sha256">b38d6c5baba1abc801c214fd1fc6f95cbb6ddef150c39e6d103454a91ef3133f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8469</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-17 11:12:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.126 and .NET Runtime 8.0.26.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8469" id="RHSA-2026:8469" type="rhsa" title="RHSA-2026:8469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8469.html" id="ALSA-2026:8469" type="self" title="ALSA-2026:8469"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.126" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el9_7.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.126-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">01a0162a059d66cb6cadac2490f14315e71840075de6a66b80c9371dbb01b4f4</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.26" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el9_7.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.26-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">373927ad47ce965a748d8d816cebb34a9933cb4ff8df7d574dc7c6b3fcc71429</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.26" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el9_7.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.26-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">3eb5257e1b5f78df44fd16732d810a6e5a33238034e61785acff9aea0a151f78</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.26" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el9_7.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.26-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">7f5a88b2bce4ec551e04274804bd0513bfc45d9b5c9115de7b2eb602139da178</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.26" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el9_7.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.26-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">95c2f4dfbead28cd201b1380e8f684ef315112e5f639d914f90aca5fb0b831df</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.126" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el9_7.src.rpm">
          <filename>dotnet-templates-8.0-8.0.126-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">c047305941c34015305791cd58898f1a6c1b6100f4685fa163e481b5b788a42c</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.26" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el9_7.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.26-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">cc0b6afc9eed44ff61deef84480b16be9ebe9309c1267c1268243c28ec4a81be</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.126" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el9_7.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.126-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d083700c1e1f73ddaed8201309b30af7af6470bd7054f92cb444f8fe4f7eadb9</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.26" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el9_7.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.26-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d597e516e3193c8be7ea5fbe1a6c41873079c55a72feeb041437eeeb28165396</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.26" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el9_7.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.26-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">e512202a5634c81258d0bb0481b0fedc424c03535a158e19ac1fd620db5cc9f1</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.26" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el9_7.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.26-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ec4a7d7ae9c692d19198e57469b8a5754d573ad23f5e210a192dcb2c8cbc0632</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8510</id>
    <title>Important: libarchive security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-17 11:10:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing (CVE-2026-4424)
  * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing (CVE-2026-5121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8510" id="RHSA-2026:8510" type="rhsa" title="RHSA-2026:8510"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4424" id="CVE-2026-4424" type="cve" title="CVE-2026-4424"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5121" id="CVE-2026-5121" type="cve" title="CVE-2026-5121"/>
      <reference href="https://bugzilla.redhat.com/2449006" id="2449006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452945" id="2452945" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8510.html" id="ALSA-2026:8510" type="self" title="ALSA-2026:8510"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="libarchive-devel" version="3.5.3" release="9.el9_7" epoch="0" arch="s390x" src="libarchive-3.5.3-9.el9_7.src.rpm">
          <filename>libarchive-devel-3.5.3-9.el9_7.s390x.rpm</filename>
          <sum type="sha256">14f520e396f9c68999c70a5528b5d749f7d118e8803819b721debbf639a5455d</sum>
        </package>
        <package name="bsdtar" version="3.5.3" release="9.el9_7" epoch="0" arch="s390x" src="libarchive-3.5.3-9.el9_7.src.rpm">
          <filename>bsdtar-3.5.3-9.el9_7.s390x.rpm</filename>
          <sum type="sha256">3cdce0c54711dd89efc8acf65a347e034691e911f82d22d13f5680ef623b5b96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8841</id>
    <title>Important: go-rpm-macros security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-20 08:33:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-rpm-macros security update</summary>
    <description>This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only.  

Security Fix(es):  

  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8841" id="RHSA-2026:8841" type="rhsa" title="RHSA-2026:8841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8841.html" id="ALSA-2026:8841" type="self" title="ALSA-2026:8841"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="go-srpm-macros" version="3.6.0" release="14.el9_7" epoch="0" arch="noarch" src="go-rpm-macros-3.6.0-14.el9_7.src.rpm">
          <filename>go-srpm-macros-3.6.0-14.el9_7.noarch.rpm</filename>
          <sum type="sha256">2e5ba21f9c0f50fe601b839339e1d20f3ae28a07c960d4f26280a8d906e41f22</sum>
        </package>
        <package name="go-filesystem" version="3.6.0" release="14.el9_7" epoch="0" arch="s390x" src="go-rpm-macros-3.6.0-14.el9_7.src.rpm">
          <filename>go-filesystem-3.6.0-14.el9_7.s390x.rpm</filename>
          <sum type="sha256">93a9fe004ef744ce12501f1c99b93ae9c2dd970794d9a91945e69cb27223b36b</sum>
        </package>
        <package name="go-rpm-macros" version="3.6.0" release="14.el9_7" epoch="0" arch="s390x" src="go-rpm-macros-3.6.0-14.el9_7.src.rpm">
          <filename>go-rpm-macros-3.6.0-14.el9_7.s390x.rpm</filename>
          <sum type="sha256">99aac16ba53919c36d1893fd9ab61ba21988282ca3571d8bd315ea7b6cfb79b5</sum>
        </package>
        <package name="go-rpm-templates" version="3.6.0" release="14.el9_7" epoch="0" arch="noarch" src="go-rpm-macros-3.6.0-14.el9_7.src.rpm">
          <filename>go-rpm-templates-3.6.0-14.el9_7.noarch.rpm</filename>
          <sum type="sha256">f10c8cb303a924da9f14f077ac0cea7d926403d627791adda19250e5371dd888</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8859</id>
    <title>Important: giflib security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-30 07:34:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>giflib security update</summary>
    <description>giflib is a library for reading and writing gif images.  

Security Fix(es):  

  * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8859" id="RHSA-2026:8859" type="rhsa" title="RHSA-2026:8859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23868" id="CVE-2026-23868" type="cve" title="CVE-2026-23868"/>
      <reference href="https://bugzilla.redhat.com/2446207" id="2446207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8859.html" id="ALSA-2026:8859" type="self" title="ALSA-2026:8859"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="giflib" version="5.2.1" release="9.el9_7.1" epoch="0" arch="s390x" src="giflib-5.2.1-9.el9_7.1.src.rpm">
          <filename>giflib-5.2.1-9.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">de775611d51533c55940a9369f14cd53c01fbf11b9f270eebaf9dee38cda22fd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8888</id>
    <title>Important: openexr security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-20 08:30:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openexr security update</summary>
    <description>OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.  

Security Fix(es):  

  * openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing (CVE-2026-27622)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8888" id="RHSA-2026:8888" type="rhsa" title="RHSA-2026:8888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27622" id="CVE-2026-27622" type="cve" title="CVE-2026-27622"/>
      <reference href="https://bugzilla.redhat.com/2444251" id="2444251" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8888.html" id="ALSA-2026:8888" type="self" title="ALSA-2026:8888"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="openexr" version="3.1.1" release="3.el9_7.1" epoch="0" arch="s390x" src="openexr-3.1.1-3.el9_7.1.src.rpm">
          <filename>openexr-3.1.1-3.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">39df21a5fc7ef57ee282e8aaaafdec56aa80c0a0a6c8f435cc8e03071d47f188</sum>
        </package>
        <package name="openexr-libs" version="3.1.1" release="3.el9_7.1" epoch="0" arch="s390x" src="openexr-3.1.1-3.el9_7.1.src.rpm">
          <filename>openexr-libs-3.1.1-3.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">d591c8126dced2a658881c480c6f7402f2f0272cc1c791513148a297cc92435b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8921</id>
    <title>Important: kernel security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-22 10:40:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
  * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8921" id="RHSA-2026:8921" type="rhsa" title="RHSA-2026:8921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39766" id="CVE-2025-39766" type="cve" title="CVE-2025-39766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68741" id="CVE-2025-68741" type="cve" title="CVE-2025-68741"/>
      <reference href="https://bugzilla.redhat.com/2394648" id="2394648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425046" id="2425046" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8921.html" id="ALSA-2026:8921" type="self" title="ALSA-2026:8921"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="rv" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>rv-5.14.0-611.49.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">0a109a95629a33356ddb89d39781ce8e6d1c04e7c7ffafe88fff77e9add21465</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.49.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">349b108f7d7428be27c65870df30c34b26f5fb76ef588068c5daf3ff8bdb3cbe</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.49.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">425a6df9c8235bec122478247f94d12f1e9981a47ff6c50fbb05ee2ea6dabcc0</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>perf-5.14.0-611.49.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">53ca138e0b92759bfb4c448d016c9778a59341a0fae421763a16e9e8a7a41732</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.49.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">74f2a2fcbfbf07c5753100a1b668f93bb2a39c7c22398df35284afa50245deed</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.49.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">83811655f73fa7bd717606c604ce3b44b1884e2d8df2bf800da6c93ff9e5968e</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.49.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">a9926084a4bdede3e1fa74ac01995f825d1e25485d85e9f8b5d74a1a32ad80fd</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.49.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ab85abc3064d37bc7b1ea5de959453d6cdf4e84cd161dc33730a9e2dbb73c2f2</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.49.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">c0b50cba37e5ff7d4389fac566e01bf90e357db50df8d2b4218d60ec27ccc1a7</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.49.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">c74519827a230717c8658f839cc48d1fd50d49e5550ac73df65a399d844b3f85</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.49.1.el9_7.noarch.rpm</filename>
          <sum type="sha256">c83f9e13787b632d6cfad0ac4141fe053370f434b21b166409645776594249a7</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.49.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d2d64266ab8aa22fd61cc3c68741c4f4172d33044b46340efc35cd8483a66b7c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9044</id>
    <title>Important: osbuild-composer security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-22 11:48:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9044" id="RHSA-2026:9044" type="rhsa" title="RHSA-2026:9044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-9044.html" id="ALSA-2026:9044" type="self" title="ALSA-2026:9044"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="osbuild-composer-worker" version="149" release="5.el9_7.alma.3" epoch="0" arch="s390x" src="osbuild-composer-149-5.el9_7.alma.3.src.rpm">
          <filename>osbuild-composer-worker-149-5.el9_7.alma.3.s390x.rpm</filename>
          <sum type="sha256">5bcdcf38ce84047cedb9ec8eb4318ecf239c7faeaec9f1e64f995260e6865c09</sum>
        </package>
        <package name="osbuild-composer" version="149" release="5.el9_7.alma.3" epoch="0" arch="s390x" src="osbuild-composer-149-5.el9_7.alma.3.src.rpm">
          <filename>osbuild-composer-149-5.el9_7.alma.3.s390x.rpm</filename>
          <sum type="sha256">6c8ec499a6401a80897d7f6cf7bc00fdddba23550578cc1a65d9ca1b7e10af11</sum>
        </package>
        <package name="osbuild-composer-core" version="149" release="5.el9_7.alma.3" epoch="0" arch="s390x" src="osbuild-composer-149-5.el9_7.alma.3.src.rpm">
          <filename>osbuild-composer-core-149-5.el9_7.alma.3.s390x.rpm</filename>
          <sum type="sha256">e55023037f7788adf9b874ea855c60ea087e76205ce3a088788bc0cf96305256</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9683</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-30 07:12:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance key generation (CVE-2026-34268)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9683" id="RHSA-2026:9683" type="rhsa" title="RHSA-2026:9683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-9683.html" id="ALSA-2026:9683" type="self" title="ALSA-2026:9683"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.492.b09" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.492.b09-2.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.492.b09-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">0ccee35395ffe604d8886b639b589843677ebace71c735c1683d811512e3200f</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.492.b09" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.492.b09-2.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.492.b09-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">3fa31ffff0763b43fbea8339176d9fdad884cf093de4a2f743321093fb020d2f</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.492.b09" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.492.b09-2.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.492.b09-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">5cc7093a8391bcb1585e4f1166b4f4520cb555ae53ebfced55cf1236413a1f29</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.492.b09" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.492.b09-2.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.492.b09-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">7046093c1223c9b7c4c6dfb3ca6343d521b055ff0bd475bd13d8ccf17dcc8d32</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.492.b09" release="2.el9.alma.1" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.492.b09-2.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.492.b09-2.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">dc79cdf7d90f68390010e0242c192dc05a92419e6943c16be514d56de4c5e322</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.492.b09" release="2.el9.alma.1" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.492.b09-2.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.492.b09-2.el9.alma.1.noarch.rpm</filename>
          <sum type="sha256">f097a508a6d3cac0894d895d61163ea40cc422518b3b44b9859c670a0cc3640b</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.492.b09" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.492.b09-2.el9.alma.1.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.492.b09-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f5062663f397143ee0795f14681641c000b0e003ae0c3da0a2f61b5ac3d26e7b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9686</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-28 13:17:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9686" id="RHSA-2026:9686" type="rhsa" title="RHSA-2026:9686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-9686.html" id="ALSA-2026:9686" type="self" title="ALSA-2026:9686"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="java-17-openjdk" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">0e184b7ab1be4104bac1cfb07b0c93fb7f0de630dc886d8a7b3adfae4e69ce56</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">2644b58722335fc9f17dbf252e7c7e0768e209e988516d60374daf39cc893eac</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">449945fd1210db1ee1e61ce3c71f71a186c40df063b9656fbb78f9c447cb485d</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">79c4b5fc2acaf2dcb6dc9fe510c49c1472348d443e515b93cd8461cc0b139cc0</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">84642bc63328f65f9c938d5599baf21d8b525e2bf60cd3c0a6909159c36fc65d</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">97169f38da35a9a4e11fd97936bb17777039faa77c21a6a939a8ead339553482</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b49dcfdd9554605894b45be12c97a90e04aadf9fd302b0add91d5ddc09f990a0</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">beb19acca3075e23a78f75d5204eb421dda1f60c6a0714cf34a02e00abd25b74</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d7080bf1483f80e820c82c521f288b6fa20ceaa73b8a2d2078cf81f4efbe7eb7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9689</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-30 07:19:53"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


Bug Fix(es):  

  * When copying files, OpenJDK 21 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 21 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169617, AlmaLinux-169951, AlmaLinux-169952, AlmaLinux-169942, AlmaLinux-169953, AlmaLinux-169945)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9689" id="RHSA-2026:9689" type="rhsa" title="RHSA-2026:9689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-9689.html" id="ALSA-2026:9689" type="self" title="ALSA-2026:9689"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="java-21-openjdk-static-libs" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">0b0031ad32a68b7c2d3a56f6d7d0685927f8be5cb358f7910bab90e0c78f24b0</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">120020aa1c6daf8daec5d298db161136ef16db30893c69451d5997bc2596c1fe</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">171787688399ffd95ff98449b511fa9d0b7e64354da3bc3d5f6b76a03c3b2539</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">552b56693c35c2cb26eddc91e6bf6781a8cce294562936eee6d02e209dcd17b2</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">8308885287e890ea387256394577733142fb37077c2c34287946784762dae467</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">84b947f05c2f3e3add0e38f97558b918e8d04ec0278547f1ebe5de87a6c39c77</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a7229dae40fad3bdf84eeafa75da1d7d186662e2f6dd91f36b81330deeecafe7</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b5a1dc5068e3e105dc4d9d089da7e8a81168753f4867d88b1cac80de9bda645b</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ea1b472bd414f29344eb5d2de7148061957d13f26174a7113fd83c31babc8540</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9692</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2026-04-22 00:00:00"/>
    <updated date="2026-04-24 10:02:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43213)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43214)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43457)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43511)
  * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-46299)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20608)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20635)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20636)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20644)
  * webkitgtk: A remote attacker may be able to cause a denial-of-service (CVE-2026-20652)
  * webkitgtk: A website may be able to track users through Safari web extensions (CVE-2026-20676)
  * webkitgtk: Processing maliciously crafted web content may bypass Same Origin Policy (CVE-2026-20643)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20664)
  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-20665)
  * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2026-20691)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28857)
  * webkitgtk: A malicious website may be able to process restricted web content outside the sandbox (CVE-2026-28859)
  * webkitgtk: Visiting a maliciously crafted website may lead to a cross-site scripting attack (CVE-2026-28871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9692" id="RHSA-2026:9692" type="rhsa" title="RHSA-2026:9692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43213" id="CVE-2025-43213" type="cve" title="CVE-2025-43213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43214" id="CVE-2025-43214" type="cve" title="CVE-2025-43214"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43457" id="CVE-2025-43457" type="cve" title="CVE-2025-43457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43511" id="CVE-2025-43511" type="cve" title="CVE-2025-43511"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46299" id="CVE-2025-46299" type="cve" title="CVE-2025-46299"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20608" id="CVE-2026-20608" type="cve" title="CVE-2026-20608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20635" id="CVE-2026-20635" type="cve" title="CVE-2026-20635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20636" id="CVE-2026-20636" type="cve" title="CVE-2026-20636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20643" id="CVE-2026-20643" type="cve" title="CVE-2026-20643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20644" id="CVE-2026-20644" type="cve" title="CVE-2026-20644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20652" id="CVE-2026-20652" type="cve" title="CVE-2026-20652"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20664" id="CVE-2026-20664" type="cve" title="CVE-2026-20664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20665" id="CVE-2026-20665" type="cve" title="CVE-2026-20665"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20676" id="CVE-2026-20676" type="cve" title="CVE-2026-20676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20691" id="CVE-2026-20691" type="cve" title="CVE-2026-20691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28857" id="CVE-2026-28857" type="cve" title="CVE-2026-28857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28859" id="CVE-2026-28859" type="cve" title="CVE-2026-28859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28871" id="CVE-2026-28871" type="cve" title="CVE-2026-28871"/>
      <reference href="https://bugzilla.redhat.com/2448781" id="2448781" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448782" id="2448782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448786" id="2448786" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448787" id="2448787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448788" id="2448788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448789" id="2448789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448790" id="2448790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448791" id="2448791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448792" id="2448792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448793" id="2448793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448794" id="2448794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453000" id="2453000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453001" id="2453001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453002" id="2453002" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453003" id="2453003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453004" id="2453004" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453006" id="2453006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453008" id="2453008" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-9692.html" id="ALSA-2026:9692" type="self" title="ALSA-2026:9692"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="webkit2gtk3-jsc-devel" version="2.52.3" release="0.el9_7.1" epoch="0" arch="s390x" src="webkit2gtk3-2.52.3-0.el9_7.1.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.52.3-0.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">15ecf9c3aa3e6c86fd66ab26e43bd6d44a52634ffa9ef5aec0692da1a1a54589</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.52.3" release="0.el9_7.1" epoch="0" arch="s390x" src="webkit2gtk3-2.52.3-0.el9_7.1.src.rpm">
          <filename>webkit2gtk3-jsc-2.52.3-0.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">20b3e5a761e3da507d57e57f3f32b32da91d817254fb3483816ebc31d22bb049</sum>
        </package>
        <package name="webkit2gtk3" version="2.52.3" release="0.el9_7.1" epoch="0" arch="s390x" src="webkit2gtk3-2.52.3-0.el9_7.1.src.rpm">
          <filename>webkit2gtk3-2.52.3-0.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">acb008799ea3adfd55970440cee5fac33a2bb18861293e94af8e3baead4e197e</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.52.3" release="0.el9_7.1" epoch="0" arch="s390x" src="webkit2gtk3-2.52.3-0.el9_7.1.src.rpm">
          <filename>webkit2gtk3-devel-2.52.3-0.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">f4e785122a8dc6df9d7839aae4c6eb7da4c6f2c25f1b8a99c420e5a39f57ce22</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9693</id>
    <title>Important: java-25-openjdk security update</title>
    <issued date="2026-04-22 00:00:00"/>
    <updated date="2026-04-24 09:58:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-25-openjdk security update</summary>
    <description>The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improved Arena allocations (CVE-2026-22008)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


This release also updates a number of third-party libraries included in the JDK. The libraries themselves are affected by the following CVEs, but this is not a statement that the JDK itself is affected:  

  * giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)
  * libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636)
  * libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)


Bug Fix(es):  

  * When copying files, OpenJDK 25 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 25 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169939, AlmaLinux-169937)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9693" id="RHSA-2026:9693" type="rhsa" title="RHSA-2026:9693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22008" id="CVE-2026-22008" type="cve" title="CVE-2026-22008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26740" id="CVE-2026-26740" type="cve" title="CVE-2026-26740"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33416" id="CVE-2026-33416" type="cve" title="CVE-2026-33416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33636" id="CVE-2026-33636" type="cve" title="CVE-2026-33636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-9693.html" id="ALSA-2026:9693" type="self" title="ALSA-2026:9693"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="java-25-openjdk-javadoc-zip" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-javadoc-zip-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">057468ec7b712ec74d3d7935240387409293f778096580965bb4139cc42828d2</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">0d7b95c6f527cc94764583b79f9672ea2465204ecf11d12bea53f129d7640764</sum>
        </package>
        <package name="java-25-openjdk-jmods" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-jmods-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">12d3ed3ba4ee6e3baf875bbcbbbad70c4ecb4171bb17b9c933b651ba793ec401</sum>
        </package>
        <package name="java-25-openjdk-devel" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-devel-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">37acb35fda7bcb244c8b7b0d6114efd64bc8c79b0d7e826c4f9143820e723ada</sum>
        </package>
        <package name="java-25-openjdk-javadoc" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-javadoc-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">47ab2506a579e1274a99bb1dc3c801ba12aec15f416df980876cb4750420d9d8</sum>
        </package>
        <package name="java-25-openjdk-static-libs" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-static-libs-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">4ba760a5ca22175953cb8ebaa5d00a698ba49ec58e619da6abb90cd59b3d0e76</sum>
        </package>
        <package name="java-25-openjdk-demo" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-demo-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">5702d9ba4a81b5e9477ebd88608766162c4dffa9a3528d09b9060ca4681afedd</sum>
        </package>
        <package name="java-25-openjdk" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">69d7e9c1bc3cbce3accdd671292f1abb02cb078c69a081dbbdbf350a611cae79</sum>
        </package>
        <package name="java-25-openjdk-headless" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-headless-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">801f0f1d6cbbd929f43d2456f0a72c338c7757222e15bb56cf520bf671342397</sum>
        </package>
        <package name="java-25-openjdk-src" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-src-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a173b2dd77b50e9dae14333e81988b2f1ea71aa13573716fd950fb658a59fdc3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A002</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-01 00:00:00"/>
    <updated date="2026-05-01 19:09:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2460538" id="show_bug.cgi?id=2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-A002.html" id="ALSA-2026:A002" type="self" title="ALSA-2026:A002"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-appstream-rpms__9_7_default">
        <name>almalinux-9-for-s390x-appstream-rpms__9_7_default</name>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-611.49.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">094cd3bfb9e318a7d8b7781c8a15cb00aebe27de8395a41384e28bbe9cdd06b7</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>python3-perf-5.14.0-611.49.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">21438e6693f8ef927de3b521dd627e20796195eb775b9e4f298b5c61ad0ee34b</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-611.49.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">6c59f6c7a610725713c7e20655d9386e1d450156d28723d296597234b0c567d9</sum>
        </package>
        <package name="rv" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>rv-5.14.0-611.49.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">6c8058b301b5b8cf13063e3e2d13b533e7cafcd16f2766f28ec1e992923500d6</sum>
        </package>
        <package name="rtla" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>rtla-5.14.0-611.49.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">7addbf99eca07ad4139c176d33e3c3a547401a85f098bdab17abb67e55d1f9f0</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-611.49.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">a9e190b0e1b77c9f57460c272e27f8f180b7de1b931e6ded27a2eaae1d7f8b14</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="noarch" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-doc-5.14.0-611.49.2.el9_7.noarch.rpm</filename>
          <sum type="sha256">c459d496f39361e45ef828c9e9d77a285a7e104b37109fcdf35a4c3a543e864e</sum>
        </package>
        <package name="perf" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>perf-5.14.0-611.49.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">d2bf41f5de3bf785b06960d4da282e99eb3e1d6343f8ae798d3ecbb61c8f2a31</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-devel-5.14.0-611.49.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">e44109bbd4a4f0b7e670c5e5830f77db2829375ee0c10b16394386815f6cacbd</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-debug-devel-5.14.0-611.49.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">e61155241a9468c284f3b9ee53af5960e887fdcc876a07b846d1333a63e82247</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-headers-5.14.0-611.49.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">efdd96eacceeb6b2f452ba53125e8d2d3bb845321285e0045086453e0ac66b42</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-devel-matched-5.14.0-611.49.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">f89ed967993bd7c9df85b892c97a0e8d797213a6546861c4ff12c3b5822b6235</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>